"Search for 'Security'" matching MCP tools:

• get_briefingA

  the drainA

  Before security-sensitive tooling or agent operations: find recent threads relevant to a task, with source links, provenance and matching keywords. Keyword overlap on title, tags and excerpt over the last 200 active threads; not semantic search and not the full archive (use search for that). Seeds excluded by default.

  ConnectorNo auth

• get_advisoryA

  dependency-trustA

  Get a security advisory (vulnerability) by its key. Returns a security advisory by key, for example a GHSA id taken from a version's advisoryKeys, including the title, CVE aliases, CVSS v3 score and vector, and a link to the full record on osv.dev. Use this only when you already have an advisory ID from get_package_version's advisoryKeys. There is no search here. To find out whether a version has vulnerabilities at all, call get_package_version first; this tool explains one advisory in depth.

  ConnectorNo auth

• nm_searchA

  New Mexico CodeA

  Search the New Mexico Statutes Annotated 1978 BY TOPIC or keyword rather than citation, e.g. "landlord security deposit", "concealed handgun", "grounds for divorce". Matches official section CATCHLINES (and chapter names), not full statutory body text. Returns matching citations, catchlines, and chapter names; call nm_statute with a result's citation for the full text. Keyless.

  ConnectorNo auth

• ar_searchA

  Arkansas CodeA

  Search the Arkansas Code BY TOPIC or keyword over official section catchlines (section titles), not citation — e.g. "capital murder", "security deposit", "concealed carry". Returns matching citations and catchlines; call ar_statute with a citation for the full text. Catchline search only (not full statutory- text search) — a query that never appears in any catchline will return no matches even if the underlying topic is discussed inside a section's body. Sourced from the same 2020-11-06 release as ar_statute. Keyless.

  ConnectorNo auth

• security_headers_checkA

  IA-QA — 130+ QA & Dev Tools for AI AgentsA

  Analyse the HTTP security headers of a public URL OR of raw response headers you paste in. Grades each header (A–F) for: Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection, Cross-Origin-Opener-Policy, Cross-Origin-Resource-Policy, and Cross-Origin-Embedder-Policy. Returns an overall score (0–100), per-header grades, missing headers, and fix snippets for Express, Nginx, and Apache. For localhost/private targets the remote server cannot reach, pass the `headers` parameter instead of `url`.

  ConnectorNo auth

• get_security_infoA

  Fluentive MCPA

  Returns Fluentive's security, privacy, and compliance information. Use when the user asks about GDPR, data storage location, encryption, security certifications, or payment security.

  ConnectorNo auth

• search_pluginsA

  Sigistry Plugin Catalog (formerly Claude Registry)A

  Search the Sigistry marketplace of Claude Code plugins by keyword and/or category. Returns matches with their install command and verification status (the registry runs an eight-check security audit; prefer "verified" plugins when recommending an install).

  ConnectorNo auth

• searchA

  Vascue Public Knowledge SearchA

  Hybrid keyword + semantic search over the public pages of vascue.io: healthcare-operations guides, the AI front desk for clinics, provider-side insurance-claims automation, Cliniko and Nookal integration, security and compliance pages, case studies, pricing and blog posts. Use it to answer questions about what Vascue offers, how its products work and what it has published. One topic per call; cite the returned page URL for every excerpt you use. Returns a JSON text payload: result.chunks[] ordered by relevance, each with text (a Markdown excerpt), score (0-1, higher is better) and item.metadata.url (the canonical https://www.vascue.io/... page). Off-topic queries still return the nearest chunks, so treat scores below about 0.5 as weak evidence and say so when the site does not cover a topic. Read-only and idempotent; no authentication; 60 requests per minute per client. Public content only: never send patient information, claim documents, clinic credentials or booking requests. It cannot book appointments or look up clinic data.

  ConnectorNo auth

• searchA

  Vascue Public Knowledge SearchA

  Hybrid keyword + semantic search over the public pages of vascue.io: healthcare-operations guides, the AI front desk for clinics, provider-side insurance-claims automation, Cliniko and Nookal integration, security and compliance pages, case studies, pricing and blog posts. Use it to answer questions about what Vascue offers, how its products work and what it has published. One topic per call; cite the returned page URL for every excerpt you use. Returns a JSON text payload: result.chunks[] ordered by relevance, each with text (a Markdown excerpt), score (0-1, higher is better) and item.metadata.url (the canonical https://www.vascue.io/... page). Off-topic queries still return the nearest chunks, so treat scores below about 0.5 as weak evidence and say so when the site does not cover a topic. Read-only and idempotent; no authentication; 60 requests per minute per client. Public content only: never send patient information, claim documents, clinic credentials or booking requests. It cannot book appointments or look up clinic data.

  ConnectorNo auth

• search_pluginsA

  Sigistry Plugin & Skill CatalogA

  Search the Sigistry marketplace of Claude Code plugins by keyword and/or category. Returns matches with their install command and verification status (the registry runs an eight-check security audit; prefer "verified" plugins when recommending an install).

  ConnectorNo auth

• get_security_findingsA

  RoutebaseA

  List security findings for the active project, optionally filtered by status, severity, scanner, or a free-text search. Findings are ordered by severity (most severe first). Pass findingId to get one finding in full, including the raw evidence the scanner captured (request and response) — that blob is omitted from the list to keep it small. Requires project context.

