"Documentation for Vercel AI SDK" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Code security scanner for founders and small teams: leaked secrets, missing RLS, injection, CVEs
HefestoAI checks AI-generated code before you ship it.
Coding agents in multi-service codebases routinely rebuild existing helpers, trust stale type definitions, and modify API contracts without knowing who consumes them. Carrick solves this by indexing your entire TypeScript ecosystem across service and repository boundaries. By integrating deeply with the TypeScript compiler, Carrick traces every route, type, and cross-service call while recording function behaviour so agents search by intent rather than name. Delivered via MCP for AI agents and LSP for IDEs, Carrick ensures models see existing endpoints and utilities before generating new code. The scanner is source-available and runs from your CLI or CI pipeline.
Lint a SKILL.md for frontmatter, structure, secrets and size. All 6 tools free.
Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.
An MCP server that compiles ASN.1 schema definitions into executable, native source code for a variety of languages (like Python, Rust).
Design review for UI code and live pages: quick checks, 0-100 scored reviews, fixes as patches
Find what to fix on a public website, for search engines and for AI answers.
Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-c.
TypedPull MCP server by PeerFoundry. Disclosure: We built these; PeerFoundry is maker.
Guardian agent for AI coding: four frontier models review risky diffs and commits before they ship.
Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.
Vet an agent skill before you install it: structure, triggers, secrets.
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
Production-safety audits for AI-generated code, with a fix for every finding.
Patent prior-art search, claim comparison, and codebase scans for patentable tech (patent_scan).
Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.
**Can AI actually read your page?** ChatGPT, Perplexity, Claude and Google's AI Overviews fetch pages very differently from your browser — no JavaScript, tight timeouts, and a robots.txt rulebook of their own. Lekta fetches a URL exactly the way they do and grades what survives, **A+ to F**. This is the technical half of **AEO** (answer engine optimization) and **GEO** (generative engine optimization): before a model can cite you, it has to be able to fetch you, parse you, and find one sentence worth quoting. **The loop this server was built for:** `Audit https://mysite.com/pricing with Lekta, apply the fixes it lists, audit it again, and show me the difference.` Your agent gets a graded verdict, a ranked fix plan with the exact markup to paste, and a diff that proves the change landed. Repeat until A+. **Four layers, 100 points:** **Access** 25 — do the ~17 AI crawler tokens get past robots.txt? **Indexability** 25 — how much content survives without JavaScript? **Answerability** 30 — is there a single quotable sentence an engine can lift? **Recency** 20 — can a model tell when this page was last true? **What this is not:** a rank tracker. Lekta will not tell you how often ChatGPT mentions your brand. It tells you whether your page can be read and quoted when it does — the part you can actually fix. **No black box.** Every finding cites its basis — an RFC, a vendor doc, or a dated measurement we ran. The engine is versioned with a public changelog: a score never moves without a published shift table. **Tools:** `lekta_audit` (fresh fetch) · `lekta_report` (cached read) · `lekta_fix_plan` (ranked, paste-ready) · `lekta_diff` (before/after) · `lekta_my_sites` Listing tools is open. Tool calls need a free key from lekta.dev/en/panel/api — send `Authorization: Bearer lekta_…` or `x-api-key`. Cached reads, fix plans and diffs cost nothing; only fresh fetches count against the daily limit. **Topics:** AEO · GEO · AI SEO · LLM SEO · answer engine optimization · generative engine optimization · AI crawler access (GPTBot, ClaudeBot, PerplexityBot, Google-Extended) · JavaScript-free indexability · structured data · content freshness
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
Check that your AI is being logical. Free tool that mathematically catches contradictions in agent reasoning. No account needed. Also offers paid guardrails that converts natural language to formal verification proofs, that anyone can check succinctly.
Recover project context, review recorded decisions, and steer queued work across AI coding agents.
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Proves AI-generated Python does what you asked: lint, types, security, sandbox run, exact fixes.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
CodeSentinel — AI-powered codebase health agent
DBRE-grade SQL analysis inside any MCP client. No connection. No install. Paste a query.
Stateless TypeScript and JavaScript code intelligence for AI agents. Find semantic symbol references, resolve imports and importers, inspect callers and callees, and analyze change impact with compiler-backed evidence. No repository indexing or OAuth required.
Stateless TS/JS compiler facts for agents: references, imports, impact. No repo index or OAuth.
Dependency picker for coding agents: recommends, compares and scores GitHub repos with a verdict.
