"Understanding the Purpose of Research" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Offline methodology engine for authorized penetration testing, CTF, and security research.
Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...
Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
Experimental MCP server for current empirical verification of explicit public HTTPS endpoint claims.
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).
Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.
AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…
Scan a page for content planted to hijack an AI browsing/shopping agent before it acts on the page.
Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.
Hyperion — MCP tool marketplace for AI agents: web, OSINT, security, research via one key.
Security research canary remote MCP server for owned-account testing.
Programmatic control of the Hiro security platform: scans, tasks, plans, and approvals.
