"Web search services that don't require an API key" matching MCP connectors:

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

Verificação de segurança e conformidade de sites: cabeçalhos, TLS, DNS, e-mail, LGPD e pentest.

Verify a skill, tool, or package before an agent installs it, or verify a scan attestation.

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

MITRE Common Weakness Enumeration (CWE) API

Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.

urlscan.io URL scanner — search/result keyless, submit needs key

Scan any public site for AI-agent visibility; get scored findings, a machine-readable fix pack, and

Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.

Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.

Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.

Find known subdomains of a domain. Passive data; may include historic entries. List or count.

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.

Formally-verified injection/exfiltration detector for AI agents (MCP-02).

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.

AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.