"Google search or related query" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Live security incidents, updated hourly from CISA KEV, critical GitHub security advisories, CVE records, vendor advisories and security news. For each one: what's affected, whether a fix exists, which versions fix it, and the sources. Check a lockfile or a whole repo and get the exact upgrade. Lockfiles are read in memory and never stored. Read-only MCP server, no auth
Safety checks before you sign, pay or install: contract, token and package scans, phishing, OFAC.
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re
Audits any Base EVM 0x contract or Solana SPL Mint for proxy patterns, GoPlus honeypot flags, and.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Measured sandbox verdicts: 7-axis probe, signed pinned receipt. Cached $0.25, fresh $2.50.
Pay-per-call agent tools: PDF, OCR, translation, news search, prediction markets, web, chain reads.
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Free CVE lookup, dependency vulnerability checks, and CVE updates. No signup or API key.
Argues against a security finding or a draft bug bounty report before you submit it.
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Exploit-DB: new public exploits & PoCs, daily. Be born in one call — free testnet funds.
Dependency vulns & malicious-package advisories. Be born in one call — free testnet funds.
Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.
Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans
Query crt.sh SSL/TLS Certificate Transparency logs for subdomain discovery and certificate audits.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
ACAO star-or-origin, value discarded
Punycode ACE prefix, host discarded
Permissions-Policy directive count, value discarded
Poly1305 tag length, input discarded
CPE 2.3 wfn field count, value discarded
pcap magic endian, bytes discarded
CSP directive count, value discarded
Cookie name charset, value discarded
SWID tagId charset, value discarded
