"Assistance with Cyber Security Investigations" matching MCP tools:

• code_get_findingsA

  searchcodeA

  Get detailed code quality findings from a remote public git repository. Returns rule IDs, line numbers, severity, category, descriptions, and source snippets. Supports filtering by file path, severity (error, warning, info), category (security, deprecated, safety, correctness, maintainability, accessibility, modernization, performance, concurrency), and kind (security, quality) — kind=security is every security-category finding in one call, kind=quality is everything else. code_analyze.top_findings shows only the quality half; use kind=security here to see the security-category findings it leaves out. THIS IS NOT THE SECRET SCANNER. kind=security means insecure code — weak hashes, unsafe deserialization, injection-shaped patterns — and it will not find a leaked API key or private key. Leaked credentials are code_analyze.security_summary, which is a different scanner over different rules; the two sets do not overlap, so an audit wants both. Use after code_analyze to drill into specific findings. Shares the same analysis cache — no duplicate work if analyze already ran.

  ConnectorNo auth

• submit_enquiryA

  siteA

  Submits an enquiry to Cyber Essentials Cost — NOT a purchase, NOT a guaranteed quote. Step 1: call with the answers (keyed by field key from enquiry_fields) and consent=true; it validates and returns a summary, the consent line and a confirmation token — show the person the summary and the consent line. Step 2: only if the person agrees, call again with the same answers, consent=true and the confirmation token; the enquiry is then submitted, and the person receives an email with a link they must click before any provider sees it. Consent means the person has read and agreed to: "Happy for my details to go to relevant Cyber Essentials certification bodies and consultants, who'll contact me directly."

  ConnectorNo auth

• url_scanner_async_scanA

  PreClick — An MCP-native URL preflight scanning service for autonomous agents (formerly URLCheck).A

  Submit a URL for asynchronous security analysis. Returns immediately with a task_id. Poll with url_scanner_async_task_status to check progress, then url_scanner_async_task_result to get the scan result. Async counterpart of url_scanner_scan for clients without native MCP Tasks support.

  ConnectorNo auth

• domain_reportA

  ContrastAPIA

  Query DNS, WHOIS, SSL, subdomains, and threat intel for a domain in one call. By default dns.txt is filtered to security-relevant entries (SPF, DMARC, DKIM, MTA-STS, TLS-RPT) and dns.total_txt_records reports the honest pre-filter count; pass include_all_txt=true for the raw TXT list. Use as a starting point for domain investigations; use audit_domain for live headers + tech stack. Response carries next_calls — chain with subdomain_enum (always emitted), ssl_check + tech_fingerprint (when an A record resolves) for the standard recon depth without re-prompting. Free: 30/hr, Pro: 500/hr. Returns domain report with DNS records, WHOIS data, SSL cert, risk score, email config, threat status, recommendation, and next_calls.

  ConnectorNo auth

• paywall__customer_deduct_from_fupA

  NetfluidC

  Deducts a unit from the customer's available workflow allowance. Do not call this tool when the customer is requesting assistance related to the pay wall and its subscriptions. This tool should be called after each AI response that is not pay wall related. @param customer_id: The customer's database id @return: a json object, containing the customer_id and remaining fup token balance in the "values" object

  ConnectorNo auth

• url_scanner_async_scanA

  PreClick — An MCP-native URL preflight scanning service for autonomous agents.A

  Submit a URL for asynchronous security analysis. Returns immediately with a task_id. Poll with url_scanner_async_task_status to check progress, then url_scanner_async_task_result to get the scan result. Async counterpart of url_scanner_scan for clients without native MCP Tasks support.

  ConnectorNo auth

• submit_support_requestA

  Skala — Legal Platform for StartupsA

  Submit a support request to the Skala team on behalf of the user. Call this when the user needs human assistance that AI cannot provide, the question is too complex or high-risk, or the user explicitly asks for human support. IMPORTANT: Always confirm with the user before calling — describe what you will submit and ask for their approval. Before calling, compile the issue from conversation context into the description.

  ConnectorNo auth

• sam_search_exclusionsA

  SamgovA

  Search the SAM.gov Exclusions list — parties DEBARRED, suspended, or otherwise excluded from receiving federal contracts, grants, or assistance. Answers "is this company/person barred from federal contracting" for KYB / vendor-vetting / procurement due diligence. Filter by name, US state, and classification (Firm / Individual / Vessel / Special Entity). Returns each excluded party with the exclusion type, program, excluding agency, and active/termination dates. Distinct from OFAC sanctions (see sanctions_screen) — this is the federal procurement debarment list.

  ConnectorNo auth

• get_security_infoA

  Fluentive MCPA

  Returns Fluentive's security, privacy, and compliance information. Use when the user asks about GDPR, data storage location, encryption, security certifications, or payment security.

