"Learning or Writing Code in Python" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Find hidden Unicode in text or files: ASCII smuggling decoded, bidi overrides, look-alike letters.
Code security scanner for founders and small teams: leaked secrets, missing RLS, injection, CVEs
Safety checks before you sign, pay or install: contract, token and package scans, phishing, OFAC.
Live security incidents, updated hourly from CISA KEV, critical GitHub security advisories, CVE records, vendor advisories and security news. For each one: what's affected, whether a fix exists, which versions fix it, and the sources. Check a lockfile or a whole repo and get the exact upgrade. Lockfiles are read in memory and never stored. Read-only MCP server, no auth
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re
Audits any Base EVM 0x contract or Solana SPL Mint for proxy patterns, GoPlus honeypot flags, and.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Find hidden Unicode (zero-width, bidi, tag payloads), homoglyphs and lookalike names in text.
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
Production-safety audits for AI-generated code, with a fix for every finding.
Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Argues against a security finding or a draft bug bounty report before you submit it.
Explore MITRE CWE weaknesses, CAPEC attack patterns, mitigations, code examples, and mappings.
Free CVE lookups, package checks and patch priorities from public sources. No account or API key.
Read AI security guides and lab research, and request an LLM or AI agent security assessment.
Free CVE lookup, dependency vulnerability checks, and CVE updates. No signup or API key.
Vulnerability records: CVE, GHSA, CISA KEV, EPSS and vendor fixes in one place. No key needed.
Dependency vulns & malicious-package advisories. Be born in one call — free testnet funds.
Exploit-DB: new public exploits & PoCs, daily. Be born in one call — free testnet funds.
Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day
Explain a regex in plain English and detect catastrophic backtracking risk.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
ACAO star-or-origin, value discarded
Find subdomains and explore connections between websites through DNS, IPs, certificates and WHOIS data. Supports OAuth and API keys. Requires a paid Profundis plan or purchased credits.
Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Threat modeling, code, API & cloud security, shadow-AI & compliance governance.
Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
IaC attack-path auditor: finds internet-to-crown-jewel chains in Terraform/CFN/K8s.
Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
LeakWatch MCP is a cybersecurity tool designed to help developers and security teams identify exposed sensitive information across public code repositories. It detects potential leaks of API keys, access tokens, passwords, and other confidential credentials, helping organizations assess exposure risks and strengthen their security posture.
Start AgentProof security audits of websites you own or may test, and read reports and findings.
Check if an MCP server tool changed or hides injection patterns before you trust it.
AI code security audits via x402 USDC: $0.01 scans, $0.50 audits, $5 auto-fixes. SAST/SCA.
Look up hosts in the Ohey web malware feed, read CVEs and scan URLs with Ohey's scanner.
Scan websites and code for security, performance and SEO issues from your AI assistant.
