"Understanding the concept of 'handle' in different contexts" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
External checks of TLS, HTTP, email domain, DNS, ports, blocklists and domain expiry
Live security incidents, updated hourly from CISA KEV, critical GitHub security advisories, CVE records, vendor advisories and security news. For each one: what's affected, whether a fix exists, which versions fix it, and the sources. Check a lockfile or a whole repo and get the exact upgrade. Lockfiles are read in memory and never stored. Read-only MCP server, no auth
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Find hidden Unicode (zero-width, bidi, tag payloads), homoglyphs and lookalike names in text.
Test your AI agents for security and safety weaknesses, and re-verify the fixes.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Supply chain security: free npm lockfile malware check, paid scan of packages, skills, MCP servers.
Human-reviewed audit of a public website: bugs, passive security checks, UX. Order link for owners.
Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase
Actively exploited? End of life? Which version fixes it? CVE verdicts for server software.
LLM agent security review: live injection/jailbreak probes plus a static audit of missing guardrails
MCP server for the Vulners.com API
Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.
Quick HTTPS/SSL check of any website, cybersecurity glossary and KrakenShield prices.
Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...
Explain a regex in plain English and detect catastrophic backtracking risk.
Experimental MCP server for current empirical verification of explicit public HTTPS endpoint claims.
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).
Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.
Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.
AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…
Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.
