"Information or resources about security" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
25 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Offline methodology engine for authorized penetration testing, CTF, and security research.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.
Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Free, read-only security scanner for remote MCP servers, before you connect them.
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.
Check if an MCP server tool changed or hides injection patterns before you trust it.
