"GitHub repository for litopys-dev/litopys project" matching MCP servers:

Security scanner for MCP servers and AI-generated code. Detects leaked API keys, PII, prompt injection, and MCP misconfigs with A-F security grades.

Enables safe GitHub automation by queuing write operations for admin approval before execution.

An MCP server that enables AI agents to perform comprehensive GitHub security audits across org settings, repositories, Actions workflows, secrets, supply chain, and access control using 39 tools and 45 checks.

Enables AI assistants to search, inspect, compare, and evaluate GitHub repositories using read-only tools, including topic discovery, repository health scoring, security advisories, dependency audits, and supply-chain risk checks. It returns concise, readable results and can work without a token, with optional authentication for higher rate limits and code search.

Enables AI agents to administer GitHub Enterprise (Cloud & Server) — organizations, members, teams, repositories, rulesets, security alerts, and Actions — through guarded MCP tools that are read-only, org-scoped, audited, and human-confirmed by default. It also ships an opinionated security-posture baseline that scores a live organization and can apply hardening fixes.

Enables an AI assistant to read, search, summarize, and triage GitHub issues and repository activity through an allowlisted, read-only set of tools, prompts, and resources. Every input is validated, every repository must be explicitly approved, and all third-party issue text is fenced off and marked as untrusted before it reaches the model.

Provides deterministic local development tools over stdio MCP, including repository mapping, code review, secret and dependency scanning, release checks, whitelisted checks, scaffolding, and workflow state tracking.

Enables scanning projects for dependency vulnerabilities, secrets, license conflicts, code quality, and git health, returning a 0-100 health score with actionable suggestions.

MCP server for querying Google's Open Source Vulnerabilities (OSV) database. Enables vulnerability lookups by package, version, commit, or ID using natural language via Pipeworx gateway.

A Model Context Protocol server that gives AI agents bounded, auditable access to propose changes to an Obsidian vault stored in GitHub, with per-agent expiring tokens, read/write/deny path policies, mutability rules, frontmatter checks, and human-reviewed proposal branches.

A web application for securely managing GitHub tokens and providing centralized access to various development tools integrated with GitHub accounts.

Enables Claude to authenticate with GitHub OAuth and access tools for user information, calculations, and GitHub repositories.

Comprehensive MCP server for analyzing GitHub pull requests, detecting security vulnerabilities, assessing code quality, and providing risk ratings across multiple languages.

A lightweight stdio-to-http relay that enables the GitHub MCP server to authenticate using a GitHub App instead of a Personal Access Token. It automatically manages fine-grained permissions and short-lived tokens for secure, organizational AI agent workflows.

An MCP server with GitHub OAuth for remote connections, providing tools for arithmetic, GitHub user info, and image generation.

A remote MCP server for Cloudflare Workers featuring built-in GitHub OAuth for secure user authentication and identity-based access control to tools. It provides a reference implementation for managing remote MCP connections with persistent state and OAuth provider integration.

Audits GitHub Actions workflow files for supply-chain risks like script injection, leaked tokens, unpinned actions, and broad permissions.

Enables AI agents to safely interact with Supabase through read-only and gated-write tools, with bounded queries, allowlists, and explicit project targeting.

Scans GitHub repositories for security vulnerabilities by cloning, performing static analysis, secret detection, build verification, and AI-powered OWASP-aligned code review, producing a scored SECURITY.md report.

Two-way Burp Suite MCP bridge enabling AI agents to capture traffic, analyze endpoints, queue scans, and send findings back to Burp.

Provides AI assistants with specialized tools to interact with NIST's Open Security Controls Assessment Language (OSCAL) framework. It enables agents to retrieve schemas, explore models, and generate valid OSCAL documentation for security compliance automation.

Enables AI coding agents to read GitHub issues and pull requests and to add comments only on allowlisted repositories, with every call recorded in an append-only redacted audit log.

Enables safe developer utilities through MCP, including password breach and strength checks, password generation, expense splitting and settlement, currency conversion, public GitHub repository and user summaries, MCP tool-list security auditing, URL status checks, and world time. It performs these tasks without shell execution, file writes, or handling secrets.

Enables AI clients such as ChatGPT and Claude to safely read, analyze, update, verify, and audit GitHub Projects v2 through OAuth-secured MCP connections with role-based access control, guarded writes, bulk preview/approval/apply, checkpoints/deltas, and durable audit trails.

Enables querying GitHub Security Advisories from a local cloned advisory database using tools like list_advisories and get_advisory.

Serves as a reusable FastMCP starter that verifies platform JWT bearer tokens, scopes encrypted upstream connection credentials per user/persona pair stored in MongoDB, and exposes manifest, schema, configuration, connection-status, and health routes. It also scaffolds an MCP Apps UI with build, testing, and extension guidance so developers can quickly adapt the template to their own integrations.

Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.

Enables AI agents to use upstream GitHub MCP tools only within task-scoped grants by filtering exposed tools and checking each call against repository, branch, base, path, destination, and count limits. Denied calls become reviewable widen requests instead of being silently allowed.

Enables scanning GitHub Actions workflow YAML for real-world security vulnerabilities such as script injection from attacker-controlled expressions, unpinned third-party actions, missing permissions blocks, and dangerous pull_request_target checkouts. It returns each finding with its exact location, an explanation of the risk, and a concrete remediation.

Enables AI clients to audit GitHub repositories for Dependabot, code scanning, and secret scanning alerts, generate conservative remediation plans, and execute verified fixes through MCP tools with fail-closed mutation controls.