"Using voice commands to interact with Claude on desktop" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
CVE with EPSS and CISA KEV, package risk, software EOL, domain and IP reports, pay per call
Sourced data on 66 penetration testing providers: scope, delivery, published prices, retests. Read-only. Excession Labs publishes it and is one of the rows.
30 security tools + the Vigía agent to audit MCP servers for prompt injection, SSRF, leaked secrets, auth bypass and more — scan before you connect.
CVSS Calculator MCP is a lightweight MCP server that enables AI agents to accurately calculate CVSS Base Scores and severity ratings. Supports CVSS 2.0, 3.0, 3.1, and 4.0 for vulnerability assessment, penetration testing, bug bounty hunting, and security reporting.
Real-time token contract safety scanner and honeypot auditor via x402 on Base.
Scan text, web pages and MCP tool descriptions for prompt injection and tool poisoning before your agent trusts them. Free preview and MCP tool scan_text; full scans via x402 at $0.003 USDC on Base.
Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F: score, present and missing headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy), per-header findings with copy-paste fix values, and cookie flag issues. Passive, SSRF-guarded. Pay-per-call via x402 ($0.01 USDC on Base); initialize and tools/list are free.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Parallel-burst abuse testing for agent APIs with replayable evidence packs.
Production-safety audits for AI-generated code, with a fix for every finding.
Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.
Autonomous AppSec & DAST scanner across 12 security domains (260+ controls) with 3-Layer Triage.
Tells your coding agent whether your installed packages need patching, with advice on what to do.
Passive subdomain enumeration from certificate transparency (certspotter, crt.sh) with DNS checks.
Exploited vulnerabilities, critical CVEs, breaches and AI security incidents, with primary sources.
Scan text, web pages and MCP tool definitions for prompt injection before your agent reads them. Risk score, verdict, exact spans. Free MCP tool; paid calls use x402 USDC on Base. Built by Crypto Money Maker. https://youraitools.co/guides
Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.
Run real, auto-recovered cloud attacks on AWS, Azure and GCP to test your defenses.
Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.
Gandoki is a precision-first MCP security scanner featuring 55 detectors, layered evidence verification, AI-assisted false-positive suppression, and read-only credential validation. Discover exposed secrets, debug interfaces, and sensitive files across authorized assets with explainable findings and minimal noise.
PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching.
Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.
Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day
WHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.
Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Connect your AI assistant to Revensi OS agents, workflows, and business data.
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
Operate simulations and inspect retained evidence with Firedrill.
35-probe LLM/agent security red-team scan (injection, jailbreak, MCP abuse) with report.
Security tools for coding agents, with dependency advisory audits and structured remediation evidence. Free advisory intelligence is available; optional hosted security tools require an Offense API key and prepaid credit.
AI agent security audit: red-team probes plus missing-guardrail review with fixes.
Solidity vulnerability scan (Slither) for AI agents. Free preview; full report 1 USDC on Solana x402
Scan a public GitHub repo, explain risks, get fix prompts and rescan to confirm fixes.
Scan your home network and local machine for security risks, open ports, weak Wi-Fi, unknown devices. Providing with a trust score and clear explanations.
Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.
Scan a page for content planted to hijack an AI browsing/shopping agent before it acts on the page.
LeakWatch MCP is a cybersecurity tool designed to help developers and security teams identify exposed sensitive information across public code repositories. It detects potential leaks of API keys, access tokens, passwords, and other confidential credentials, helping organizations assess exposure risks and strengthen their security posture.
