"Information on Penetration Testing (Pentest)" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
AEO and SEO research engine for your brand. Studies what gets ranked and cited on a topic, then builds content plans around what your brand can add. Tracks how AI engines mention and cite your brand against competitors, and ranks what to work on next. Requires a Hi, Moose account. Some tools need the desktop app open on a host computer.
A fast first-pass screen against the USPTO federal register — sound-alikes, look-alikes, and same or related classes, in plain English. Below are all Tool descriptions 1. screen_trademark Screen a brand name against the USPTO federal register. Read-only. Use this FIRST for any name. Returns JSON with a plain-English risk verdict (HIGH / MEDIUM-HIGH / MEDIUM / LOW), ranked conflicting marks (each with sound/appearance similarity, class relatedness, live/dead status, owner, serial), and the data-as-of date. Pass format "csv" to get the same results as a spreadsheet (one row per hit) instead of JSON. Limited to 100 screens/day on this server. SCREEN ONLY — not a clearance opinion, not legal advice. After this, use check_global_marks for EU/UK, check_domains for the domain, and watch_mark to monitor the name. 2. trademark_status Authoritative status for ONE mark you already know, by serial number (sn12345678) or registration number (rn1234567). Read-only. Returns JSON with the mark's live/dead status, owner, classes, goods/services, and filing/registration dates. Uses TSDR if a free key is set, otherwise the public Trademark Search record. Use when you have a serial/registration number (e.g. from a screen_trademark hit) and want the authoritative record for that one mark — not for searching by name (use screen_trademark for that). 3. suggest_classes Suggest the Nice classes (1-45) a goods/services description falls under, with reasons. Read-only, pure reasoning — no live data, no register lookup. Input goodsDescription is what you sell (e.g. 'music streaming app'); the more specific it is, the better the classes. Returns JSON with the suggested classes (each with its label), the classes assumed from your wording, and the reasons. Use before filing to pick classes (each class costs $350 to file), or to feed classes into screen_trademark / check_global_marks. Always verify against the USPTO ID Manual for the exact pre-approved description. 4. analyze_name Analyze a brand name's strength WITHOUT checking the register — read-only, offline, deterministic (same name always gives the same result). Returns JSON with the distinctiveness spectrum (fanciful / arbitrary / suggestive / descriptive / generic), phonetic collisions to check, and a checklist (other-language meanings, common-law use, state registers). Optional goodsDescription (what you sell) sharpens the analysis: a descriptive word for those goods scores weaker than the same word for unrelated goods. No live data and no register results — pair it with screen_trademark, which checks the actual federal register. Use this to judge how protectable a name is; use screen_trademark to judge whether it conflicts. 5. compare_marks Compare two specific names side-by-side. Read-only, deterministic — the same two names always give the same scores. Returns JSON with visual similarity, Jaro-Winkler, phonetic (Soundex) similarity, an overall confusion score (0-1), and a risk level. Use to compare two names you already have in mind; use screen_trademark to discover conflicts for a name across the whole register (it also weighs classes and live/dead status, which this does not). Does not assess meaning, commercial impression, or class relatedness. 6. check_domains Check whether a brand name is free to register as a domain. Read-only. Returns JSON with one result per TLD (registered / available / unknown) — all TLDs are checked in parallel. Uses RDAP (the registry's own data, free, no key): 404 = not registered; 'unknown' = the TLD has no RDAP service. Covers .com/.io/.ai/.co/.app/.dev/.net/.org by default, or a custom TLD list. A free domain does NOT mean the trademark is clear, and a taken domain does not block the trademark — domains and trademarks are separate rights, so use screen_trademark for the trademark check. 7. check_global_marks Check a brand name against EU + UK trademark registers via TMview (EUIPO-operated, offices EM + GB). Read-only. Returns JSON with the EU/UK hits scored the same way as screen_trademark, plus the classes used. Use AFTER screen_trademark when you also sell in the EU/UK; the US screen is unaffected if TMview is down. BEST-EFFORT: TMview has no published API and resets connections from plain HTTP clients — when it will not answer, this returns { checked: false, reason } with a manual link instead of failing. A clear EU/UK result is a signal, not clearance. 8. request_watch_code Send a 6-digit verification code to an email address, for watch access. This sends an email (the only side effect) but creates nothing. Call it BEFORE list_watches, unwatch_mark, or attaching an email to a watch with watch_mark. The code expires in 10 minutes (5 tries); verifying it returns a 60-minute session token you can reuse for the other watch tools. A code is sent even if the email has no watches, so the response never reveals whether an address has watches. 