"Fetching a URL in programming or web development" matching MCP connectors:

TanodA

dev.tanod

Pay-per-call agent tools: PDF, OCR, translation, news search, prediction markets, web, chain reads.

Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.

Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.

Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.

Production-safety audits for AI-generated code, with a fix for every finding.

AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.

Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).

Argues against a security finding or a draft bug bounty report before you submit it.

Read-only agent-commerce audit, upgrade verification, diagnosis and x402 probing.

Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.

Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.

Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...

Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Check a live app you own for public databases, leaked keys and exposed files.

Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.

Scan any public URL for hidden instructions aimed at AI agents (prompt injection). Free, no auth.

Explain a regex in plain English and detect catastrophic backtracking risk.

Scan a page for hidden prompt-injection payloads targeting AI agents.

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes