"General context or information search" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Live security incidents, updated hourly from CISA KEV, critical GitHub security advisories, CVE records, vendor advisories and security news. For each one: what's affected, whether a fix exists, which versions fix it, and the sources. Check a lockfile or a whole repo and get the exact upgrade. Lockfiles are read in memory and never stored. Read-only MCP server, no auth
Safety checks before you sign, pay or install: contract, token and package scans, phishing, OFAC.
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re
Audits any Base EVM 0x contract or Solana SPL Mint for proxy patterns, GoPlus honeypot flags, and.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Pay-per-call agent tools: PDF, OCR, translation, news search, prediction markets, web, chain reads.
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.
Free CVE lookup, dependency vulnerability checks, and CVE updates. No signup or API key.
Argues against a security finding or a draft bug bounty report before you submit it.
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
ACAO star-or-origin, value discarded
Find subdomains and explore connections between websites through DNS, IPs, certificates and WHOIS data. Supports OAuth and API keys. Requires a paid Profundis plan or purchased credits.
Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.
Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.
Search security findings and contribute versioned, evidence-backed reproduction reports.
Check if an MCP server tool changed or hides injection patterns before you trust it.
Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.
Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.
Search and monitor bug bounty programs and audit contests across ten platforms.
Defensive vulnerability intelligence search across public CVE/NVD and GitHub advisory APIs with CVSS
Certificate Transparency search: subdomains, certificate history and hostname keyword search.
CVE & vulnerability search: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, exploits, patches, versions.