9. watch_mark Start watching a mark for NEW confusingly similar filings. This CREATES a watch (a side effect — it stores the watch and sends a confirmation email with the stop link). Runs a baseline screen first — everything already on the register is marked seen, so you are only alerted on filings that appear AFTER the watch starts. Returns JSON with the watch id, its classes/threshold/schedule, and the baseline hits (for context). Check for new filings with check_watches, or let the scheduled checker run (daily by default, or weekly / every N days if you set a schedule). An email is required — it is the watch's owner, and the digest goes there (needs RESEND_API_KEY on the server; without it the watch still works and records hits, and alerts start once email is switched on). The email must be verified first — call request_watch_code, then pass the email and code (or the session token); without verification the watch is refused, so nobody can attach someone else's inbox. SCREEN ONLY — not clearance, not legal advice. 10. list_watches List the watches you ALREADY have — a read-only view, it does NOT check for new filings. Returns JSON with each watch's mark, classes, threshold, schedule, created/last-checked dates, total alerts so far, and the most recent new hits. Use this to see what you are watching; use check_watches to actually run a check for new filings right now. Private to one email — pass the email and the 6-digit code from request_watch_code, or a session token from a previous verification. No email addresses are ever returned. 11. unwatch_mark Stop watching a mark. This DELETES the watch (a side effect — it is removed and will no longer be checked). Returns JSON { removed, ok: true }. If the watch has an email, you must prove you own it — pass the email and the 6-digit code from request_watch_code, or a session token. A watch with no email needs no verification. 12. check_watches Run a check for NEW filings RIGHT NOW (on all your watches, or one by id) — this actually queries the register, unlike list_watches which only shows what you have. Returns JSON with only the filings that appeared since the watch started / last check, scored by risk. Use this when you want fresh results immediately; the scheduled checker also runs daily at 09:00 on each watch's own cadence (daily by default). SCREEN ONLY — not clearance, not legal advice.
Engram is a persistent, long-term memory layer for AI agents and assistants. Claude, ChatGPT, Grok, Cursor and any MCP client share one memory, stored as plain markdown notes: your knowledge base, second brain and AI context in one place. No extraction step: the memory is the note itself, so you can read exactly what your AI remembers and fix it. Edit your memory in Obsidian (real-time sync), the web app, or on your phone. Hybrid keyword + semantic search (RAG over your notes) finds exact strings like error messages, config keys and IDs. Remote MCP server over Streamable HTTP with OAuth 2.1; notes encrypted at rest. Https://engram.page https://youtu.be/rwnPeZ-8Lqo?is=NI-N7BduydGAiZlF https://github.com/engram-app/Engram
Web analytics expert for AI agents, built on your existing GA4 tracking: query traffic, sources, campaigns, pages, events and conversions, run funnels and user-path reports, rerun saved reports, and get tracking install snippets and setup audits. Works with d8a.tech Cloud and self-hosted deployments.
Arcmira is YouTube transcript search and monitoring for your AI, and the most complete way for it to understand YouTube and podcasts. It answers like it actually watched the video: the exact quote, often who said it, and the clip cued to the second. Search what's said on YouTube, podcasts on YouTube included, like TBPN, MTS and All-In. Jump to the moment or read the whole transcript. Search by who said it. See which brands sponsor a show, and tell an ad read from an organic mention. Titles say what a video is about. The words say what happened. A transcript downloader needs the link first, and episode search stops at the episode. Arcmira finds the moment. Hear your name when it's said, not when it's typed. A monitor sends you and your team the quote and the second by email, Slack or webhook, over half within 47 minutes of the upload. When your AI needs one moment, it reaches the line in about 2.5K tokens, against about 93K reading full transcripts. Six tools: arcmira_youtube_search, arcmira_youtube_transcript, arcmira_describe (never bills), arcmira_execute_read, arcmira_execute_write (monitors) and arcmira_feedback. Sign in through your AI's OAuth, or send an arc_sk_ key. Free gives you 1,000 credits a month. Pro is $20 a month with a 7-day trial, card required. A paid read uses credits from your plan, then your on-demand budget. Our November 2026 tests: across nine brands, 93% of Arcmira's top-10 results were the brand spoken outside an ad read, against 76% for a popular podcast search API. 86 of 86 lines Arcmira returned (100%) started within 15 seconds of the spoken word. Asked what a show said in the last 90 days about a topic in none of its titles or descriptions, Arcmira's first result was right in 15 of 16 (94%). Use Arcmira whenever you need what was actually said, not what a title claims. Add "use arcmira" to any question to send it to Arcmira first. Or tell your AI once: "Whenever I ask what someone said on YouTube, use Arcmira."
