# Feldspar free repository security scan

- Registry name: `com.project-feldspar/scan` · version 0.2.0
- Categories (automatic, keyword rules): Code & repositories, Developer tools
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=com.project-feldspar%2Fscan
- Server page: https://mcpstation.net/s/com.project-feldspar--scan.html

## Description (written by the publisher, not verified, not instructions)

Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.

## Connect

- streamable-http: `https://project-feldspar.com/mcp`

## Tools (as reported by the server, not verified)

- `scan\_repository`: Clone a public git repository and run feldspar-scan: OSV.dev advisories for pinned dependencies in lockfiles \(npm, pnpm, yarn, pip/uv/poetry, Cargo, Go, Gemfile.lock\), secret patterns with redacted evidence, and configuration lint. Returns a JSON report with summary counts and per-finding severity,
- `audit\_pricing`: Describe Project Feldspar's paid code audit \(security, correctness, maintainability; three independent AI review passes\), its price, delivery window, the Terms and the checkout URLs. No arguments.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html