"Spring Security" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Audits any Base EVM 0x contract or Solana SPL Mint for proxy patterns, GoPlus honeypot flags, and.
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.
Authorized security scans, evidence, fix prompts and retests for AI-built web apps.
Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.
Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Score any public site's HTTPS, TLS certificate and security headers, with plain fixes. No auth.
Scans an MCP server for security gaps before your agent connects. Free tier, no signup.
Argues against a security finding or a draft bug bounty report before you submit it.
Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching.
Offline methodology engine for authorized penetration testing, CTF, and security research.
Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Kostenlose Sicherheits-Checks ohne Konto: SPF/DKIM/DMARC, Mails, Links, Webseiten, Passwort-Leaks.
Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.
Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.