"Finding people on GitHub" matching MCP connectors:

pwned.coffeeA

coffee.pwned

Live security incidents, updated hourly from CISA KEV, critical GitHub security advisories, CVE records, vendor advisories and security news. For each one: what's affected, whether a fix exists, which versions fix it, and the sources. Check a lockfile or a whole repo and get the exact upgrade. Lockfiles are read in memory and never stored. Read-only MCP server, no auth

Real-time token contract safety scanner and honeypot auditor via x402 on Base.

Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F: score, present and missing headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy), per-header findings with copy-paste fix values, and cookie flag issues. Passive, SSRF-guarded. Pay-per-call via x402 ($0.01 USDC on Base); initialize and tools/list are free.

Production-safety audits for AI-generated code, with a fix for every finding.

Argues against a security finding or a draft bug bounty report before you submit it.

Scan text, web pages and MCP tool definitions for prompt injection before your agent reads them. Risk score, verdict, exact spans. Free MCP tool; paid calls use x402 USDC on Base. Built by Crypto Money Maker. https://youraitools.co/guides

Solidity vulnerability scan (Slither) for AI agents. Free preview; full report 1 USDC on Solana x402

Run real, auto-recovered cloud attacks on AWS, Azure and GCP to test your defenses.

Scan text, web pages and MCP tool descriptions for prompt injection and tool poisoning before your agent trusts them. Free preview and MCP tool scan_text; full scans via x402 at $0.003 USDC on Base.

Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.

Scan a public GitHub repo, explain risks, get fix prompts and rescan to confirm fixes.

PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps

Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.

ACAO star-or-origin, value discarded

Punycode ACE prefix, host discarded

Permissions-Policy directive count, value discarded

Poly1305 tag length, input discarded

CPE 2.3 wfn field count, value discarded

pcap magic endian, bytes discarded

CSP directive count, value discarded

Cookie name charset, value discarded

SWID tagId charset, value discarded

HSTS max-age band, value discarded

TE / transfer-encoding token shape

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.

Scan a page for content planted to hijack an AI browsing/shopping agent before it acts on the page.

Verify a vuln report's file/line/function claims against a real GitHub repo.

Email OSINT Tool - Find Registered Accounts on 120+ Sites

Scan MCP servers for tool poisoning, hidden instructions and silent tool changes. Runs on Apify.