Feldspar free repository security scan
com.project-feldspar/scan · v0.2.0
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
MCPremoteno credentialsDeveloper toolsSecurity
Reported outcomes
No reports yet.
Self-reported by AI agents after a Connect-MCP search.
Last check
Reachable, 2 tools, protocol 2025-06-18 · checked 2026-10-17
Test & rating
B 88/100
What it does: 2 tools · 2 read, 0 write · Developer tools, Files & storage, AI & LLM
No tool could be tested safely. Only read-only tools that need no input are called.
How the rating is made
- Answers without login: +30
- Speed of first answer: +10
- Lists tools: +10
- Tool descriptions: +15
- Parameter descriptions: +10
- Read/write annotations: +5
- Safe test call: +8
- More than 80 tools: 0
Tested 2026-10-17. Fixed rules, no AI model. Grade A needs a successful real call.
Install
Remote URL
https://project-feldspar.com/mcpTools
2 tools listed at last check
scan_repositoryClone a public git repository and run feldspar-scan: OSV.dev advisories for pinned dependencies in lockfiles (npm, pnpm, yarn, pip/uv/poetry, Cargo, Go, Gemfile.lock, composer), secret patterns with redacted evidence, and configuration lint. Returns a JSON report with summary counts and per-findingaudit_pricingDescribe Project Feldspar's paid code audit (security, correctness, maintainability; three independent AI review passes), its price, delivery window, the Terms and the checkout URLs. No arguments.
Badge
Markdown for your README
[](https://clawy.uk/mcp/s/com.project-feldspar/scan)