"How to use personal browser with cookies enabled" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.
Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F: score, present and missing headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy), per-header findings with copy-paste fix values, and cookie flag issues. Passive, SSRF-guarded. Pay-per-call via x402 ($0.01 USDC on Base); initialize and tools/list are free.
Parallel-burst abuse testing for agent APIs with replayable evidence packs.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.
Operate simulations and inspect retained evidence with Firedrill.
Production-safety audits for AI-generated code, with a fix for every finding.
Security tools for coding agents, with dependency advisory audits and structured remediation evidence. Free advisory intelligence is available; optional hosted security tools require an Offense API key and prepaid credit.
Exploited vulnerabilities, critical CVEs, breaches and AI security incidents, with primary sources.
Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.
Run real, auto-recovered cloud attacks on AWS, Azure and GCP to test your defenses.
Scan text, web pages and MCP tool definitions for prompt injection before your agent reads them. Risk score, verdict, exact spans. Free MCP tool; paid calls use x402 USDC on Base. Built by Crypto Money Maker. https://youraitools.co/guides
Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.
Scan a public GitHub repo, explain risks, get fix prompts and rescan to confirm fixes.
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching.
Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.
WHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.
