Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure
Baselines an MCP server's tools and detects tool-definition changes after approval
Checks declared npm/PyPI dependencies against real registries to catch slopsquatting
Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats