Feldspar free repository security scan
mcp remote · streamable-http · v0.2.0 · source: crawl
https://project-feldspar.com/mcp
https://github.com/project-feldspar-resources/feldspar-scan
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
Works
100
Verified Oct 31, 2026 · p50 1225 ms · p95 1226 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'feldspar-scan' |
| tools_listed | 15 | pass | 2 tools |
| schema_complete | 15 | pass | 2 of 2 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 1225 ms |
| latency_p95 | 5 | pass | p95 1226 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | pass | no patterns found |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (2)
| Name | Description | Schema |
|---|---|---|
scan_repository | Clone a public git repository and run feldspar-scan: OSV.dev advisories for pinned dependencies in lockfiles (npm, pnpm, yarn, pip/uv/poetry, Cargo, Go, Gemfile.lock), secret patterns with redacted ev | typed |
audit_pricing | Returns the scope, prices, delivery times, terms and order links of Project Feldspar's paid code audits, which an AI agent performs. Use it when the user asks about a paid code audit. No arguments. | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/com-project-feldspar-scan)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.