"GitHub Copilot" matching MCP connectors:

Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.

Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.

Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Independent static verification for exact immutable public GitHub commits.

Rams is a design reviewer for UI code. The MCP server puts the hosted engine inside a coding agent: the agent passes files to the review_files tool and gets back a 0–100 score with file:line issues and concrete fixes — accessibility, color, typography, spacing, components, UX, motion, craft, and native SwiftUI. Same engine and scoring as the Rams GitHub App. 258 rules, published at rams.ai/rules. Free tier: 30 reviews/month.

An MCP server that gives your AI access to the source code and docs of all public github repos

Screens public GitHub repos and PRs to generate risk maps, findings, and merge-readiness signals.

Governance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.

GitHub project health, package dependency risk, trending repos, license & package comparison.

Audit and repair any public GitHub repo. Free survey; paid source, unified diffs and a pull request.

AI code review for GitHub PRs with an MCP autofix loop for Claude Code and Cursor

Audit GitHub repos for malicious and supply-chain code before you depend on them.

PQC scanner for GitHub repos and smart contracts. Detects quantum-vulnerable ECDSA/RSA.

Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.

Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.

Repo intel for AI coding agents: overview, PRs, contributors, hot files, CI, deps. Remote MCP.

AI code reviewer for GitHub pull requests. Read-only access to your CodeMouse accounts, repositories, and PR reviews — status, duration, cost, tokens, and per-provider runs.