"Using Python REPL from an MCP server on Windows" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Real-time token contract safety scanner and honeypot auditor via x402 on Base.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Scans an MCP server for security gaps before your agent connects. Free tier, no signup.
Read-only agent-commerce audit, upgrade verification, diagnosis and x402 probing.
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…
Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.
Check if an MCP server tool changed or hides injection patterns before you trust it.
Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day
Scan a page for content planted to hijack an AI browsing/shopping agent before it acts on the page.
Discover a site's pages from its sitemap and sample them for WCAG and prompt-injection risk.
Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.
Ask about your Kodem Security data and act on findings in plain language, with your permissions.
Detect any website's tech stack, DNS and email security, subdomains and sitemap from your agent.
Email OSINT Tool - Find Registered Accounts on 120+ Sites
CVE triage in one call: NVD, CVSS, CISA KEV, EPSS, public exploits and an explained risk score.
Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.
A skeptical senior-engineer code reviewer over MCP: risk-scans unified diffs, flags AI-generated-code tells, reports complexity hotspots, scans for leaked secrets, and runs an OWASP security pass — real analyzers, no external APIs. Free tier, no signup.
