MacroCyber

co.macrocyber/attack-surface

Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.

Yes, your AI can use this right now.Answered a live MCP handshake in 563 ms with no sign-in needed and exposes 2 tools.

Connect it

Settings → Connectors → Add custom connector
URL: https://macrocyber.co/api/mcp

2 tools, verified live

Pulled straight from the server with tools/list on 2026-10-17.
macrocyber_exposure_claimread-only

Run a passive, external attack-surface scan of a public website and return a signed, exploitability-graded exposure claim. The claim holds: an SSVC decision (Act, Attend or Track); a 0-100 risk score (higher is worse) and letter grade; the observed enablers, each with evidence, reachability, CWE/OWASP/LLM/ASI taxonomy and remediation (what a correct fix achieves, how it usually goes wrong, how to

macrocyber_verify_fixesread-only

Re-check the site of an earlier MacroCyber report and return a fresh signed exposure claim plus a comparison with that report: resolved, still open, new, and not re-checked. An issue counts as resolved only when this scan re-ran the check that found it, at the same place, and it was gone; anything the scan could not re-run (a page it did not reach, a check cut short by the scan's limits, a site it

Alternatives in Databases & Data

Compare →
Try “Notion”, “Stripe”, “create invoice”, “browser”