"agent-api" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
External checks of TLS, HTTP headers, email domain, DNS and ports, with cause and fix
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Measured sandbox verdicts: 7-axis probe, signed pinned receipt. Cached $0.25, fresh $2.50.
Parallel-burst abuse testing for agent APIs with replayable evidence packs.
Authorized security scans, evidence, fix prompts and retests for AI-built web apps.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Pay-per-call agent tools: PDF, OCR, translation, news search, prediction markets, web, chain reads.
Production-safety audits for AI-generated code, with a fix for every finding.
Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.
Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
PII/secret redaction, email checks, sanctions screening, OSV lookups and an MCP server pre-check.
Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase
