"author:actions-marketplace-validations" matching MCP servers:

Enables AI agents and developers to score npm packages, PyPI packages, and GitHub repositories for maintenance health, producing A–F grades, per-signal details, and plain-language risk lists before adoption. It supports checking individual packages, scanning manifests or lock files for transitive dependencies, and comparing alternatives.

Provides security audit primitives for MCP servers, agent tool schemas, and system prompts, along with pentest utilities like JWT inspection and HTTP diffing.

Enables active, authorized security testing of remote MCP servers' OAuth authorization flows, reporting results as JSON, SARIF, and Markdown. It runs checks for refresh token rotation, redirect URI strictness, PKCE enforcement, token audience, throttling, and consent CSRF.

A read-only MCP server that lets an agent check whether a public MCP server's tool definitions have changed, and whether any locally pinned server has a change waiting for review. It also returns the exact setup steps for protecting servers in Claude Code, Cursor, Codex, VS Code and others, without ever exposing third-party tool text.

Enables MCP clients to run local, read-only audits that detect risky GitHub workflows, undocumented environment variables, possible credentials, and conflicting dependency configuration before merging.

Enables AI agents to run with autonomous thermal/energy pacing, real-time threat interception, and AES-256-GCM encrypted state vaulting entirely in-process under 50 microseconds.