"A service for performing security scans" matching MCP tools:

• baltimore_layersA

  Data BaltimoreA

  List the layers of a Baltimore ArcGIS service (for discovery). Pass a known short name (crime, service_requests, permits) or a full ArcGIS service path (e.g. "311_Customer_Service_Requests_current/FeatureServer"). Omit `service` to list the known Baltimore services. Returns layer id + name to use with baltimore_query.

  ConnectorNo auth

• buy_creditsA

  Underpriced AIA

  Ways to pay for Underpriced AI scans. Without a choice it lists the credit packs (credits never expire), pay as you go ($0.25 per photo scan on a monthly bill, no cap), and for a signed-in user their balance. With a pack it returns a Stripe Checkout link for that user; with PAY_AS_YOU_GO it returns the link that puts a card on file so scans just run from then on. Anonymous callers get the pricing page link.

  ConnectorNo auth

• get_agent_readinessA

  turva-mcpA

  Returns turva.dev's own agent-readiness score from an independent public scanner (isitagentready.com), including category sub-scores, with the measurement date and verification links. Use this when a user asks how turva.dev scores, whether its claims are verifiable, or what proof backs the audit service. For web-security scan results, which are a separate measurement, use get_security_evidence instead. Read-only: returns static JSON that is compiled into the Worker, so it changes nothing and updates only on deploy.

  ConnectorNo auth

• campaignstack_get_signal_agent_statsA

  campaignstackA

  Get dashboard metrics for a signal agent: total signals, 24h signals, leads created, posts watched, priority breakdown. Message and connection watchers return a watcherActivity block instead (no signal events). Call this when the user asks how a watcher is performing. Not the leads behind the counts: campaignstack_list_signal_agent_leads does that.

  ConnectorAPI key

• dc_layersA

  Data DcA

  List the layers of a Washington, DC ArcGIS service (for discovery). Pass a known short name (crime, service_requests, permits) or a full ArcGIS service path (e.g. "FEEDS/MPD/MapServer"). Omit `service` to list the known DC services. Returns layer id + name to use with dc_query.

  ConnectorNo auth

• observe_factA

  SeenRelayA

  After independently performing a source-backed validation, deposit the observed result for later CHECKs. Returns accepted=true when a new observation is stored or deduplicated=true for a recognized retry/recent duplicate. Never OBSERVE hearsay. Optional Ed25519 proof establishes key possession and continuity, not truth or real-world independence.

  ConnectorNo auth

• url_scanner_scanA

  PreClick — An MCP-native URL preflight scanning service for autonomous agents (formerly URLCheck).A

  Analyze a URL for security threats (synchronous, blocks until complete or timeout). Returns risk score, confidence, agent access guidance, and intent_alignment (always not_provided for this tool; use url_scanner_scan_with_intent for intent context). For long-running scans, prefer url_scanner_async_scan which returns immediately with a task_id for polling via url_scanner_async_task_result.

  ConnectorNo auth

• leave_pilgrim_noteA

  Manekami — digital shrine & omikujiA

  Leave a transparent AI-labeled pilgrim note on the Manekami shrine wall after performing a ritual. Notes are moderated before appearing publicly. Keep it short, honest, and clear that this is ritual/entertainment, not a performance promise.

  ConnectorNo auth

• get_service_packagesA

  Clutch.coA

  Use this tool when the user wants to see service packages with fixed pricing and scope for a specific type of service. This tool returns standardized packages offered by service providers, including pricing tiers, deliverables, and delivery timelines. Do NOT use this tool for custom project questions (e.g. "How much would it cost to build a custom app?"). It only returns providers' pre-defined, fixed-price packages, not a quote tailored to a specific project; use recommend_service_providers for those needs instead. Examples: - "Show me SEO packages" -> service="SEO" - "What web design packages can I get for $5,000?" -> service="Web Design", budget=5000 - "Marketing packages from agencies in New York" -> service="Digital Marketing", location="New York" Use `page`/`limit` for pagination.

  ConnectorNo auth

• url_scanner_scanA

  PreClick — An MCP-native URL preflight scanning service for autonomous agents.A

  Analyze a URL for security threats (synchronous, blocks until complete or timeout). Returns risk score, confidence, agent access guidance, and intent_alignment (always not_provided for this tool; use url_scanner_scan_with_intent for intent context). For long-running scans, prefer url_scanner_async_scan which returns immediately with a task_id for polling via url_scanner_async_task_result.

  ConnectorNo auth

• check_presumptive_eligibilityA

  VeteranHQA

  Use this when a veteran asks whether a condition is presumptively service connected, or which conditions are presumptive for a given exposure or service era. Returns matching presumptive conditions with the service era, exposure type, required service, legal authority and evidence needed for each. At least one of condition, serviceEra or exposureType is required. Filters combine with AND: condition plus exposureType or serviceEra narrows to their intersection, and each filter needs at least one word of three or more characters or the query is refused. An empty result means no entry satisfies that exact combination, not that the condition is non-presumptive. Whether a particular veteran meets the service requirement depends on service records this tool does not read.

