"MCP servers that work without API keys" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
External checks of TLS, HTTP headers, email domain, DNS and ports, with cause and fix
Passive website security checks, credit balance, card top-up links and published app status.
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Authorized security scans, evidence, fix prompts and retests for AI-built web apps.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Production-safety audits for AI-generated code, with a fix for every finding.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Scan text, web pages and MCP tool definitions for prompt injection before your agent reads them. Risk score, verdict, exact spans. Free MCP tool; paid calls use x402 USDC on Base. Built by Crypto Money Maker. https://youraitools.co/guides
Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.
Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans
Argues against a security finding or a draft bug bounty report before you submit it.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
PCI ASV scanning: live prices, whether you need a scan, a free payment page check, signup links.
Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers
Solve reCAPTCHA image grids, text captchas, GeeTest and FunCAPTCHA for AI agents. Free tier.
MCP server for the Vulners.com API
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
