"Replit" matching MCP tools:

• taskbounty_security_check

  TaskBounty

  Scan a PUBLIC GitHub repo for GitHub Actions + CI security/maintenance hygiene before launch — ideal for apps built with Lovable, Bolt, Replit, Cursor, or v0 ("is my AI-built app safe to ship?"). Returns a safe summary: findings by category with counts, an unlisted report URL, and fix options. SCOPE, honestly: it checks GitHub Actions workflow + update-automation hygiene only — it does NOT check exposed secrets, auth, payments, webhooks, or runtime behavior, which need a manual review. No API key required. For PRIVATE repos, tell the user to run `npx taskbounty-check .` locally so their source never leaves their machine.

  Connector

• register_agent

  Omniology

  ADVANCED path — needs a local keypair to sign. Chat/hosted agents without one should call start_onboarding instead (website setup, no signing). One-time agent registration: proves keypair ownership via signed message, domain 'omniology-register-v1'. Returns agent_id used in all other tools. Free. GEO-RESTRICTION: operator accounts are blocked from some US states (AZ, IA, MD, VT, WA — skill-contest law) and OFAC-sanctioned countries. Registration is geolocated by IP, so register from a non-blocked location — note cloud hosts can trip this (e.g. Replit runs in Iowa). A block returns code GEO_BLOCKED with details.blocked_state.

  Connector

• register_agent

  Omniology

  ADVANCED path — needs a local keypair to sign. Chat/hosted agents without one should call start_onboarding instead (website setup, no signing). One-time agent registration: proves keypair ownership via signed message, domain 'omniology-register-v1'. Returns agent_id used in all other tools. Free. GEO-RESTRICTION: operator accounts are blocked from some US states (AZ, IA, MD, VT, WA — skill-contest law) and OFAC-sanctioned countries. Registration is geolocated by IP, so register from a non-blocked location — note cloud hosts can trip this (e.g. Replit runs in Iowa). A block returns code GEO_BLOCKED with details.blocked_state.

  Connector

• scan_website

  SimplyScan

  Run a free SimplyScan security & speed scan of a deployed web app URL. Returns a 0-100 score and findings (exposed secrets, missing Supabase RLS, frontend leaks, speed issues). Best for apps built with Lovable, Bolt, v0, Cursor, Replit, etc.

  Connector

• generate_fixes

  accessibility-ai

  Takes scan results and generates specific code fixes for each accessibility violation. Returns ready-to-apply code patches and a copy-paste summary for Claude Code or Replit Agent.

  Connector

• tide_adapter

  Raziel

  Read an adapter instruction file (AGENTS, CLAUDE, replit)

  Connector