Next free-source huntWe check for new free data every weekday.
Cyber ThreatMCP serverFirst audited Nov 13, 2026

Radar Agent Tools

8 no-key agent tools: web to Markdown, domain+email DNS, papers, US rules, trials, odds, CVEsThe vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 390 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
No, read-onlyAll 13 tools say they only read.
Endpointhttps://2-29-135-242.sslip.io/mcp

Website Streamable HTTP · protocol 2025-11-25 · server version 1.0.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 13 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (13)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • web_readFetch any public web page and return its main content as clean Markdown (or plain text) with title, author, date and language. Boilerplate (menus, cookie banners, footers) removed. Respects robots.tx…Read-only
  • domain_intelOne call for a domain: RDAP registration (registrar, created, expires, status, nameservers, DNSSEC) from the official IANA RDAP servers, live DNS (A, AAAA, MX, NS, TXT, CAA, SPF, DMARC) and the TLS c…Read-only
  • federal_registerSearch the official US Federal Register: final rules, proposed rules, notices and presidential documents with abstract, agencies, publication date and links. Filter by keyword, type, agency and date.…Read-only
  • clinical_trialsSearch ClinicalTrials.gov (official v2 API) by keyword, condition, intervention, sponsor or location. Returns NCT id, title, status, phases, enrollment, conditions, interventions, sponsor, dates and…Read-only
  • osv_vulnsKnown vulnerabilities for an open-source package version from OSV.dev (GitHub advisories, PyPI, npm, Go, Maven, crates.io...): id, CVE aliases, summary, severity, fixed versions, references. Plus wha…Read-only
  • literature_searchSearch 250M+ scholarly works (journals, preprints, conferences, books) from OpenAlex, with Crossref fallback: title, authors, year, venue, DOI, citation count, open-access PDF link and abstract. Filt…Read-only
  • email_authEmail deliverability and spoofing check for a domain in one call: MX + mail provider, SPF (all qualifier, DNS lookup count vs the limit of 10), DMARC policy/pct/reporting, DKIM keys on 20+ common sel…Read-only
  • business_checkOne-call KYB check of a company: EU VAT number validated in the official VIES register (company name and registered address), the address geocoded by the national geocoder, the website domain's age a…Read-only
  • domain_security_reportOne call, one domain, every check: DMARC/SPF/DKIM/MX score with the exact DNS records to fix, security headers grade and SSL certificate days left, WHOIS/RDAP age, expiry and registrar, plus a merged…Read-only
  • airport_reportOne call for one airport: airport record (IATA/ICAO, location, time zone), planes arriving and departing right now with airline and route, FAA delays and delay risk for US airports, METAR/TAF weather…Read-only
  • website_reportOne call for one website: technologies (CMS, frameworks, analytics, hosting) with versions, title/description/Open Graph image, security headers + SSL grade, and domain age from RDAP. ~2-5 s. Free: 2…Read-only
  • security_scanExternal security scan of a website: detects JavaScript libraries and frameworks with their versions and lists their known vulnerabilities (OSV.dev + CISA KEV exploited flag + fix version), security…Read-only
  • web_page_reportOne call for one URL: the main content as clean Markdown for LLMs (word count, language, author) plus title, description, Open Graph image, site name and favicon. Respects robots.txt. ~1-3 s. Free: 2…Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200390 ms
initializedHTTP 202134 ms
tools/listHTTP 200391 ms
unknown-methodHTTP 200127 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.