"Simple HTTP server or client implementation" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Offline methodology engine for authorized penetration testing, CTF, and security research.
Router default logins, compliance index, MAC/OUI lookup. Reads free; submit_correction is Pro.
Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...
Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
Experimental MCP server for current empirical verification of explicit public HTTPS endpoint claims.
Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.
Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Check if an MCP server tool changed or hides injection patterns before you trust it.
Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.
Via HTTP/1.1 hop count, value discarded
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.
ACAO star-or-origin, value discarded
