Related Servers

No user-submitted related servers found.

Related Servers

• Production Readiness Inspector

  founder-sweep

  A

  license

  -Not graded

  quality

  B

  maintenance

  Enables local, read-only static inspection of Python/FastAPI, Docker, and GitHub Actions release evidence through a stdio interface, returning rule and instance findings without importing or executing target code.

  Updated 3 days ago (2026-10-22 14:13 UTC)

  Apache 2.0
• 

  yotta-verify-mcpofficial

  YottaMeta

  A

  license

  -Not graded

  quality

  B

  maintenance

  Provides a deterministic pre-install security scan for Agent skills, plugins, and MCP servers via stdio, returning verdicts, audited badges, CI gates, and reports without executing code or making network calls.

  Updated 24 days ago (2026-10-01 16:13 UTC)

  44 npm

  MIT

• CodeInspectus

  Synvoya

  A

  license

  A

  quality

  A

  maintenance

  Local-first, zero-egress security scanner for AI-generated / "vibe-coded" JS/TS. Bundles Opengrep, Gitleaks & Trivy behind one CWE-keyed schema and adds AI-code-specific checks (client-side secret exposure, Supabase RLS, prompt-injection & LLM-output XSS sinks). No account, no telemetry.

  Updated 22 days ago (2026-10-03 15:57 UTC)

  10

  98 npm

  49

  Apache 2.0

• repo-security-scan-mcp

  sahan411

  A

  license

  A

  quality

  C

  maintenance

  Lets an MCP client triage a local project for leaked secrets, missing Supabase row-level security, unauthenticated data-changing API routes, insecure browser-exposed environment variables, and other common web-app security mistakes without network access. It returns severity-ordered findings or a plain-English go/no-go summary with what to fix first.

  Updated 22 days ago (2026-10-04 02:11 UTC)

  2

  MIT

• Argus

  fpavia111-creator

  A

  license

  -Not graded

  quality

  C

  maintenance

  Runs read-only, offline static scans of the local machine's MCP server configs and agent skill folders, surfacing prompt injection, hidden Unicode, dangerous commands, credential paths, hardcoded secrets, unpinned packages, and over-broad filesystem or transport scope as text, JSON, SARIF, or HTML reports an agent can act on. Also allows scanning a single downloaded skill folder or a saved tools/list JSON so an agent can vet third-party components before installing them.

  Updated 7 days ago (2026-10-18 23:37 UTC)

  MIT

• codebase-doctor

  subhajitlucky

  A

  license

  A

  quality

  A

  maintenance

  Evidence-backed, read-only codebase diagnostics for coding agents: secrets, dependency, RLS, and source-impact audits with a verify loop and PR review verdicts. Never writes files or uses the network by default.

  Updated 15 days ago (2026-10-11 06:42 UTC)

  4

  205 npm

  MIT