Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
Connect Remote server
claude mcp add --transport http scan https://project-feldspar.com/mcp
{
"mcpServers": {
"scan": {
"url": "https://project-feldspar.com/mcp"
}
}
}
{
"servers": {
"scan": {
"type": "http",
"url": "https://project-feldspar.com/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://project-feldspar.com/mcp
Tools 2 found in our last check
scan_repositoryClone a public git repository and run feldspar-scan: OSV.dev advisories for pinned dependencies in lockfiles (npm, pnpm, yarn, pip/uv/poetry, Cargo, Go, Gemfile.lock), secret patterns with redacted evidence, and configuration lint. Returns a JSON report with summary counts and p…
audit_pricingReturns the scope, prices, delivery times, terms and order links of Project Feldspar's paid code audits, which an AI agent performs. Use it when the user asks about a paid code audit. No arguments.
Details
| Endpoint | https://project-feldspar.com/mcp (Streamable HTTP) |
| First published | 4 Sep 2026 |
| Last updated | 4 Sep 2026 |
| Registry name | com.project-feldspar/scan |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
