"Creating an MCP Server Using an API" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
External checks of TLS, HTTP, email domain, DNS, ports, blocklists and domain expiry
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Authorized security scans, evidence, fix prompts and retests for AI-built web apps.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.
Production-safety audits for AI-generated code, with a fix for every finding.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Argues against a security finding or a draft bug bounty report before you submit it.
Security tools for coding agents, with dependency advisory audits and structured remediation evidence. Free advisory intelligence is available; optional hosted security tools require an Offense API key and prepaid credit.
PCI ASV scan prices, SAQ check, free payment page check, PCI guides and scan-failure fixes.
Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase
Scans an MCP server for security gaps before your agent connects. Free tier, no signup.
PII/secret redaction, email checks, sanctions screening, OSV lookups and an MCP server pre-check.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Scan text, web pages and MCP tool definitions for prompt injection before your agent reads them. Risk score, verdict, exact spans. Free MCP tool; paid calls use x402 USDC on Base. Built by Crypto Money Maker. https://youraitools.co/guides
Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.
Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans
Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Solve reCAPTCHA image grids, text captchas, GeeTest and FunCAPTCHA for AI agents. Free tier.
MCP server for the Vulners.com API
Read-only agent-commerce audit, upgrade verification, diagnosis and x402 probing.
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.
Quick HTTPS/SSL check of any website, cybersecurity glossary and KrakenShield prices.
50-vector prompt-injection, llms.txt poisoning, SSRF & OpenAPI scanner ($1 USDC).
Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.
