"Using web fetch functionality or fetching data from the web" matching MCP connectors:

Free lockfile malware check plus paid pre-install scan of any skill, tool, or package.

Check if an MCP server tool changed or hides injection patterns before you trust it.

Query 90 days of honeypot probe data: IP reputation, scanners, CVE probing, TLS/SSH fingerprints.

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.

Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.

Find known subdomains of a domain. Passive data; may include historic entries. List or count.

Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).

Programmatic control of the Hiro security platform: scans, tasks, plans, and approvals.

Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day

Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.

MCP server for the Revensi API. Scan domains from any MCP client.