"Generating a series of images using MCP from a sample image" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Danish company data from CVR: owners, management, accounts, credit risk, court cases, bankruptcies.
External checks of TLS, HTTP headers, email domain, DNS and ports, with cause and fix
Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.
Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F: score, present and missing headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy), per-header findings with copy-paste fix values, and cookie flag issues. Passive, SSRF-guarded. Pay-per-call via x402 ($0.01 USDC on Base); initialize and tools/list are free.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
Production-safety audits for AI-generated code, with a fix for every finding.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Argues against a security finding or a draft bug bounty report before you submit it.
Free HTTPS and security header check from Corrie, uptime monitoring for small teams. No auth.
Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
Scan a public GitHub repo, explain risks, get fix prompts and rescan to confirm fixes.
Actively exploited? End of life? Which version fixes it? CVE verdicts for server software.
PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps
LLM agent security review: live injection/jailbreak probes plus a static audit of missing guardrails
Solve reCAPTCHA image grids, text captchas, GeeTest and FunCAPTCHA for AI agents. Free tier.