  ConnectorNo auth

• create_webhookA

  BorealHostB

  Register a webhook endpoint for platform events. Events (backup failures, security notices, hosting incidents, billing) are POSTed as JSON, signed with X-BH-Signature (HMAC-SHA256 of the raw body). The signing secret is returned ONCE. Categories: billing, security, hosting, decommission, general — empty list means all. Endpoints auto-disable after 20 consecutive failures. Requires: API key with write scope. Returns: {"id", "url", "events", "secret", "message"}

  ConnectorNo auth

• get_report_executionA

  Costory: Your Finops MCPA

  Get a condensed execution summary: status, destination, per-widget summaries, URLs. Omits raw time-series and full DIGEST trees. Widgets with drillDown can be expanded via get_report_execution_widget. For DIGEST, tell the user tree and node investigations are available. EXAMPLE: { executionId: "clx…" }

  ConnectorOAuth

• run_control_gap_reviewA

  KeelenA

  Start a source-bound security control gap review for one project. The review records bounded engineering observations under the user's selected Cyber Essentials or CMMC Level 1 or Level 2 context. It does not determine framework standing, and it does not make changes. The `disclaimer_md` field must be repeated to the user before any observation is summarised. The project needs a saved framework profile, an eligible plan, and a place on the operator allowlist. Billable; one review is allowed in flight per project. Refusals return `ok: false` with a next step and do not start work. Rate-limited per workspace.

  ConnectorNo auth

• risk_filingsA

  Tickwind US Market BoardsA

  Recent SEC filings whose text MENTIONS a specific risk phrase, per EDGAR's full-text index. A mention is not a finding — the phrase also matches negations like "no material weakness". Values: going-concern, material-weakness, cyber-incident.

  ConnectorNo auth

• submit_enquiryA

  siteA

  Submits an enquiry to Cyber Insurance Cost — NOT a purchase, NOT a guaranteed quote. Step 1: call with the answers (keyed by field key from enquiry_fields) and consent=true; it validates and returns a summary, the consent line and a confirmation token — show the person the summary and the consent line. Step 2: only if the person agrees, call again with the same answers, consent=true and the confirmation token; the enquiry is then submitted, and the person receives an email with a link they must click before any provider sees it. Consent means the person has read and agreed to: "Happy for my details to go to insurance brokers who place cyber risks, who'll contact me directly."

  ConnectorNo auth

• out_of_pocket_optimizerA

  mcpB

  [Taxonomy X.174 — baseline response (public data only)] Optimize out-of-pocket spend across a sequence of planned services. WHEN TO USE: User is planning for a medical expense, comparing plan options, looking for financial assistance, or trying to structure a payment plan. WHEN NOT: For billing-error analysis (scan_bill_for_errors) or appeal drafting (generate_appeal_letter).

  ConnectorNo auth

• info_compliance_check_token_securityA

  Gate Info MCPA

  Public heuristic token security screen (e.g. tax/holder-risk style signals from data providers). Not a security guarantee or legal/investment advice. On-chain activity stats→get_token_onchain. Token xor address with chain; scope in schema. Read-only public research data. No account access, no order placement or fund transfers. Not investment advice.

  ConnectorNo auth

• get_disaster_declarationsA

  FEMA DisastersA

  Get FEMA disaster declarations filtered by state, year, or type. Returns federal disaster declarations including major disasters, emergencies, and fire management assistance. Each record includes the disaster number, title, declaration date, and affected area. Args: state: Two-letter US state abbreviation (e.g. 'CA', 'TX', 'FL'). year: Filter by fiscal year of the declaration (e.g. 2023). disaster_type: Declaration type code: 'DR' (major disaster), 'EM' (emergency), or 'FM' (fire management assistance). limit: Maximum number of records to return (default 25, max 1000).

  ConnectorNo auth

• get_public_assistanceA

  FEMA DisastersA

  Get FEMA Public Assistance (PA) grant data for disaster recovery. Returns PA grant obligations that fund debris removal, emergency protective measures, and permanent restoration of infrastructure. Filter by disaster number or state. Args: disaster_number: FEMA disaster number to filter by (e.g. 4737). state: Two-letter US state abbreviation (e.g. 'CA', 'TX'). limit: Maximum number of records to return (default 25, max 1000).

  ConnectorNo auth

• resolve_card_namesA

  MTG BenchA

  Check whether card names are REAL, in bulk. Returns exact / not_found per name, with the canonical spelling and id for the ones that exist. Call this reflexively before presenting any decklist or card recommendation you generated: the most common failure in Magic assistance is confidently naming cards that do not exist, or that exist with different text. Cheap, batched, and safe to call on every card you are about to mention. Accepts either a `names` array or a pasted `text` decklist.

  ConnectorNo auth

• list_security_guidanceA

  RoutebaseA

  List the static security guidance library — one entry per OWASP API-security issue with its remediation text, code examples and references. Pass guidanceId (the guidanceId of a finding) for a single entry. The library is global, not project-specific. Use this for the general library; for advice on one finding use get_finding_remediation.

  ConnectorAPI key

• url_scanner_async_scan_with_intentA

  PreClick — An MCP-native URL preflight scanning service for autonomous agents (formerly URLCheck).A

  Submit a URL with optional user intent for asynchronous security analysis. Returns immediately with a task_id. Poll with url_scanner_async_task_status to check progress, then url_scanner_async_task_result to get the scan result. Async counterpart of url_scanner_scan_with_intent for clients without native MCP Tasks support.

  ConnectorNo auth