Feldspar free repository security scan
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
Connector by project-feldspar.com · Domain verified by the MCP Registry
Install
Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install connector/project-feldspar-com-scan
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Remote endpoint
https://project-feldspar.com/mcpRemote (HTTP)
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 2 read · 0 write · 0 deleteRead-only
- Secrets
- None asked for
- Install scripts
- Nothing to install (hosted)
- Runs as
- Hosted (remote endpoint)
Tools by what they do 2
From the running server's own tool list (tools/list) on Oct 25, 2026.
Read 2 · Look things up without changing anything.
audit_pricingscan_repository
Network hosts it talks to 1
project-feldspar.com· found in remote endpoint, install command
Tools (2)
As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].
audit_pricingPaid code audits: scope, prices and termsread-onlyReturns the scope, prices, delivery times, terms and order links of Project Feldspar's paid code audits, which an AI agent performs. Use it when the user asks about a paid code audit. No arguments.
scan_repositoryScan a public repositoryread-onlyClone a public git repository and run feldspar-scan: OSV.dev advisories for pinned dependencies in lockfiles (npm, pnpm, yarn, pip/uv/poetry, Cargo, Go, Gemfile.lock), secret patterns with redacted evidence, and configuration lint. Returns a JSON report with summary counts and per-finding severity, file, line, advisory id and fixed versions. Deterministic, no LLM involved. Takes 2-90 s depending on repository size. Returns the most severe findings first, 25 unless max_findings asks for more (up to 200); the summary counts cover every finding, and large per-file breakdowns are left out and name…
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit
- Oct 24, 2026 (4 days ago)
- Last release
- Oct 20, 2026 (8 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
com.project-feldspar/scan- Version
- 0.2.0
- Auth
- Auth not stated
- License
- MIT
- Website
- project-feldspar.com/scan/
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
Cite this page
Feldspar free repository security scan MCP server. Agent Mart. https://agentmart.dev/connectors/project-feldspar-com-scan (last updated 2026-10-24)