"Resources or guides for pull request code reviews" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
Production-safety audits for AI-generated code, with a fix for every finding.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Argues against a security finding or a draft bug bounty report before you submit it.
Offline methodology engine for authorized penetration testing, CTF, and security research.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
MCP server for the Vulners.com API
Threat modeling, code, API & cloud security, shadow-AI & compliance governance.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.
WHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
Check a live app you own for public databases, leaked keys and exposed files.
