"Cal.com" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Signed, traced record of what an npm package or file attempts when run, network included. No key.
Lint a SKILL.md for frontmatter, structure, secrets and size. All 6 tools free.
Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.
Thermal label MCP server: render, validate, debug and convert ZPL, EPL, TSPL and CPCL labels.
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
HefestoAI checks AI-generated code before you ship it.
Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.
Production-safety audits for AI-generated code, with a fix for every finding.
Pine Script backtest-trap checks, backtest reconciliation and official Korean finance data.
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Canonicalize Tailwind classes to their short form, and search LunarWerx free dev tools.
Dependency picker for coding agents: recommends, compares and scores GitHub repos with a verdict.
Pre-flight verdict on MCP servers: known-bad identity, CVEs, dependency tree, tool drift. Signed.
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.
Free, read-only ship-readiness check for Replit, Lovable and Bolt apps.
Enforces architectural invariants and code quality rules inside your AI agent's edit loop.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Find retiring AI models and outdated API SDKs in your code, with dates, replacements and guides.
