Check a URL for malware, phishing, and other threats. Uses URLhaus + heuristic analysis.
Check if a password hash (SHA-1) has been exposed in known data breaches via HIBP.
Look up a SHA-1 hash prefix in the HIBP k-Anonymity database.
Check domain reputation: DNS records, blacklists (Spamhaus, SpamCop, SORBS), SPF/DMARC, SSL.
Check IP reputation: blacklists, Tor exit node detection, reverse DNS.
Check if an email address has been exposed in known data breaches via HIBP.
Run all security checks on a target (URL, domain, IP, or email). Most comprehensive scan.
Scan an AI agent skill/plugin for security issues across 8 risk categories (Snyk ToxicSkills taxonomy). Checks for prompt injection, malicious code, suspicious downloads, credential handling, secret detection, third-party content, unverifiable dependencies, and financial access patterns. Static analysis only — no code execution. Returns risk score (0-100), severity-ranked findings with file locations, and human-readable summary.
Detect prompt injection in text. Analyzes across 4 categories (direct injection, encoding tricks, exfiltration, indirect injection) with 200+ detection patterns. Designed for real-time inline usage before processing untrusted user input. Returns boolean verdict, confidence score (0-1), matched patterns with evidence, and decoded content if encoding obfuscation was detected. Response time <100ms p95.
Get a multi-signal trust score for any MCP server endpoint. Analyzes security (domain reputation, SSL, SPF/DMARC), injection risk (tool description scanning), supply chain safety (toxic skill categories), reliability (uptime, latency, protocol compliance), and on-chain reputation (AgentProof ERC-8004). Returns composite trust score (0-100), tier (platinum/gold/silver/bronze/unranked), and detailed per-signal breakdown. Use this to evaluate whether an MCP server is safe to connect to.