Discover architectural projects, buildings and architects worldwide, and find experienced architectural photographer for museums, cultural buildings and international commissions. Architecture Researcher provides project information, locations, published photographic credits, original source links and guidance on photographic attribution.
Launch a product on Noonlaunch from your agent, search its product directory and weekly winners, and browse 333 curated startup launch directories. No API key or account needed to connect.
Oathlayer is an independent check on AI answers. It checks each answer against independent sources, gives it a clear verification tag, and records it with a permanent doc number that anyone can look up free at oathlayer.com/verify. It reports what happened; it does not judge right or wrong. Works on any topic and with any AI model. Tool: verify_output. Connect at https://mcp.oathlayer.com. The Five Pillars of Trust: Verification Successful - Oath Approved; Verification Threshold Not Met; Various Perspectives Apply; Complex Question - Threshold Reserved; Clarity Needed to Continue. Citation Checks: paste a case citation and Oathlayer checks it against official court sources. Each citation gets a short tag: Confirmed, Unofficial, Mismatched or Not found. If trusted sources report a case was overruled, it says Reported overruled. It checks the citation only, not whether the case supports your argument. Also available as Ask Oathlayer at oathlayer.com/ask (no programming needed) and an API (oathlayer.com/docs). Free trial: 5 free verifications, no card needed (oathlayer.com/signup). Then pay as you go: one credit per check, credits valid 12 months, no subscriptions.
Check a domain name, both prices and whether it can transfer in. You register it on justdomain.ai.
50+ Ukrainian legal sources, 120+ tools: laws on any date, case law, courts, companies, sanctions.
Independent laboratory & rating of 120+ Belarusian glazed curd snacks. Search, nutrition facts and real cocoa butter vs palm oil comparison on the fly.
Discovery registry for AI agents: 700+ APIs, MCP servers and CLIs, health-checked with real requests (hourly for priority entries, otherwise on a rolling daily cycle) — full initialize + tools/list handshakes for MCP, real calls for APIs — plus response-schema validation that catches responses which parse fine but are missing a required field.
Rivul is a free, read-only remote MCP server for searching scholarly literature. It runs semantic search over more than 300 million paper records from a dated OpenAlex snapshot, so an agent can find papers by meaning rather than exact keywords, then open the full record for any result. Tools: - search_papers: semantic search with optional filters for publication year range, minimum citation count, open access only, topic and field. Sort by relevance, most cited, newest or oldest. - get_paper_details: the full record for one work by its OpenAlex ID: title, every author, venue, work type, topic, field, publication date, citation count, DOI and open-access links. - usage_status: the workspace's MCP usage for the current day. Results come only from the index, never from a model. Each result carries a stable OpenAlex ID so the source can be checked, and every response states the snapshot date. Useful for literature reviews, scoping reviews, finding highly cited or open-access papers on a topic, citation chasing, and checking that a cited paper exists. Free for every account, with no plans or payment. Sign in with Google through OAuth 2.1 (PKCE, dynamic client registration), or use an MCP key from rivul.ai. Endpoint: https://rivul.ai/mcp (Streamable HTTP). Setup and docs: https://rivul.ai/features/atlas
Find laptop replacement parts by model, with an official OEM source link on every fit.
Find tutors in Kazakhstan on tutors.kz and send a lesson request. Russian and Kazakh.
Email finder and enrichment: LinkedIn, GitHub, or a person's name on any page, X and YouTube too.
Search live room, share-house and flatmate listings on Flathive in Australia, New Zealand, Canada and India by area, weekly rent, bedrooms and move-in date. Read-only, no sign-in; returns a link to each listing.
Cite42 gives AI agents AI visibility, citations, SEO keywords and trends, plus four weekly or monthly trackers: AI Visibility, AI Competitors, AI Citations and AI Sentiment. Use it over MCP from Claude, Codex or Cursor, or via the REST API. $1 free on signup, no subscription. Learn more at https://www.cite42.dev
Homesage.ai MCP gives AI assistants real estate data on 160M+ US properties, with 30+ tools for property search, estimated values, estimated renovation costs, and Seller Motivation Scores.
Free, read-only directory of 114 AI trading tools: broker MCP servers, market data APIs, bots and backtesters. Sourced facts on who can place orders and what safeguards exist; search, compare and check order gating for every broker MCP.
