"US Government Open Data API Aggregator (FEC, SEC, Congress, Lobbying, USAspending)" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
External checks of TLS, HTTP, email domain, DNS, ports, blocklists and domain expiry
Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.
Danish company data from CVR: owners, management, accounts, credit risk, court cases, bankruptcies.
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade.
Authorized security scans, evidence, fix prompts and retests for AI-built web apps.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Production-safety audits for AI-generated code, with a fix for every finding.
Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Free CVE lookup, dependency vulnerability checks, and CVE updates. No signup or API key.
Autonomous AppSec & DAST scanner across 12 security domains (260+ controls) with 3-Layer Triage.
Argues against a security finding or a draft bug bounty report before you submit it.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Security tools for coding agents, with dependency advisory audits and structured remediation evidence. Free advisory intelligence is available; optional hosted security tools require an Offense API key and prepaid credit.
PCI ASV scan prices, SAQ check, free payment page check, PCI guides and scan-failure fixes.
Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase
PII/secret redaction, email checks, sanctions screening, OSV lookups and an MCP server pre-check.
Scan text, web pages and MCP tool definitions for prompt injection before your agent reads them. Risk score, verdict, exact spans. Free MCP tool; paid calls use x402 USDC on Base. Built by Crypto Money Maker. https://youraitools.co/guides
Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.
Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers
US CISA Known Exploited Vulnerabilities (KEV) catalog & active ransomware campaign check.
Solve reCAPTCHA image grids, text captchas, GeeTest and FunCAPTCHA for AI agents. Free tier.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
