"Understanding the concept of dependency" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
External checks of TLS, HTTP headers, email domain, DNS and ports, with cause and fix
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Quick HTTPS/SSL check of any website, cybersecurity glossary and KrakenShield prices.
MCP server for the Vulners.com API
Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...
Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…
Experimental MCP server for current empirical verification of explicit public HTTPS endpoint claims.
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).
