"Finding Information About Public Places" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F: score, present and missing headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy), per-header findings with copy-paste fix values, and cookie flag issues. Passive, SSRF-guarded. Pay-per-call via x402 ($0.01 USDC on Base); initialize and tools/list are free.
Production-safety audits for AI-generated code, with a fix for every finding.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Human-reviewed audit of a public website: bugs, passive security checks, UX. Order link for owners.
Argues against a security finding or a draft bug bounty report before you submit it.
Scan a public GitHub repo, explain risks, get fix prompts and rescan to confirm fixes.
Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers
Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.
Check a live app you own for public databases, leaked keys and exposed files.
Scan any public URL for hidden instructions aimed at AI agents (prompt injection). Free, no auth.
Experimental MCP server for current empirical verification of explicit public HTTPS endpoint claims.
Verificação de segurança e conformidade de sites: cabeçalhos, TLS, DNS, e-mail, LGPD e pentest.
Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Scan any public site for AI-agent visibility; get scored findings, a machine-readable fix pack, and
Read-only MCP security data: check catalogue, public scan status and your own scan reports.
Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.
Ask about your Kodem Security data and act on findings in plain language, with your permissions.
CVE triage in one call: NVD, CVSS, CISA KEV, EPSS, public exploits and an explained risk score.
Defensive vulnerability intelligence search across public CVE/NVD and GitHub advisory APIs with CVSS
Security research canary remote MCP server for owned-account testing.
Query and retrieve information about various adversarial tactics and techniques used in cyber atta…