Flowcheck
Local installLeast-privilege auditor for GitHub Actions workflows: permissions, triggers, secrets.
Code, repos, CI and docs. Ranked by whether they actually work: we connect to each one and publish what happens.
Test, describe, and validate regular expressions locally. No network and no key.
Reads your companion chatbot's system prompt against California SB 243, New York GBL Article 47, Ill
GitHub Actions supply-chain hardener: audit workflows for unpinned actions and build a SHA pin plan.
Keyless MCP server for PyPI: Python package versions, summaries, authors, requirements, release...
8 rules for Ofcom's highly effective age assurance duty, in force since 25 July 2025, where the pena
PR dependency early warning: install scripts, typosquats, downgrades, and lockfile drift.
HTTP request echo from Postman Echo. No key required.
Finds retired API versions and removed sfdx force:* commands in your DX repo before a deploy or a CI
Audit any MCP server: handshake, schemas, descriptions, error handling, scored.
Package file metadata from the unpkg CDN. No key required.
Classic Outlook renders with the Word engine, the new Outlook with WebView2. Lint one email file aga
Base-vs-head CI differ: which PR failures are introduced, pre-existing, external, or fixed.
Placeholder JSON test data. No key required.
Recomputes every record checksum in a .hex or .s19 firmware image and names the bad records, the ove
Extract a repo's contribution gates into machine-readable contribution-gates.json.
Validate, format, and inspect JSON locally. No network and no key.
19 date-aware checks on the [project] metadata that decides whether your next release uploads
Red-first repro verifier: a fix counts only when the repro fails on the base and passes on the fix.
Browse the JSON Schema Store catalog. No key required.
Track stale claims and parked fixes so open-source work does not silently die.
Package versions and CDN statistics from jsDelivr. No key required.
Release verification for Node and Python: tag, npm, PyPI, Registry, and GHCR must agree, or NO-GO.
Look up PHP packages, versions, and downloads from Packagist. No key required.
Condense a CI log to its failure sections and root-cause lines, with original line anchors.
Local explanation of reproducibility signals and toolchain contradictions without exact versions...
Base-vs-head test result differ: named tests added, removed, and changed, never raw counts.
Look up npm and PyPI packages: versions, descriptions, and metadata. No key required.
Check .env.example against actual env usage in code: missing, stale, and undocumented vars.
Use this MCP server to IETF documents, RFCs, Internet-Drafts, and working groups. Tools include...