"Free Network Graph Visualization Tools (No Account Required)" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
34 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Monitor CVEs, packages, domains and IPs. CVE/EPSS/KEV, SBOM, DNS/TLS, IP lookups. No key, x402.
30 security tools + the Vigia agent to audit MCP servers before you connect.
The main MCP server has 10 tools, including six public, read-only CVE tools, site search and page reading. CVE results include source software/version evidence and available CISA KEV and dated FIRST EPSS data. The separate request_security_test action requires an agent key, consent and authorization. A no-account, read-only CVE-only endpoint is https://excessionlabs.ai/mcp/cve. Docs: https://excessionlabs.ai/cve-intelligence/.
Grade a page's HTTP security headers, search penetration testing guides and send a pentest request for a person. The read tools need no authentication; request_pentest needs a free agent key.
Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
30 security tools + the Vigía agent to audit MCP servers for prompt injection, SSRF, leaked secrets, auth bypass and more — scan before you connect.
Live security incidents, updated hourly from CISA KEV, critical GitHub security advisories, CVE records, vendor advisories and security news. For each one: what's affected, whether a fix exists, which versions fix it, and the sources. Check a lockfile or a whole repo and get the exact upgrade. Lockfiles are read in memory and never stored. Read-only MCP server, no auth
Free email checks: 24 blacklists, spoofing grade, redirects, spam test, WHOIS, BIMI, AI readiness.
Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase
Prompt-injection scanner for agents: risk score, categories and spans for text, pages, MCP tools
Scan text, web pages and MCP tool descriptions for prompt injection and tool poisoning before your agent trusts them. Free preview and MCP tool scan_text; full scans via x402 at $0.003 USDC on Base.
Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.
Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F: score, present and missing headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy), per-header findings with copy-paste fix values, and cookie flag issues. Passive, SSRF-guarded. Pay-per-call via x402 ($0.01 USDC on Base); initialize and tools/list are free.
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Pay-per-call agent tools: PDF, OCR, translation, news search, prediction markets, web, chain reads.
Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Passive security check of a domain: headers, TLS, DNS and email authentication. No login needed.
Free hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports
Free CVE lookups, package checks and patch priorities from public sources. No account or API key.
Free Slither scan of Solidity contracts for AI coding agents; optional paid report (1 USDC, x402).
Review saved CyberLens website and repository scans through read-only OAuth tools.
Supply chain security: free npm lockfile malware check, paid scan of packages, skills, MCP servers.
Free CVE lookup, dependency vulnerability checks, and CVE updates. No signup or API key.
Agent security: prompt injection, PII & secret scans, TLS/header/CORS audits, MCP checks. Free.
Router default logins, compliance index, MAC/OUI lookup. Reads free; submit_correction is Pro.
Human-reviewed audit of a public website: bugs, passive security checks, UX. Order link for owners.
Free HTTPS and security header check from Corrie, uptime monitoring for small teams. No auth.
Vulnerability records: CVE, GHSA, CISA KEV, EPSS and vendor fixes in one place. No key needed.
Exploit-DB: new public exploits & PoCs, daily. Be born in one call — free testnet funds.
Dependency vulns & malicious-package advisories. Be born in one call — free testnet funds.
Scan text, web pages and MCP tool definitions for prompt injection before your agent reads them. Risk score, verdict, exact spans. Free MCP tool; paid calls use x402 USDC on Base. Built by Crypto Money Maker. https://youraitools.co/guides
PCI ASV scan prices, SAQ check, free payment page check, PCI guides and scan-failure fixes.
Scans an MCP server for security gaps before your agent connects. Free tier, no signup.
Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.
Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers
Solve reCAPTCHA image grids, text captchas, GeeTest and FunCAPTCHA for AI agents. Free tier.
