"Local AI Agent Toolkit" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
20 domain recon tools for AI agents: DNS, SSL, headers, email, subdomains, lookalikes, changes.
Free AI security tools: injection payloads, OWASP LLM mapper, ADLC release planner, test builder.
Production-safety audits for AI-generated code, with a fix for every finding.
Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Read-only agent-commerce audit, upgrade verification, diagnosis and x402 probing.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Manufacturer-cited router default logins and compliance check, plus MAC/OUI vendor lookup. Free.
Scan what a public site or AI-built app exposes. Returns a signed, exploitability-graded claim.
Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Scan any public URL for hidden instructions aimed at AI agents (prompt injection). Free, no auth.
35-probe LLM/agent security red-team scan (injection, jailbreak, MCP abuse) with report.
Scan a page for hidden prompt-injection payloads targeting AI agents.
Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
Feature-Policy feature count, value discarded
Via HTTP/1.1 hop count, value discarded
LM hash 16-hex shape, value discarded
