"Tools for React and JavaScript Web Development" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
25 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
Pay-per-call agent tools: PDF, OCR, translation, news search, prediction markets, web, chain reads.
Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade.
Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.
Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.
Production-safety audits for AI-generated code, with a fix for every finding.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Score any public site's HTTPS, TLS certificate and security headers, with plain fixes. No auth.
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Read-only agent-commerce audit, upgrade verification, diagnosis and x402 probing.
Offline methodology engine for authorized penetration testing, CTF, and security research.
Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
