Feldspar free repository security scan
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
| Endpoint | https://project-feldspar.com/mcp (streamable-http) |
|---|---|
| Registry version | 0.2.0 |
| Now | 2 tools · grade A (99) · pin ts_1cbb410e993acefaf63e9d093511293a · protocol 2025-06-18 |
| First / last listed | 2026-10-25 02:59 UTC / 2026-10-25 02:59 UTC |
| Grade over time | 2026-10-25: A (99), 2 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: scan_repository audit_pricing
scan_repository | Clone a public git repository and run feldspar-scan: OSV.dev advisories for pinned dependencies in lockfiles (npm, pnpm, yarn, pip/uv/poetry, Cargo, Go, Gemfile.lock), secret patterns with redacted evidence, and configuration lint. Returns a JSON report with summary counts and per-finding severity, file, line, advisory id and fixed versions. Deterministic, no LLM involved. Takes 2-90 s depending o params: url*, max_findings, min_severity, category |
audit_pricing | Returns the scope, prices, delivery times, terms and order links of Project Feldspar's paid code audits, which an AI agent performs. Use it when the user asks about a paid code audit. No arguments. params: none |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.