"Packet Capturing Tools or Techniques" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re
Audits any Base EVM 0x contract or Solana SPL Mint for proxy patterns, GoPlus honeypot flags, and.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Pay-per-call agent tools: PDF, OCR, translation, news search, prediction markets, web, chain reads.
Operate simulations and inspect retained evidence with Firedrill.
Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Argues against a security finding or a draft bug bounty report before you submit it.
Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.
Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Free email checks: 24 blacklists, spoofing/BEC grade, redirect tracing, email spam test, WHOIS.
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Check if an MCP server tool changed or hides injection patterns before you trust it.
