"GitHub Copilot" matching MCP connectors:

Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-c.

Audits any live MCP server URL or GitHub repo on Glama's 6-dimension TDQS rubric and compiles dro.

Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.

Dependency picker for coding agents: recommends, compares and scores GitHub repos with a verdict.

Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.

Known open GitHub issues in exact npm and PyPI versions, with workarounds, for coding agents.

Read-only scan of a public GitHub repo for leaked secrets, with a 0-100 grade.

Architecture diagrams, explanations and Mermaid source for public GitHub repositories.

Rams is a design reviewer for UI code. The MCP server puts the hosted engine inside a coding agent: the agent passes files to the review_files tool and gets back a 0–100 score with file:line issues and concrete fixes — accessibility, color, typography, spacing, components, UX, motion, craft, and native SwiftUI. Same engine and scoring as the Rams GitHub App. 258 rules, published at rams.ai/rules. Free tier: 30 reviews/month.

Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.

Verify a vuln report's file/line/function claims against a real GitHub repo.

Independent static verification for exact immutable public GitHub commits.

Audit and repair any public GitHub repo. Free survey; paid source, unified diffs and a pull request.

Korext: AI Code GovernanceA

io.github.Korext

Governance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.

greadA

io.github.NitroRCr

An MCP server that gives your AI access to the source code and docs of all public github repos

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.

Scan a public GitHub repo for known Vercel Python-runtime deploy footguns.

Verify a vuln report's file/line/function claims against a real GitHub repo.