"Automated WeChat public account posting tools" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.
Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F: score, present and missing headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy), per-header findings with copy-paste fix values, and cookie flag issues. Passive, SSRF-guarded. Pay-per-call via x402 ($0.01 USDC on Base); initialize and tools/list are free.
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Pay-per-call agent tools: PDF, OCR, translation, news search, prediction markets, web, chain reads.
Operate simulations and inspect retained evidence with Firedrill.
Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.
Free email checks: 24 blacklists, spoofing/BEC grade, redirect tracing, email spam test, WHOIS.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Human-reviewed audit of a public website: bugs, passive security checks, UX. Order link for owners.
Security tools for coding agents, with dependency advisory audits and structured remediation evidence. Free advisory intelligence is available; optional hosted security tools require an Offense API key and prepaid credit.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Prompt-injection scanner for agents: risk score, categories and spans for text, pages, MCP tools
Scan a public GitHub repo, explain risks, get fix prompts and rescan to confirm fixes.
Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers
Agent security: prompt injection, PII & secret scans, TLS/header/CORS audits, MCP checks. Free.
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.
Check a live app you own for public databases, leaked keys and exposed files.
Scan any public URL for hidden instructions aimed at AI agents (prompt injection). Free, no auth.
Experimental MCP server for current empirical verification of explicit public HTTPS endpoint claims.
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
Verificação de segurança e conformidade de sites: cabeçalhos, TLS, DNS, e-mail, LGPD e pentest.
Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Scan any public site for AI-agent visibility; get scored findings, a machine-readable fix pack, and
CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.
Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.