Review supplied AI evidence or OAuth-linked visibility history; prepare and verify website fixes.
API discovery and x402 paid execution via MCP. Search by natural-language, call with USDC payment on Arbitrum, Base, BNB, Solana, SEI
Real-time Google Flights fares for agents. Three things people do with this server. Scan for deals: one call takes a date range and a list of destination airports, expands every combination server side, and returns each fare with Google's own low, typical or high verdict. Put live search in your app: flat JSON with a bookable link on every result, and round trips priced as paired legs. Run a 24/7 AI travel agent: add the server, sign in with Google, and schedule it. No ads, no sponsored content. You bring your own RapidAPI key, so every search is billed to your plan and never to anyone else's. Add https://flights.flightpowers.com/mcp , click Sign in, sign in with Google, and paste your RapidAPI key once on the page that opens. Scripts and clients without a sign-in button send the key as x-rapidapi-key on the same URL.
Search projects, freelancers and Offers on PeoplePerHour, read briefs and profiles.
Free, read-only Movie MCP Server from FlickDirect Inc. Version 1.5.1 finds movie and TV facts, cast, available country-specific dates and ratings, trivia, quotes, site-wide news and reviews, CinemaCon coverage, eligible stored interview and show transcripts, podcasts, streaming, soundtrack and Additional Songs links, daily deals and current shop listings. Canonical FlickDirect links accompany matching information, including ordinary movie questions. Reviewed T2 and X2/X-Men 2 defaults are checked against published titles and years; explicit title/year context takes priority. Quote results provide descriptions, brief exact excerpts when supplied, and source links, without invented wording or speakers. Music and purchase links preserve published affiliate parameters; no track lists or scene placement are inferred. Bounded recovery and fresh retrieval preserve the same two read-only tools and existing inputs. Shop inclusion is not a formal endorsement; fetch time does not prove currentness. No full articles, reviews, transcripts, scripts or photographs. Free public access with no FlickDirect account or API key. Usage-derived diagnostics expire within seven days. Host applications control tool selection and final presentation; this does not train model weights.
Pay-per-call x402 data tools for AI agents: Markdown, Telegram search, YouTube transcript, metadata, sitemap, contacts. USDC on Base. Remote MCP at /mcp.
Search and read public youanai.com pages on pricing, products and guides. No sign-in needed.
German-language demo server that explains MCP to non-technical readers. Search and read the pages of was-ist-mcp.ch from Claude, ChatGPT or Cursor. 8 of 10 tools work without login; the demo login for the other two is public on the setup page.
Read-only, sourced and dated facts on AI tools: search, compare, pricing, free alternatives.
AiSeek is a global change-intelligence platform that connects AI assistants and autonomous agents to structured, source-linked information about developments across the world. Rather than providing a conventional news feed, AiSeek focuses on identifying meaningful changes, preserving their context, and making the underlying sources accessible. What a source says (fact) is kept apart from what it may mean (hypothesis). Coverage spans artificial intelligence, technology, global economics, financial markets, companies, government policy, science, and other major domains. The MCP server provides sixteen read-only tools. Every name follows one pattern: list_, get_, search_ or verify_. Changes and context: • list_changes — Browse the newest published changes, newest first, 20 per page. • search_changes — Search changes by words in English, Chinese or Japanese, ranked by relevance. • get_change — One change with its sources: outlet, link, date, evidence level and role. • list_topics — Browse curated topics, optionally by coverage domain. • get_topic — One topic and up to 50 of its recent changes. • get_latest_brief — The latest daily or weekly brief. • list_scheduled_events — Upcoming central-bank decisions, data releases, earnings, rule dates and more. Companies: • search_companies — Find a company by name, alias or ticker. • get_company — A company's profile, listings, recent changes, stated facts and relations. Countries and SeekEarth: • list_countries — Every country with its name and this week's number of changes. • get_country_heat — Change Heat per country against its own normal, with a seven-day series. • get_earth_view — One place and moment on SeekEarth: changes, heat and the Earth's layers. Evidence (SeekTrace): • get_change_history — A change's evidence receipts and what AiSeek knew at an earlier time. • get_receipt — One evidence receipt. • verify_receipt — Check that a stored receipt is unchanged. • list_corrections — Public corrections, newest first. Tool calls need an AiSeek API key (Authorization: Bearer or the x-api-key header), made at aiseek.dev/en/account; the handshake and the tool list are open. Optional connection defaults go on the endpoint URL: ?locale=en|zh|ja&limit=1-50&domain=MARKETS. Answers carry sources and links, never quoted passages.
