Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Describe Project Feldspar's paid code audit (security, correctness, maintainability; three independent AI review passes), its price, delivery window, the Terms and the checkout URLs. No arguments.
This tool takes no arguments.
Describe Project Feldspar's paid code audit (security, correctness, maintainability; three independent AI review passes), its price, delivery window, the Terms and the checkout URLs. No arguments.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}Clone a public git repository and run feldspar-scan: OSV.dev advisories for pinned dependencies in lockfiles (npm, pnpm, yarn, pip/uv/poetry, Cargo, Go, Gemfile.lock), secret patterns with redacted evidence, and configuration lint. Returns a JSON report with summary counts and per-finding severity, file, line, advisory id and fixed versions. Deterministic, no LLM involved. Takes 2-90 s depending on repository size.
| Argument | Type | Description |
|---|---|---|
| url* | string | https://github.com/owner/repo (also gitlab.com, codeberg.org, bitbucket.org) |
{
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"description": "https://github.com/owner/repo (also gitlab.com, codeberg.org, bitbucket.org)"
}
},
"additionalProperties": false
}