"Free image analysis tool" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Security scanner for n8n workflows: 18 rules, OWASP Agentic mapped. Free MCP, paid x402 API.
Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
Free, read-only security scanner for remote MCP servers, before you connect them.
Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.
Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.
Check if an MCP server tool changed or hides injection patterns before you trust it.
Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
TLPTOracle — 17-tool TIBER-EU TLPT framework: scope, threat intel, scenarios, reports.
Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.
Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.
VirusTotal reports for files, URLs, domains and IPs, plus file submission and analysis recovery.
Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day
AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.
