MCP Scanner

BroFindAI

https://brofindai.com/api/mcp · scanned 2026-10-17

None of its 5 tools were flagged. They read like lookups and searches.

0/ 100 · heuristic risk · Low

5 tools · 0 flagged

  • Runs code or commands0
  • Moves money0
  • Touches credentials0
  • Deletes0
  • Sends data out0
  • Exports data0
  • Writes or changes0
  • get_tool_details0 · Low

    Get full details of a specific AI tool by its slug identifier (e.g. 'chatgpt', 'midjourney'). Returns name, description, URL, category, pricing, votes, and metadata.

  • list_categories0 · Low

    List all AI tool categories in the BroFindAI directory with the number of tools in each category.

  • list_mcp_servers0 · Low

    Browse the BroFindAI MCP (Model Context Protocol) servers directory. Filter by category or search by keyword.

  • list_tags0 · Low

    List every tag and platform in use across the directory with tool counts, plus how many tools have a known/unknown API and open-source status. Call this to discover valid filter values for search_ai_tools.

  • search_ai_tools0 · Low

    Search the BroFindAI directory of 790+ AI tools by keyword, category, pricing, platform, tags, API availability, or open-source status. Returns matching tools with full structured metadata.

Vulnify checks each tool call before it runs: ALLOW, REVIEW or BLOCK, with the reason logged.

Badge for your README

Scanned by Vulnify
Markdown
[![Scanned by Vulnify](https://api.vulnify.io/public/mcp-scanner/servers/brofindai-com-api-mcp.svg)](https://www.vulnify.io/scanner/brofindai-com-api-mcp?utm_source=badge&utm_medium=readme&utm_campaign=scanner-badge)

Automated heuristic result, scanned on 2026-10-17. It is based only on the tool names, descriptions, schemas and annotations this server publishes; no tool was called. It is not a security audit or certification, and not an endorsement of or accusation against the server or its operator. A high score is not a vulnerability finding, and a low score does not mean the server is safe. Vulnify is not affiliated with this server or its operator; names and marks belong to their owners. Server owner? Write to security@vulnify.io from an address at the server's domain to remove or correct this page, or scan it again to update it. We reply within 5 business days.

To exclude your server (and its subdomains) from the scanner and remove its public page, write to security@vulnify.io from an address at its domain. We process requests within 5 business days: the page stops being shown and its stored result is deleted. To fix an error instead, tell us what's wrong or scan the server again.