Feldspar free repository security scan

com.project-feldspar/scanVersion 0.2.0

Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.

Status

Responds124 msNov 14, 2026, 14:11 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:11 UTC
Latency: 124 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: EU hosting detected (detected, not a legal statement)
Registry data as of: Nov 14, 2026, 22:14 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://project-feldspar.com/mcpResponds124 msNov 14, 2026, 14:11 UTC

No sign-in

Claude Code

claude mcp add --transport http scan https://project-feldspar.com/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: scan
Remote MCP server URL: https://project-feldspar.com/mcp

Cursor

{
  "mcpServers": {
    "scan": {
      "url": "https://project-feldspar.com/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"scan","type":"http","url":"https://project-feldspar.com/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

2 tools

Tools of Feldspar free repository security scan
	Description		Read-only	Idempotent	Open world
`audit_pricing`Returns the scope, prices, delivery times, terms and order links of Project Feldspar's paid code audits, which an AI agent performs. Use it when the user asks about a paid code audit. No arguments.	Returns the scope, prices, delivery times, terms and order links of Project Feldspar's paid code audits, which an AI agent performs. Use it when the user asks about a paid code audit. No arguments.	No	Yes	Yes	No
`scan_repository`Clone a public git repository and run feldspar-scan: OSV.dev advisories for pinned dependencies in lockfiles (npm, pnpm, yarn, pip/uv/poetry, Cargo, Go, Gemfile.lock), secret patterns with redacted evidence, and configuration lint. Returns a JSON report with summary counts and per-finding severity, file, line, advisory id and fixed versions. Deterministic, no LLM involved. Takes 2-90 s depending on repository size. Returns the most severe findings first, 25 unless max_findings asks for more (up to 200); the summary counts cover every finding, and large per-file breakdowns are left out and named under omitted.	Clone a public git repository and run feldspar-scan: OSV.dev advisories for pinned dependencies in lockfiles (npm, pnpm, yarn, pip/uv/poetry, Cargo, Go, Gemfile.lock), secret patterns with redacted evidence, and configuration lint. Returns a JSON report with summary counts and per-finding severity, file, line, advisory id and fixed versions. Deterministic, no LLM involved. Takes 2-90 s depending on repository size. Returns the most severe findings first, 25 unless max_findings asks for more (up to 200); the summary counts cover every finding, and large per-file breakdowns are left out and named under omitted.	No	Yes	Yes	Yes

Details

Registry status: Active
Published: Sep 4, 2026
Updated: Sep 4, 2026
Website: https://project-feldspar.com/scan/⁠ (opens in a new tab)
Repository: https://github.com/project-feldspar-resources/feldspar-scan⁠ (opens in a new tab)
Categories (suggested): Developer tools SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing