"Finding API Documentation for METRC" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
External checks of TLS, HTTP, email domain, DNS, ports, blocklists and domain expiry
Code security scanner for founders and small teams: leaked secrets, missing RLS, injection, CVEs
Live security incidents, updated hourly from CISA KEV, critical GitHub security advisories, CVE records, vendor advisories and security news. For each one: what's affected, whether a fix exists, which versions fix it, and the sources. Check a lockfile or a whole repo and get the exact upgrade. Lockfiles are read in memory and never stored. Read-only MCP server, no auth
Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
CVSS Calculator MCP is a lightweight MCP server that enables AI agents to accurately calculate CVSS Base Scores and severity ratings. Supports CVSS 2.0, 3.0, 3.1, and 4.0 for vulnerability assessment, penetration testing, bug bounty hunting, and security reporting.
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re
Audits any Base EVM 0x contract or Solana SPL Mint for proxy patterns, GoPlus honeypot flags, and.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Parallel-burst abuse testing for agent APIs with replayable evidence packs.
Test your AI agents for security and safety weaknesses, and re-verify the fixes.
Authorized security scans, evidence, fix prompts and retests for AI-built web apps.
Measured sandbox verdicts: 7-axis probe, signed pinned receipt. Cached $0.25, fresh $2.50.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Production-safety audits for AI-generated code, with a fix for every finding.
Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Human-reviewed audit of a public website: bugs, passive security checks, UX. Order link for owners.
Argues against a security finding or a draft bug bounty report before you submit it.
Free HTTPS and security header check from Corrie, uptime monitoring for small teams. No auth.
Security tools for coding agents, with dependency advisory audits and structured remediation evidence. Free advisory intelligence is available; optional hosted security tools require an Offense API key and prepaid credit.
PCI ASV scan prices, SAQ check, free payment page check, PCI guides and scan-failure fixes.
Offline methodology engine for authorized penetration testing, CTF, and security research.
Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase
Scans an MCP server for security gaps before your agent connects. Free tier, no signup.
