"Guidance on orchestrating new software projects" matching MCP connectors:

CarrickAOAuth

io.github.carrick-tools

Coding agents in multi-service codebases routinely rebuild existing helpers, trust stale type definitions, and modify API contracts without knowing who consumes them. Carrick solves this by indexing your entire TypeScript ecosystem across service and repository boundaries. By integrating deeply with the TypeScript compiler, Carrick traces every route, type, and cross-service call while recording function behaviour so agents search by intent rather than name. Delivered via MCP for AI agents and LSP for IDEs, Carrick ensures models see existing endpoints and utilities before generating new code. The scanner is source-available and runs from your CLI or CI pipeline.

Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.

Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.

Identifiers PulseGate holds for a software project, and where each one came from.

Audit a website for technical and on-page SEO problems.

Check if a dependency's license obligates you, based on how you ship. npm, PyPI, Go.

Reality Graph Verification ToolsA

dev.realitygraph

Read-only AI coding tools for change verification, release readiness, capacity, and guidance.

The OpenZeppelin Cairo Contracts MCP server generates secure smart contracts in the Cairo language for Starknet environments based on OpenZeppelin templates. It brings OpenZeppelin's proven security and style rules directly into AI-driven development workflows to create safe, production-ready contracts. Key capabilities include providing templates for ERC-20, ERC-721, ERC-1155, Multisig, Governor, and Vesting contracts.

Paid AI utility APIs for semantic web comparison, migration safety, code verification, document extraction, security analysis, monitoring, accessibility auditing, and citation research. Accessible through MCP with x402 payments on Base mainnet.

Watch dependencies, verify facts, inspect coverage, and catch up on changes with durable cursors.

Software Heritage MCP.

## Skill Catalog The library contains 42 public skills organized by Rails development concern. | Category | Examples | |----------|----------| | Planning | `create-prd`, `generate-tasks`, `plan-tickets` | | Testing | `plan-tests`, `write-tests`, `test-service`, `triage-bug` | | Code quality | `code-review`, `respond-to-review`, `security-check`, `refactor-code` | | Architecture and DDD | `define-domain-language`, `review-domain-boundaries`, `model-domain`, `review-architecture` | | Rails imple

Seal SecurityOAuth

io.sealsecurity

Vulnerability management: scan projects, search sealed packages, manage sealing rules and reports.

Code review that knows what depends on your change — before commit or on every PR.

Software component catalog: search your org's services, docs, APIs, dependencies, and ownership.

Review connected software projects, submit local findings and read reports with explicit approval.

Alcheon

dev.alcheon.api

Alcheon is an MCP server that gives AI coding agents access to a curated library of 100+ analyzed real-world design systems, letting them recommend reference sites, synthesize design briefs with spacing and color tokens, and generate section-level UI guidance — so AI-built interfaces draw from actual design DNA instead of generic defaults.

Stack intelligence from real production Rails apps. Compare gems, scan a Gemfile. No API key.

Always-on performance engineering for your own code: proven pull requests, the merge stays yours.

Dependency risk + calibrated, publicly scored forecasts on OSS packages. Docs: anteproof.com/docs