  ConnectorNo auth

• scan_cspA

  IntoDNS.ai DNS & Email Security ScannerA

  Crawl a live website (up to 20 same-origin pages) and build a Content-Security-Policy for it. A CSP is the HTTP header that tells the browser which scripts, styles, images, and frames are allowed to load — the main defence against XSS and injected scripts. This scan reads the site's current CSP (header, report-only, or meta tag), flags problems a beginner might miss (no CSP at all, unsafe-inline, wildcard sources, missing object-src/base-uri/frame-ancestors), and inventories every external origin the site actually loads per directive. Returns: the detected current policy with issues, the per-directive origin inventory, a generated ready-to-deploy CSP in both report-only form (safe to roll out first) and enforce form, plus plain-language notes explaining each directive choice. Use this when the user asks to audit, analyze, or create a Content-Security-Policy for a real site, fix CSP console errors, or harden a site against XSS; use generate_security_headers for a generic best-practice header set without crawling. Slow: the crawl typically takes 30-45 seconds, so set expectations before calling. Rate-limited to 3 scans per 10 minutes per IP; repeat scans of the same origin within 10 minutes return the cached result instantly. Read-only — nothing on the site is changed.

  ConnectorNo auth

• campaignstack_get_content_analyticsA

  campaignstackA

  Get analytics for a workspace's own published LinkedIn content: engagement (reactions, comments, reposts), trend vs the previous period, and top-performing posts. Call this when the user asks how their content is performing. fromMs/toMs are Unix ms. It does not list the posts themselves: use campaignstack_list_content_posts for that.

  ConnectorAPI key

• port_mapA

  Netmon (demo)A

  Nmap port scan against a single host from the Netmon server. Wraps POST /api/getPortscanInfo (permission: tools). Server runs `nmap -oX - -p <ports> --open <ip>` and returns the parsed result. The probe originates from netmon, not from wherever mcpmond runs — so what's reachable here is what netmon can reach. Single targets only (single IP or hostname). The backing endpoint does not accept CIDR or ranges. If port_range is omitted, scans 1-1024. Returns the nmap host element as JSON: status, address, and ports[] with state/service/product/version. Latency: scans can take ~30-90s depending on port count and target responsiveness; client timeout is 120s. Example: port_map({target: "192.168.1.1", port_range: "22,80,443"})

  ConnectorNo auth

• security_csp_auditA

  Agent Utilities HostedA

  Parse a supplied Content Security Policy and flag selected risky or missing directives. PAID: 500 micro-dollar service credits per successful call. First use agent_utilities_prepare for this tool. Requires existing credits and a private Authorization header. Reuse prepared arguments for recovery; a new requestId is a new billable operation.

  ConnectorNo auth

• get_top_hedge_fund_managersA

  TipRanksA

  Returns top-performing hedge fund managers ranked by success rate and returns. Args: num: Number of managers to return (default 10, max 100 — the upstream returns 100 for anything higher)

  ConnectorNo auth

• list_security_guidanceA

  RoutebaseA

  List the static security guidance library — one entry per OWASP API-security issue with its remediation text, code examples and references. Pass guidanceId (the guidanceId of a finding) for a single entry. The library is global, not project-specific. Use this for the general library; for advice on one finding use get_finding_remediation.

  ConnectorAPI key

• healthA

  CleanPageA

  Free. Returns service status, version, and uptime signal. Use to check the service is reachable before paying for anything.

  ConnectorNo auth

• get_content_recommendationsA

  Trillboards DOOH AdvertisingB

  Get best-performing content recommendations for a venue type and optional time context. WHEN TO USE: - Deciding what content to schedule at a specific venue type - Finding content that drives the highest audience engagement at a location - Optimizing content rotation by daypart (morning, afternoon, evening, overnight) - Content programming decisions based on performance data RETURNS: - data: Array of recommended content ranked by performance score - videoId, title, contentCategory, durationSeconds - totalPlays, uniqueScreens - avgAttention (0-1), avgDwellMs - performanceScore (composite of attention, replay density, dwell time) - meta: { count, venue_type, daypart, limit } Performance score formula: attention(40%) + replay_density(30%) + dwell_time(30%) EXAMPLE: User: "What content works best in bars during the evening?" get_content_recommendations({ venue_type: "bar", daypart: "evening", limit: 10 }) User: "Best performing content for transit screens" get_content_recommendations({ venue_type: "transit", limit: 20 })

  ConnectorNo auth

• booboooking_list_servicesA

  booboooking Appointment BookingA

  List available services for a provider on booboooking.com. Returns service names, IDs, duration, and price. Call this first to find the service ID needed for availability and booking.

  ConnectorNo auth

• find_my_reportsA

  mcp-serverA

  Look up a user's recent SEO scans by the email they used — for RETURNING users who don't have a scan_id handy (scanned/purchased earlier or on the website). In a fresh session where the user has no scan_id, START HERE: ask the user for that email, then call this. Returns up to 10 recent scans as {scan_id, url, scanned_at, paid, runbook_ready}. Then use the scan_id with get_remediation_plan (if paid+runbook_ready) or purchase_report (if not paid).

  ConnectorNo auth