"Checking Supabase migrations in GitHub Actions" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Coding agents in multi-service codebases routinely rebuild existing helpers, trust stale type definitions, and modify API contracts without knowing who consumes them. Carrick solves this by indexing your entire TypeScript ecosystem across service and repository boundaries. By integrating deeply with the TypeScript compiler, Carrick traces every route, type, and cross-service call while recording function behaviour so agents search by intent rather than name. Delivered via MCP for AI agents and LSP for IDEs, Carrick ensures models see existing endpoints and utilities before generating new code. The scanner is source-available and runs from your CLI or CI pipeline.
Find hidden Unicode in text or files: ASCII smuggling decoded, bidi overrides, look-alike letters.
Live npm and UNPKG data for AI agents: package resolution, project audits, import maps, and malware/CVE checks. Optional Shield sign-in for domain data.
Gives any public GitHub repo a safety grade (A to F) in plain English, with a clear next step: install, ask first, or don't install.
Safety grade (A to F) for any public GitHub repo, in plain English, before you install it.
Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-c.
Audits any live MCP server URL or GitHub repo on Glama's 6-dimension TDQS rubric and compiles dro.
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
Check that your AI is being logical. Free tool that mathematically catches contradictions in agent reasoning. No account needed. Also offers paid guardrails that converts natural language to formal verification proofs, that anyone can check succinctly.
Dependency picker for coding agents: recommends, compares and scores GitHub repos with a verdict.
Honest library picks for coding agents in 25-360 tokens. Tells your agent what NOT to install.
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
Security checks for Next.js + Supabase apps: code scan, read-only live DB check, fix confirmation.
Write, type-check and run AILANG in a sandbox, with Z3-proved contracts and docs search.
Rust crate vulns: CVEs, patched versions. $0.01/query. Be born in one call — free testnet funds.
Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.
Known open GitHub issues in exact npm and PyPI versions, with workarounds, for coding agents.
Find retiring AI models and outdated API SDKs in your code, with dates, replacements and guides.
Read-only scan of a public GitHub repo for leaked secrets, with a 0-100 grade.
Architecture diagrams, explanations and Mermaid source for public GitHub repositories.
Rams is a design reviewer for UI code. The MCP server puts the hosted engine inside a coding agent: the agent passes files to the review_files tool and gets back a 0–100 score with file:line issues and concrete fixes — accessibility, color, typography, spacing, components, UX, motion, craft, and native SwiftUI. Same engine and scoring as the Rams GitHub App. 258 rules, published at rams.ai/rules. Free tier: 30 reviews/month.
Explain a regex in plain English and detect catastrophic backtracking risk.
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
Verify a vuln report's file/line/function claims against a real GitHub repo.
Independent static verification for exact immutable public GitHub commits.
Audit and repair any public GitHub repo. Free survey; paid source, unified diffs and a pull request.
OSS libs in your stack, really used: source, tests, callers. C#, Java, TS, Python, Rust, PHP+.
An MCP server that gives your AI access to the source code and docs of all public github repos
The official e18e MCP server keeping your agent in check from installing bloated dependencies.
The OpenZeppelin Cairo Contracts MCP server generates secure smart contracts in the Cairo language for Starknet environments based on OpenZeppelin templates. It brings OpenZeppelin's proven security and style rules directly into AI-driven development workflows to create safe, production-ready contracts. Key capabilities include providing templates for ERC-20, ERC-721, ERC-1155, Multisig, Governor, and Vesting contracts.
Architecture compiler for AI code. 11 tools, 92 actions, 872 Lean4 proofs, 100/100 self-cert.
What changed in the packages, APIs and services your code depends on, and the fixes it needs.
Scan a public GitHub repo, explain risks, get fix prompts and rescan to confirm fixes.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Multi-LLM council: 25+ frontier models in parallel, consensus scoring, verdict-first code review.
Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.
Stop your AI agents from writing sloppy TypeScript. A toolkit that teaches coding agents like Claude Code, Codex, Cursor, Amp, and more to ship production-ready code in half the time, at half the cost. Docs are available at https://convention.sh/docs
Scan a public GitHub repo for known Vercel Python-runtime deploy footguns.
