"SearXNG - Open Source Metasearch Engine" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Offline methodology engine for authorized penetration testing, CTF, and security research.
Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase
LLM agent security review: live injection/jailbreak probes plus a static audit of missing guardrails
Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.
Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Scan your home network and local machine for security risks, open ports, weak Wi-Fi, unknown devices. Providing with a trust score and clear explanations.
Security scans for AI-built apps: leaked keys, open Supabase RLS, vulnerable packages, live sites.
Security checks for apps built with AI: leaked keys, open routes, database rules, each with a fix.