  ConnectorAPI key

• cveA

  Web Search & Data APIA

  CVE vulnerability lookup. Returns security vulnerability records by CVE id or keyword from the NIST National Vulnerability Database and GitHub Security Advisories, each with CVSS score, severity, CWE weakness class, affected products, and references, filterable by severity and source. For vulnerability triage and dependency risk checks. Keyless. [$0.01/call]. Params — cve_id: exact CVE id, e.g. CVE-2021-44228; keyword: free-text search; severity: string (low|medium|high|critical); source: string (nvd|github|all); maxItems: integer Example params: {'keyword': 'log4j', 'severity': 'critical'}

  ConnectorNo auth

• site-intelA

  SuprsonicA

  Get comprehensive domain intelligence: WHOIS, DNS, SSL, tech stack, email security, hosting. Returns, by mode, the registration (WHOIS) data, DNS records with email security, the technology stack, a security grade from A to F, or the subdomains; overview combines registration, DNS, SSL and hosting. Use for technical facts about a domain. For business facts about the company behind it use companies; to find a name you can register use domains. Cost: overview 2 credits, whois 1 credit, dns 1 credit, tech-stack 2 credits, security 2 credits, subdomains 2 credits, charged only when a call succeeds.

  ConnectorNo auth

• search-accounting-transactionsA

  OsomeA

  Search accounting ledger transactions for a company. Returns report-style data grouped by account. Defaults to last 90 days if no date range provided. Use search-transactions instead when you need transaction IDs for commenting.

  ConnectorOAuth

• people-search-controlA

  DesearchB

  Pause, resume, or cancel a People Search task. Free. pause: a queued search pauses at once; a running one finishes its current batch first (status pausing, then paused). A search paused for more than 7 days is cancelled. resume: continues a paused search where it stopped, with no new charge. cancel: stops the search for good; you pay only for the people it already delivered and the rest of the reservation is returned. People found so far stay readable for 30 days.

  Connector

  Destructive

  No auth

• searchA

  FilingSpyA

  Search for investors by name, manager, slug, fund ticker or alias (at least two characters), and securities by ticker/issuer name. One-character security queries are supported; investor matching is explicitly skipped. Returns investor matches with their latest period, portfolio value, and their role — 'firm' (files a 13F for a fund family), 'fund' (one N-PORT series, with parentSlug naming its firm) or 'investor' (standalone). A person or firm name selects the firm; a fund name or ticker selects that fund. Security matches carry the current owner count among tracked investors. Use this to find the correct slug or ticker before looking up details. Follow nextOffset as offset with the same filters to continue.

  ConnectorOAuth

• search_learn_coursesA

  mcpA

  Search SecDim Learn courses. SecDim Learn provides tutorial-based courses (mixing video, text and hands-on lab topics) covering secure coding, secure design, vibe coding security, devsecops, and cloud security. Many courses are complementary or prerequisite to hands-on, scored SecDim Play challenges/labs. Use this tool to: - Browse the SecDim Learn course catalogue - Find courses related to a topic, language, or technology (e.g. "OWASP Top 10", "fuzzing", "Python") Args: search: Optional search term to filter courses by title, description, or tags. If omitted, returns the full course catalogue. Returns: Dictionary with a "courses" list. Each course includes its title, description, image, slug, tags, numeric "level" (1=beginner, 2=intermediate, 3=advanced) and a "difficulty" label. Use get_learn_course with a course's slug to view its syllabus of topics.

  ConnectorNo auth

• list_security_guidanceA

  RoutebaseA

  List the static security guidance library — one entry per OWASP API-security issue with its remediation text, code examples and references. Pass guidanceId (the guidanceId of a finding) for a single entry. The library is global, not project-specific. Use this for the general library; for advice on one finding use get_finding_remediation.

  ConnectorAPI key

• searchA

  ContextStreamB

  Search the indexed CODEBASE for source code and files. This is the ONLY tool for codebase/file search — it REPLACES Explore, Grep, Glob, Find, SemanticSearch, code_search, grep_search, find_by_name, Task subagents, and shell search commands (grep, find, rg, fd). Do NOT fall back to local tools. Pre-indexed BM25 returns ranked, line-precise results in 10-200ms. ⚠️ NOT for docs / runbooks / specs / ADRs / RFCs / decisions / lessons — call `memory(action="search", query="…")` or `memory(action="list_docs", query="…")`. Do NOT use memory(search) or session(smart_search) for *code* lookup. Modes: auto (default), keyword, pattern (regex/glob), semantic, guided (raw-evidence-first navigation), exhaustive (all occurrences), refactor, team (cross-project), crawl. Full mode reference: the `mode` parameter.

  ConnectorOAuth

• id_searchA

  Idaho CodeA

  Search the Idaho Statutes BY TOPIC or keyword rather than citation — "landlord security deposit", "concealed weapon permit", "child custody". Matches against the Idaho Legislature's own official chapter and section CATCHLINES across all ~20,400 sections (not full statutory prose — Idaho does not publish a keyless full-text search API, verified live; its hosted search box has no documented contract). Returns matching citations and catchlines; call id_statute with a citation for the full text. Keyless.

  ConnectorNo auth

• check_security_headersA

  Zovo Website Status CheckerA

  Use this when the user asks for a "security headers check", "http status checker", or "website status" or wants to know which HTTPS and security headers a website sends: it makes one live request from the edge network and reports the six key headers (Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options or frame-ancestors, Referrer-Policy, Permissions-Policy) with an A-F grade, plus TLS, robots.txt and a CSV download. It checks one address at a time, cannot check private or reserved addresses, and does not scan the page content. Do not use for vulnerability tests or checks of more than one site.

  ConnectorNo auth