"Understanding VS Code Agents or Extensions" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
25 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Production-safety audits for AI-generated code, with a fix for every finding.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Scan any public URL for hidden instructions aimed at AI agents (prompt injection). Free, no auth.
Scan a page for hidden prompt-injection payloads targeting AI agents.
Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Check if an MCP server tool changed or hides injection patterns before you trust it.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
ACAO star-or-origin, value discarded
Formally-verified injection/exfiltration detector for AI agents (MCP-02).
Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.
Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.
Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day