"List of Servers Running as Docker Containers" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.
Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
Free, read-only security scanner for remote MCP servers, before you connect them.
Experimental MCP server for current empirical verification of explicit public HTTPS endpoint claims.
Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.
Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.
Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.
AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog.
Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.
Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.
External security monitoring for Laravel apps: list domains, trigger scans, read issues and fixes.