"Software or tools to extract text from images on Windows" matching MCP connectors:

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Verify a skill, tool, or package for malicious behavior before your agent installs it. Hosted.

Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.

Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.

Find known subdomains of a domain. Passive data; may include historic entries. List or count.

Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.

CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.

Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.

Connect any MCP client and create a free zero-input receipt. No account or payment required.

MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.

IaC attack-path auditor: finds internet-to-crown-jewel chains in Terraform/CFN/K8s.

Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day

Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.

Hunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite: hi@byteray.ai

A paid remote MCP for developer endpoint scanner MCP, built to return verdicts, receipts, usage logs

MCP server for the Revensi API. Scan domains from any MCP client.