"Understanding Prompts or Prompt Engineering" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Argues against a security finding or a draft bug bounty report before you submit it.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.
Scan any public URL for hidden instructions aimed at AI agents (prompt injection). Free, no auth.
Scan a page for hidden prompt-injection payloads targeting AI agents.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Check if an MCP server tool changed or hides injection patterns before you trust it.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
ACAO star-or-origin, value discarded
Scan text, documents, websites, and MCP metadata for prompt injection and sensitive-data risks.
Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.
Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day
Discover a site's pages from its sitemap and sample them for WCAG and prompt-injection risk.
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
Security scanner for AI agents: prompt injection, leaked secrets, PII, and SSRF-risk URL detection.
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.
Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
