"Using an MCP server to generate structured ADK agents" matching MCP connectors:

CVSS Calculator MCP is a lightweight MCP server that enables AI agents to accurately calculate CVSS Base Scores and severity ratings. Supports CVSS 2.0, 3.0, 3.1, and 4.0 for vulnerability assessment, penetration testing, bug bounty hunting, and security reporting.

30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.

Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F: score, present and missing headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy), per-header findings with copy-paste fix values, and cookie flag issues. Passive, SSRF-guarded. Pay-per-call via x402 ($0.01 USDC on Base); initialize and tools/list are free.

EnokiAOAuth

ai.enokilabs

Test your AI agents for security and safety weaknesses, and re-verify the fixes.

Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.

Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).

Security tools for coding agents, with dependency advisory audits and structured remediation evidence. Free advisory intelligence is available; optional hosted security tools require an Offense API key and prepaid credit.

Scans an MCP server for security gaps before your agent connects. Free tier, no signup.

PII/secret redaction, email checks, sanctions screening, OSV lookups and an MCP server pre-check.

Solidity vulnerability scan (Slither) for AI agents. Free preview; full report 1 USDC on Solana x402

Run real, auto-recovered cloud attacks on AWS, Azure and GCP to test your defenses.

Prompt-injection scanner for agents: risk score, categories and spans for text, pages, MCP tools

Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.

Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans

Scan a public GitHub repo, explain risks, get fix prompts and rescan to confirm fixes.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Solve reCAPTCHA image grids, text captchas, GeeTest and FunCAPTCHA for AI agents. Free tier.

Read-only agent-commerce audit, upgrade verification, diagnosis and x402 probing.

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

Scan any public URL for hidden instructions aimed at AI agents (prompt injection). Free, no auth.