"Understanding the Concept of LLM Context" matching MCP connectors:

Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.

AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.

Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).

Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...

Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.

Experimental MCP server for current empirical verification of explicit public HTTPS endpoint claims.

Free front-end security check for any website: a grade plus the secrets and keys it exposes.

Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.

Subdomain APIA

app.subdomain

Find known subdomains of a domain. Passive data; may include historic entries. List or count.

Port Scanner APIA

com.portscan

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

MCP server for the Vulners.com API

lookup-disclose-ioA

io.github.disclose

Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).

KernelScanA

io.kernelscan

Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.

MEOK MCP Hardening MCP — automated security red-team for any MCP server. Maps OWASP LLM Top 10

AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.

MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…

Scan a page for content planted to hijack an AI browsing/shopping agent before it acts on the page.

35-probe LLM/agent security red-team scan (injection, jailbreak, MCP abuse) with report.

Test your AI agents for security and safety weaknesses, and re-verify the fixes.

mcp-server

com.pentest-tools

MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.