"Creating the Best General-Purpose Agent" matching MCP connectors:

Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).

Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools

Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...

Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.

Free front-end security check for any website: a grade plus the secrets and keys it exposes.

Scan agent skills and MCP servers for malicious patterns before you load them

FEDLIN ScannersA

com.fedlin

Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.

agentreadyA

io.github.msanchezgrice

Scan any public site for AI-agent visibility; get scored findings, a machine-readable fix pack, and

Port Scanner APIA

com.portscan

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

lookup-disclose-ioA

io.github.disclose

Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).

Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.

Five free MCP tools, including proof-before-payment preview, plus one authorized x402 pack.

Programmatic control of the Hiro security platform: scans, tasks, plans, and approvals.

Browser QA agent that won't return a false green: verified PASS/FAIL + access-control probing.

revensi

com.revensi

MCP server for the Revensi API. Scan domains from any MCP client.