FF

Feldspar free repository security scan

com.project-feldspar/scan

Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.

Yes, your AI can use this right now.Answered a live MCP handshake in 714 ms with no sign-in needed and exposes 2 tools.

Connect it

Settings → Connectors → Add custom connector
URL: https://project-feldspar.com/mcp

2 tools, verified live

Pulled straight from the server with tools/list on 2026-10-17.
scan_repositoryread-only

Clone a public git repository and run feldspar-scan: OSV.dev advisories for pinned dependencies in lockfiles (npm, pnpm, yarn, pip/uv/poetry, Cargo, Go, Gemfile.lock, composer), secret patterns with redacted evidence, and configuration lint. Returns a JSON report with summary counts and per-finding severity, file, line, advisory id and fixed versions. Deterministic, no LLM involved. Takes 2-90 s d

audit_pricingread-only

Describe Project Feldspar's paid code audit (security, correctness, maintainability; three independent AI review passes), its price, delivery window, the Terms and the checkout URLs. No arguments.

Alternatives in Developer Tools

Compare →
Try “Notion”, “Stripe”, “create invoice”, “browser”