"A general ecommerce platform or marketplace" matching MCP connectors:

Check if a dependency's license obligates you, based on how you ship. npm, PyPI, Go.

Lint a SKILL.md for frontmatter, structure, secrets and size. All 6 tools free.

Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.

A skeptical senior-engineer code reviewer over MCP: risk-scans unified diffs, flags AI-generated-code tells, reports complexity hotspots, scans for leaked secrets, and runs an OWASP security pass — real analyzers, no external APIs. Free tier, no signup.

A fully free linter for agent skill files: lint_skill validates YAML frontmatter, structure, size budgets, and safety phrasing with a pass/fail verdict; packaging_check validates zip layout against marketplace rules; plus regex_test, json_validate, diff_texts, and cron_explain for skill authors. No license or account required.

Score the privilege a Chrome MV3 extension takes from its manifest, and diff permission sets.

Ground-truth code graph for your codebase: exact callers, callees, symbols & dependencies.

Repository evidence for agents before they adopt dependencies, enter codebases, compare, or merge.

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Rams is a design reviewer for UI code. The MCP server puts the hosted engine inside a coding agent: the agent passes files to the review_files tool and gets back a 0–100 score with file:line issues and concrete fixes — accessibility, color, typography, spacing, components, UX, motion, craft, and native SwiftUI. Same engine and scoring as the Rams GitHub App. 258 rules, published at rams.ai/rules. Free tier: 30 reviews/month.

Runs your code against a contract; returns HELD or BROKE at the exact input. Deterministic.

Multi-model code review: a panel of models + detectors return a pass/fail verdict. Paid via x402.

Stop your AI agents from writing sloppy TypeScript. A toolkit that teaches coding agents like Claude Code, Codex, Cursor, Amp, and more to ship production-ready code in half the time, at half the cost. Docs are available at https://convention.sh/docs

Send a coupling matrix, get zone classifications and optimal factorization strategy.

DBRE-grade SQL analysis inside any MCP client. No connection. No install. Paste a query.

AI code review for GitHub PRs with an MCP autofix loop for Claude Code and Cursor

Ask a codebase what calls what: search, blast radius, paths between symbols, and diffs.

Live PR/MR code reviews via review_url_code. OAuth or portal Bearer auth.

Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.