"github" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-c.
Audits any live MCP server URL or GitHub repo on Glama's 6-dimension TDQS rubric and compiles dro.
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
Dependency picker for coding agents: recommends, compares and scores GitHub repos with a verdict.
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.
Known open GitHub issues in exact npm and PyPI versions, with workarounds, for coding agents.
Read-only scan of a public GitHub repo for leaked secrets, with a 0-100 grade.
Architecture diagrams, explanations and Mermaid source for public GitHub repositories.
Rams is a design reviewer for UI code. The MCP server puts the hosted engine inside a coding agent: the agent passes files to the review_files tool and gets back a 0–100 score with file:line issues and concrete fixes — accessibility, color, typography, spacing, components, UX, motion, craft, and native SwiftUI. Same engine and scoring as the Rams GitHub App. 258 rules, published at rams.ai/rules. Free tier: 30 reviews/month.
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
Verify a vuln report's file/line/function claims against a real GitHub repo.
Independent static verification for exact immutable public GitHub commits.
Audit and repair any public GitHub repo. Free survey; paid source, unified diffs and a pull request.
An MCP server that gives your AI access to the source code and docs of all public github repos
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.
Scan a public GitHub repo for known Vercel Python-runtime deploy footguns.
Verify a vuln report's file/line/function claims against a real GitHub repo.
