"Tools and frameworks for thinking about software development" matching MCP connectors:

Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.

Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.

Independent static verification for exact immutable public GitHub commits.

Statically audits MCP tool surfaces for token cost, schema quality, and design issues.

Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev. No API keys.

The official Svelte MCP server providing docs and autofixing tools for Svelte development

Static linter for CLAUDE.md-style agent constitution files: 10 operational-guardrail checks.

Read-only AI coding tools for change verification, release readiness, capacity, and guidance.

Rams is a design reviewer for UI code. The MCP server puts the hosted engine inside a coding agent: the agent passes files to the review_files tool and gets back a 0–100 score with file:line issues and concrete fixes — accessibility, color, typography, spacing, components, UX, motion, craft, and native SwiftUI. Same engine and scoring as the Rams GitHub App. 258 rules, published at rams.ai/rules. Free tier: 30 reviews/month.

OSS libs in your stack, really used: source, tests, callers. C#, Java, TS, Python, Rust, PHP+.

Design review for UI code: 258 rules across 9 categories, scored 0-100 with concrete fixes.

AI-native git hosting — repos, PRs, issues, CI gates, and AI code review over MCP (60 tools).

Read-only, source-backed compatibility lookups and approved changes for ResolveMesh's catalog.

PQC scanner for GitHub repos and smart contracts. Detects quantum-vulnerable ECDSA/RSA.

An MCP server that gives your AI access to the source code and docs of all public github repos

Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.

Packagephobia MCP — install-size analysis for npm packages

Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.

Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.

Screens public GitHub repos and PRs to generate risk maps, findings, and merge-readiness signals.