Return the configured motor database.

Parse a Shodan-style search query into a MongoDB filter dict. Args: query: Raw query string like 'protocol:mcp auth:none tool:query_db fr

Make a GET request, returning None on any error.

Yield raw result dicts from the upstream source. Parameters ---------- query: The search query in the source's na

Persist progress to the scan document.

Return the shared async Redis connection, or None if unavailable. On first call, attempts to connect and ping Redis. If that fails, marks Red

Full pipeline: search, normalize, upsert to MongoDB. Parameters ---------- query: Search query forwarded to ``sea

Create all required indexes on startup. Safe to call repeatedly -- MongoDB treats index creation as idempotent.

Send a JSON-RPC request and return the result. Handles both direct JSON responses and SSE-wrapped responses.

Probe common paths to find the MCP endpoint. Returns the working URL path.

Convert a single Nuclei JSONL finding to an AgentEndpoint-compatible dict. Nuclei JSONL structure (abbreviated):: {

Enrich a single endpoint by its ``_id``. Fetches the document from MongoDB, runs Shodan and Nuclei enrichment, computes a risk score, writes

Return all .yaml/.yml files under templates/.

Partially redact potential API keys/secrets in text for logging.

Convert MongoDB doc _id to string id (returns a shallow copy).

Call a specific tool and return the result.

Run the full attack pipeline, yielding log entries as they happen.

Check if text contains API keys, tokens, or secrets.

Close the motor client connection.

Override the database instance (used for testing).

Best-effort port extraction from a URL string.

Pick the best model to attack — prefer uncensored, then smallest.

Return the predefined Shodan search queries for agent discovery.

Execute a scan based on the provided configuration. Parameters ---------- scan_config: Dict with at minimum a ``t

Append a log entry to Redis Stream or in-memory fallback.

Assess the risk level of a tool based on its name, description, and annotations. Parameters ---------- tool_name:

Detect dangerous tool combinations in an endpoint. Patterns: - exec/shell + no auth -> "exec_no_auth" - database read + write tools -> "d

Infer AgentEndpoint protocol from nuclei template metadata.

Check if the model refused the request.

Parse a nuclei JSONL output file into a list of finding dicts.

Probe ComfyUI: /system_stats, /object_info.

Probe Gradio: /info, /config.

Probe Ollama API endpoints. Standard Ollama endpoints: - GET / → "Ollama is running" - GET /api/tags → list of loaded

Probe OpenAI-compatible endpoints: /v1/models, /health.

Ensure the app package is importable inside the Modal container.

Insert or merge a normalized endpoint dict into MongoDB. Returns the ``_id`` of the upserted document.

Try to acquire a concurrency slot. Returns False if at capacity. Uses Redis INCR for distributed counting when available, otherwise falls bac

Build the TestingInfo dict for storage.

Return ``True`` if the nuclei binary is available. Also logs the detected path for debugging.

Return a tool category: file_read, file_write, exec, db, http, email, search, other.

Merge multiple Nuclei findings for the same (ip, port) into one endpoint dict. Nuclei emits one JSONL line per extractor match so a single ta

Release a concurrency slot.

Build minimal valid arguments from the tool's input schema.

Check if CORS is fully open (Access-Control-Allow-Origin: *).

Check if text contains PII indicators.

Detect auth status from HTTP status code and headers.

Detect web framework from an HTTP Server header value.

Infer the agent/service type from Shodan banner and HTTP data. Returns one of the ``ProtocolType`` literals. Detection is ordered fr

Background coroutine that runs the actual scan pipeline.

Try to extract MCP initialize response data from an HTTP body.

Instantiate and return a source adapter by name.

Guess the file path argument name from schema.