Tools for static analysis, code intelligence, and code understanding. Provides capabilities for parsing, analyzing, and gaining insights into codebases across different programming languages.
Signed, traced record of what an npm package or file attempts when run, network included. No key.
Deterministic pre-flight EVM transaction firewall ($0.10 USDC), $0.03 binary Fast-Ping gate, live Base RPC token honeypot scanner by 0x address, MEV guard & Solidity auditor via x402 v2 USDC on Base Mainnet.
Guardian agent for AI coding: four frontier models review risky diffs and commits before they ship.
Coding agents in multi-service codebases routinely rebuild existing helpers, trust stale type definitions, and modify API contracts without knowing who consumes them. Carrick solves this by indexing your entire TypeScript ecosystem across service and repository boundaries. By integrating deeply with the TypeScript compiler, Carrick traces every route, type, and cross-service call while recording function behaviour so agents search by intent rather than name. Delivered via MCP for AI agents and LSP for IDEs, Carrick ensures models see existing endpoints and utilities before generating new code. The scanner is source-available and runs from your CLI or CI pipeline.
Find hidden Unicode in text or files: ASCII smuggling decoded, bidi overrides, look-alike letters.
HefestoAI checks AI-generated code before you ship it.
Lint a SKILL.md for frontmatter, structure, secrets and size. All 6 tools free.
Zero-auth Notary & AST: RM(1,3), RFC 6962, W3C VC 2.0, ROS 2, 3-Level Mind & A2A-MCP Bridge.
Verify AI-generated code before you commit: independent reviewers check it. PR review too.
Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.
Zero-auth Notary & AST: RM(1,3), RFC 6962, W3C VC 2.0, ROS 2, 3-Level Mind & A2A-MCP Bridge.
Enables AI coding tools to load design guidelines, tokens, components, templates, and migration mappings before writing UI, then validates generated snippets locally and returns fixes so the tools can correct themselves before the code is shown.
Health scores for your team's frontend repos: findings, the fixes worth most points, and SBOMs.
Code security scanner for founders and small teams: leaked secrets, missing RLS, injection, CVEs
Find hardcoded UI text, give it translation keys, translate it and write the locale files.
Repair broken JSON without changing values, find the exact error, outline or query big payloads.
Live npm and UNPKG data for AI agents: package resolution, project audits, import maps, and malware/CVE checks. Optional Shield sign-in for domain data.
ASN.1 tools. Validate, compile ASN.1 schema, encode and decode ASN.1 data.
30+ deterministic dev and delivery tools: linting, metrics, diagrams, model advice, AI-text checks.
Vet an agent skill before you install it: structure, triggers, secrets.
