"GitHub MCP server" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Gives any public GitHub repo a safety grade (A to F) in plain English, with a clear next step: install, ask first, or don't install.
Safety grade (A to F) for any public GitHub repo, in plain English, before you install it.
Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-c.
Audits any live MCP server URL or GitHub repo on Glama's 6-dimension TDQS rubric and compiles dro.
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
Dependency picker for coding agents: recommends, compares and scores GitHub repos with a verdict.
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.
Known open GitHub issues in exact npm and PyPI versions, with workarounds, for coding agents.
Read-only scan of a public GitHub repo for leaked secrets, with a 0-100 grade.
Architecture diagrams, explanations and Mermaid source for public GitHub repositories.
Rams is a design reviewer for UI code. The MCP server puts the hosted engine inside a coding agent: the agent passes files to the review_files tool and gets back a 0–100 score with file:line issues and concrete fixes — accessibility, color, typography, spacing, components, UX, motion, craft, and native SwiftUI. Same engine and scoring as the Rams GitHub App. 258 rules, published at rams.ai/rules. Free tier: 30 reviews/month.
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
Verify a vuln report's file/line/function claims against a real GitHub repo.
Independent static verification for exact immutable public GitHub commits.
Audit and repair any public GitHub repo. Free survey; paid source, unified diffs and a pull request.
An MCP server that gives your AI access to the source code and docs of all public github repos
Scan a public GitHub repo, explain risks, get fix prompts and rescan to confirm fixes.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.
Scan a public GitHub repo for known Vercel Python-runtime deploy footguns.
Verify a vuln report's file/line/function claims against a real GitHub repo.
GitHub project health, package dependency risk, trending repos, license & package comparison.
GitHub Secret Scanner - Find Leaked API Keys | Gitleaks
PQC scanner for GitHub repos and smart contracts. Detects quantum-vulnerable ECDSA/RSA.
Screens public GitHub repos and PRs to generate risk maps, findings, and merge-readiness signals.
AI code review for GitHub PRs with an MCP autofix loop for Claude Code and Cursor
GitHub security scanning, code audit, and workflow automation for repositories.
Chipp: the code of an app being rebuilt: the imported GitHub repo and the legacy codebase
Tell your assistant you're about to launch. It checks the app your builder synced to GitHub, tells you what would break for real users, hands you the fix, and re-checks after the sync. Point it at any public repo first (nothing to install, nothing to grant) and see exactly what comes back before you connect the one that matters.
Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.
Monitor third-party API changes in GitHub repos, map breaks to files, open reviewable auto-fix PRs.
Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.
Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.
Audit GitHub repos for malicious and supply-chain code before you depend on them.
Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.
Repo intel for AI coding agents: overview, PRs, contributors, hot files, CI, deps. Remote MCP.
