"Top 100 MCP Servers Ranked by Weekly Downloads" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Free CVE lookup, dependency vulnerability checks, and CVE updates. No signup or API key.
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.
Scan text, web pages and MCP tool definitions for prompt injection before your agent reads them. Risk score, verdict, exact spans. Free MCP tool; paid calls use x402 USDC on Base. Built by Crypto Money Maker. https://youraitools.co/guides
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day
Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.
Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.
Hunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite: hi@byteray.ai
CISA KEV status and EPSS scores for CVE IDs, ranked P1/P2/P3 for patching, via Apify.
MEOK MCP Hardening MCP — automated security red-team for any MCP server. Maps OWASP LLM Top 10
Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.
Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.
PentaTrail ASM/CTEM: attack surface discovery, asset inventory, findings by threat level
