ecoa - I built a black-box scanner for my own apps: paste a URL, schedule it weekly, or run it from CI or your AI agent (yes, MCP)