"Using web fetch functionality or fetching data from the web" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.
Pay-per-call agent tools: PDF, OCR, translation, news search, prediction markets, web, chain reads.
Scan what a public site or AI-built app exposes. Returns a signed, exploitability-graded claim.
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.
Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Check if an MCP server tool changed or hides injection patterns before you trust it.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
ACAO star-or-origin, value discarded
Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).
Scan text, documents, websites, and MCP metadata for prompt injection and sensitive-data risks.
Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.
Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day
MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…