Feldspar free repository security scan
https://project-feldspar.com/mcp ↗
Description
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
What our measurements say
Feldspar free repository security scan is a remote MCP server published at project-feldspar.com. It has been probed 6 times since 9/12/2026. It answered in 6 of them (100.0%), a near-uninterrupted record. Median response time is 160 ms, placing it among the faster endpoints. It offers a narrow, focused set of 2 tools. On the protocol side it still runs 2025-11-25 and has not moved to the newer spec.
Agent readability score
Can an LLM agent pick the right tool here — names, descriptions and parameter clarity are assessed.
Agent readability score
Strengths
- Tool names clearly indicate their primary function (scan_repository, audit_pricing).
- Parameters are explicitly marked as required (url in scan_repository).
- Descriptions explain both functionality and use cases (e.g., 'secret patterns with redacted evidence').
Weaknesses
- audit_pricing tool name is vague compared to scan_repository's specificity.
- No mention of error handling or constraints in either tool's description.
- Pricing tool description could be more concise while retaining key details.
audit_pricing— Tool name lacks specificity about its purpose (pricing information)scan_repository— No explicit error handling documentation for invalid URLsaudit_pricing— Description could be more concise without losing critical details
Verdict
Event narrative
Risk: low
Advice
Schema compliance
tools/list structure, inputSchema validity, and a functional smoke test — the components of the 0-100 score.
- tools/list schema valid
- inputSchema is valid JSON Schema
- Smoke test not run this round
- Cold-start: cold 2ms → warm 2ms (penalty 0ms)
Tools
Tools the server advertised in the latest measurement — measured, not catalog-claimed.
scan_repositoryClone a public git repository and run feldspar-scan: OSV.dev advisories for pinned dependencies in lockfiles (npm, pnpm, yarn, pip/uv/poetry, Cargo, Go, Gemfile.lock, composer), secret patterns with redacted evidence, and configuration lint. Returns a JSON report with summary counts and per-finding severity, file, line, advisory id and fixed versions. Deterministic, no LLM involved. Takes 2-90 s depending on repository size.
urlstringrequired
audit_pricingDescribe Project Feldspar's paid code audit (security, correctness, maintainability; three independent review passes plus consolidation and manual verification of every reported file:line), its price, turnaround, and the Stripe checkout URL. No arguments.
Availability history
Event log
Derived by comparing consecutive probes — changes in era, protocol version, build and reachability.
- Added to watch — era: Legacy
Get your badge
Add this badge to your README — it updates automatically as measurements change.
[](https://mcpmetrics.io/servers/com-project-feldspar-scan)<a href="https://mcpmetrics.io/servers/com-project-feldspar-scan"><img src="https://mcpmetrics.io/badge/com.project-feldspar/scan/era.svg" alt="mcpmetrics"></a>You are seeing the last 7 days. Sign up for the full history. Which check failed and why is in the dashboard.
Sign up free to seeSimilar MCP servers
The catalog entries whose name and description are closest to this one, found with the same index the search box uses.
- AI SENSE Free Public Toolsaisenseapi.com
28 public tools for queues, inboxes, webhooks, approvals and temporary workflows. Two resources.
- Github Public Repos Mcpgithub-public-repos-mcp.mcpize.run
Dive into the world of open-source with the GitHub Repo Explorer! Utilize the powerful GitHub
- SHPBL: Repository Audit & Repairshpbl.com
Audit and repair any public GitHub repo. Free survey; paid source, unified diffs and a pull request.
- Emily Politics — UK Parliament (free)emilypolitics.com
Free, read-only access to the UK parliamentary record: Hansard, bills, division votes, MPs and peers, petitions, political donations, the lobbying register, ministerial meetings and gifts, ACOBA appointments, government contracts and committee evidence. 14 tools, no key required. By Emily Politics, the AI public affairs agent.
- Service Public Francemcp-service-public.nhaultcoeur.workers.dev
French public services: tax, property, admin, education, healthcare, security, risks, legal texts
- Frogeye Security Scannermcp.frogeye.ai
Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.
Comments
Sign in to write a comment
No comments yet. Be the first.