#scanner

Evidence-based public website scanner for pre-consent cookies, tracking, consent surfaces, and GDPR/ePrivacy disclosure signals. 11 MCP tools: scan, status, findings, pre-consent cookies/trackers, report, evidence, and domain-latest resources. Self-serve API key at certscore.ai. Outputs are automated review signals, not legal advice or a compliance determination.

Security scanner for MCP servers — vet an MCP before you wire it into an agent. Detects prompt-injection, credential exfiltration (via taint analysis), RCE, and supply-chain risks, and catches cross-server exfil chains no single server reveals. Zero-dependency local CLI, SARIF output, CI-gateable, no account.

Post-quantum cryptography (PQC) security scanner for blockchain and AI agents. Detects quantum-vulnerable algorithms (ECDSA, RSA, DH) and provides NIST FIPS 203/204/205 migration paths. Free, open-source, privacy-first. Scan any GitHub repository or smart contract via MCP tools: scan_repository, check_pqc_risk, scan_contract. Used by autonomous AI agents for automated security audits.

Institutional AI trading intelligence for autonomous agents. Real-time squeeze scanner, AI council verdicts, options flow, IWM 0DTE scoring — gated by x402 RLUSD micropayment on XRPL. No API keys. Agent Credit Bureau, Peer Signal Marketplace, Agent Hiring Protocol. Free demo at /api/demo.

AI agent readability scanner — score any public URL against the Vercel Agent Readability Spec, llmstxt.org, and 6 agent-protocol manifests (MCP, A2A, agents.json, agent-permissions, UCP, x402). 59 checks with per-check fix guidance. Same engine as agent-ready.dev.

Real-time trading intelligence for AI agents — pre-market gap scanner, SEC filing alerts with AI summary, news sentiment scoring, momentum alerts, and insider buying tracker. Works with Claude, Cursor, and any MCP-compatible AI agent. $49 CAD/month.

Real-time trading intelligence for AI agents — pre-market gap scanner, SEC filing alerts with AI summary, news sentiment scoring, momentum alerts, and insider buying tracker. Works with Claude, Cursor, and any MCP-compatible AI agent. $49 CAD/month.

Scan any website for AI agent readiness — payment protocols (x402, MPP, SPT, L402), MCP servers, OpenAPI specs, llms.txt, plugins, and more. Returns scored reports with 80+ checks.

MCP server with 53 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), domain & web intel, threat intel.

Fight AI with AI. 6 adversarial AI agents debate crypto token risk before your agent trades. Rug-pull detection, security audits, consensus scoring. Supports Solana, Ethereum, Base, BSC. Free tier available.

MCP server security scanner that detects vulnerability patterns in MCP server configurations and outputs SARIF reports. Scans for prompt injection risks, tool poisoning, excessive permissions, and other security issues in Model Context Protocol servers.

Security scanner for MCP servers. Scores any server against the AgentsID trust framework live scan via npx or lookup pre-scanned results from the public registry of 15,983 servers. Returns trust score (0–100), grade (A–F), and findings across injection, permissions, validation, and auth categories.

Scan APIs for security vulnerabilities and get OWASP risk scores. Detects auth bypass, BOLA/IDOR, data exposure, prompt injection, and 12+ security categories.

Scan OpenClaw SKILL.md and MCP tool definition files for security vulnerabilities. 22 rules across prompt injection, capability escalation, data exfiltration, encoded payloads, and composition risks. The only scanner targeting agent skill file formats.

Scan MCP servers for security risks before your AI agent trusts them. Detects prompt injection, supply chain attacks (including the LiteLLM 1.82.7/1.82.8 backdoor), excessive permissions, arbitrary code execution, typosquatting, and tool shadowing. Add to your .mcp.json and let your agent audit its own tools with tooltrust_scan_config.

AEO (Agent Engine Optimization) scanner — scores and benchmarks 12,800+ AI agent tools for discoverability, quality, and agent compatibility. 14 MCP tools for searching, scanning, comparing, and benchmarking.

Open-source AWS security scanner with Attack Chains, Breach Cost Estimation, and MCP Server. 47 checks across 15 AWS services. Every finding includes copy-paste remediation (CLI + Terraform) and a dollar-risk estimate with verified source. First free standalone AWS security MCP server - Prowler and Wiz require paid SaaS.

Security scanner for AI Agent skills, plugins, and MCP servers. 39+ detection rules with AST taint tracking, A-F grading, and post-uninstall residue cleanup.

MCP server + CLI that scans any project to discover its full AI ecosystem: MCP servers, context files, skills, agents, memories, and configurations for 19+ AI tools (Claude, Cursor, Windsurf, Copilot, Gemini, Codex, and more). Generates interactive HTML dashboards and supports ecosystem export/import across tools.

Connect AI agents to real-time crypto market scanning on Binance Futures. Create scans with CEL rules (e.g., rsi_14 < 30 && volume_quote > 100000), run them across all pairs, read alert events, and get explanations for why alerts fired or didn't. 9 tools, MIT license, works via npx @tickory/mcp.

Detect live website vulnerabilities and security flaws in GitHub repositories using automated DAST and SAST scanning. Safeguard applications by identifying exposed secrets, insecure dependencies, and common code patterns prone to exploitation. Receive structured fix plans with precise code remediation steps to resolve identified risks and improve security posture.

AI-native security tools via MCP. Prompt injection detection (208 patterns, 8 languages, <100ms), skill supply chain scanning (204 patterns, 8 risk categories), plus URL/domain/IP/email/password checks. Pay-per-request with USDC via x402 — no API keys needed. 9 tools, demo mode included.

MCP server that scans Next.js projects and returns a compact summary of routes, API endpoints, database schema, and security issues.

The only MCP server that gates skill installation behind a full security scan. 60+ threat patterns, 13 MCP tools, and support for 7 clients including Claude Code, Cursor, Windsurf, and GitHub Copilot. Features AI-powered search, cloud sync, and startup verification with SHA-256 content hashing.

Security scanner for MCP servers and AI-generated code. Detects leaked API keys, PII, prompt injection, and MCP misconfigs. Gives A-F security grades with fix-it guides. One command: npx project-shield scan .

Security scanner MCP server that protects AI coding agents from generating vulnerable code. Uses tree-sitter AST analysis to detect OWASP Top 10 vulnerabilities, hardcoded secrets, and prompt injection attacks. Includes package hallucination detection across 4.3M packages (npm, PyPI, RubyGems, crates.io, pub.dev, CPAN, Raku). Works with Claude Desktop, Claude Code, Cursor, Cline, and any MCP-compatible client. Full feature list (for detailed descriptions): • 275+ security rules covering Python, JavaScript, TypeScript, Java, Go, Ruby, PHP, C/C++, Rust, C#, Terraform, Kubernetes • AST-based detection with tree-sitter (falls back to regex when unavailable) • Taint analysis for tracking user input to dangerous sinks • Package hallucination detection: verifies 4.3M+ packages across 7 ecosystems • Prompt injection detection: blocks exfiltration, jailbreaks, and malicious instructions • Automatic fix suggestions for common vulnerabilities • Zero config: works instantly with npx • CWE/OWASP metadata for compliance reporting

A comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP implementations.

detect exposed mcp servers over the internet and enumerate their tools

This MCP scans files using ClamAV to detect viruses, malware, and other threats

Mcp services by marshal

MCP Server for using Garak LLM vulnerability scanner

MCP server for scanning local code and localhost URLs

Asterisk Model Context Protocol (MCP) server.

A Model Context Protocol (MCP) server that provides Trivy security scanning capabilities through a standardized interface.