"Spring Security" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-c.
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Proves AI-generated Python does what you asked: lint, types, security, sandbox run, exact fixes.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
npm/PyPI package dependency upgrade reviews: security, runtime compatibility, cited migration.
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
Rust crate vulns: CVEs, patched versions. $0.01/query. Register in-session — free testnet funds.
Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.
C string escape count, input discarded
Python string escape count, input discarded
Security + bug + perf + refactor audit for Python. Returns 0-10 score + MD report.
The OpenZeppelin Stylus Contracts MCP server generates secure smart contracts for the Arbitrum Stylus environment using OpenZeppelin templates, including ERC-20, ERC-721, and ERC-1155 standards. It automatically validates generated code against OpenZeppelin's security and style rules, enforcing best practices for imports, modifiers, naming conventions, and security checks to prevent common vulnerabilities. The server integrates with AI development tools like Cursor, Claude, Gemini, Windsurf, and VS Code to enable AI-assisted, production-ready smart contract development.
MCP server for static security analysis of Android source code
Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.
The OpenZeppelin Solidity Contracts MCP server integrates OpenZeppelin's security and style rules into AI-driven development workflows, enabling AI assistants to generate safe, correct, and production-ready smart contracts. It automatically validates generated code against OpenZeppelin standards (including imports, modifiers, naming conventions, and security checks) and supports various contract types including ERC-20, ERC-721, ERC-1155, Stablecoins, RWA, Governor, and Account contracts through prompt-driven workflows.
The OpenZeppelin Cairo Contracts MCP server generates secure smart contracts in the Cairo language for Starknet environments based on OpenZeppelin templates. It brings OpenZeppelin's proven security and style rules directly into AI-driven development workflows to create safe, production-ready contracts. Key capabilities include providing templates for ERC-20, ERC-721, ERC-1155, Multisig, Governor, and Vesting contracts.
Validates AI-generated Python: syntax, lint, security scan and deterministic repair.
## Skill Catalog The library contains 42 public skills organized by Rails development concern. | Category | Examples | |----------|----------| | Planning | `create-prd`, `generate-tasks`, `plan-tickets` | | Testing | `plan-tests`, `write-tests`, `test-service`, `triage-bug` | | Code quality | `code-review`, `respond-to-review`, `security-check`, `refactor-code` | | Architecture and DDD | `define-domain-language`, `review-domain-boundaries`, `model-domain`, `review-architecture` | | Rails imple
Paid AI utility APIs for semantic web comparison, migration safety, code verification, document extraction, security analysis, monitoring, accessibility auditing, and citation research. Accessible through MCP with x402 payments on Base mainnet.