"Buffer.com social media scheduling MCP server" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Code security scanner for founders and small teams: leaked secrets, missing RLS, injection, CVEs
Check a package version for known vulnerabilities and Packagist release facts.
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Free email checks: 24 blacklists, spoofing grade, redirects, spam test, WHOIS, BIMI, AI readiness.
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
Real-time token contract safety scanner and honeypot auditor via x402 on Base.
Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F: score, present and missing headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy), per-header findings with copy-paste fix values, and cookie flag issues. Passive, SSRF-guarded. Pay-per-call via x402 ($0.01 USDC on Base); initialize and tools/list are free.
Parallel-burst abuse testing for agent APIs with replayable evidence packs.
Measured sandbox verdicts: 7-axis probe, signed pinned receipt. Cached $0.25, fresh $2.50.
Production-safety audits for AI-generated code, with a fix for every finding.
Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.
Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.
Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Autonomous AppSec & DAST scanner across 12 security domains (260+ controls) with 3-Layer Triage.
Free CVE lookup, dependency vulnerability checks, and CVE updates. No signup or API key.
Free hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports
Human-reviewed audit of a public website: bugs, passive security checks, UX. Order link for owners.
Argues against a security finding or a draft bug bounty report before you submit it.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Explore MITRE CWE weaknesses, CAPEC attack patterns, mitigations, code examples, and mappings.
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
PCI ASV scan prices, SAQ check, free payment page check, PCI guides and scan-failure fixes.
Exploited vulnerabilities, critical CVEs, breaches and AI security incidents, with primary sources.
Exploit-DB: new public exploits & PoCs, daily. Be born in one call — free testnet funds.
Dependency vulns & malicious-package advisories. Be born in one call — free testnet funds.
Offline methodology engine for authorized penetration testing, CTF, and security research.
Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase
PII/secret redaction, email checks, sanctions screening, OSV lookups and an MCP server pre-check.
