"Using an MCP server to generate structured ADK agents" matching MCP connectors:

30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.

Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F: score, present and missing headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy), per-header findings with copy-paste fix values, and cookie flag issues. Passive, SSRF-guarded. Pay-per-call via x402 ($0.01 USDC on Base); initialize and tools/list are free.

EnokiAOAuth

ai.enokilabs

Test your AI agents for security and safety weaknesses, and re-verify the fixes.

Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.

Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).

Security tools for coding agents, with dependency advisory audits and structured remediation evidence. Free advisory intelligence is available; optional hosted security tools require an Offense API key and prepaid credit.

Scans an MCP server for security gaps before your agent connects. Free tier, no signup.

PII/secret redaction, email checks, sanctions screening, OSV lookups and an MCP server pre-check.

Solidity vulnerability scan (Slither) for AI agents. Free preview; full report 1 USDC on Solana x402

Run real, auto-recovered cloud attacks on AWS, Azure and GCP to test your defenses.

Prompt-injection scanner for agents: risk score, categories and spans for text, pages, MCP tools

Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.

Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans

Scan a public GitHub repo, explain risks, get fix prompts and rescan to confirm fixes.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Solve reCAPTCHA image grids, text captchas, GeeTest and FunCAPTCHA for AI agents. Free tier.

Read-only agent-commerce audit, upgrade verification, diagnosis and x402 probing.

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

Scan any public URL for hidden instructions aimed at AI agents (prompt injection). Free, no auth.

Scan a page for hidden prompt-injection payloads targeting AI agents.