Simple surface, clear boundary.

The active public surface is search, server profiles, public scans, status, and static documentation.

• No credential collectionThe public registry does not need target credentials or private API keys.
• Public targets onlyScan URLs should be public MCP endpoints you are allowed to test.
• Rate limitedPublic scan endpoints are intentionally bounded.