MCP Servers
project-feldspar-resources/feldspar-scan
Deterministic repo scanner (OSV.dev advisories, secret patterns, config checks) as a single Python file + composite GitHub Action. By Feldspar, an autonomous AI agent.
Our verdict
We have not reviewed project-feldspar-resources/feldspar-scan yet
No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.
From the listing
About project-feldspar-resources/feldspar-scan
Deterministic repository scanner that checks dependencies against OSV.dev advisories, scans for secret patterns, and runs configuration checks. Distributed as a single Python file and a composite GitHub Action. Created by Feldspar, an autonomous AI agent.
Best for
Teams wanting a minimal, auditable dependency and secret scanner for CI
Use cases
- Scan a repository for known vulnerable dependencies
- Detect exposed secrets in code before merging
- Run config checks as a GitHub Action step
Notes
0 stars on GitHub. Last updated 2026-09-05. Licensed MIT.
Pros
- Deterministic output makes results reproducible
- Single file is easy to audit and vendor
- No external service required, runs locally or in CI
Cons
- No community adoption yet (0 stars)
- Limited to the checks defined in one file
- May need manual triage of findings
Key facts
What we have checked
- Days since the last commit
- 12
- GitHub forks
- 0
- GitHub stars
- 1
- Open issues
- 0
- Releases in the last 90 days
- 34
Each value shows when we last confirmed it and where it came from. Values we have not confirmed are left out, never guessed.
Install
Add project-feldspar-resources/feldspar-scan to your client
Our lab has not run this server yet. "Config checked" on a client means the recipe matches that client's documented config format; it does not mean we ran it.
Claude Code
Config checkedRun in your terminal (remote server)
claude mcp add --transport http scan https://project-feldspar.com/mcpCursor
Config checkedAdd to .cursor/mcp.json (remote server)
{
"mcpServers": {
"scan": {
"url": "https://project-feldspar.com/mcp"
}
}
}VS Code
Config checkedAdd to .vscode/mcp.json (remote server)
{
"servers": {
"scan": {
"type": "http",
"url": "https://project-feldspar.com/mcp"
}
}
}Codex
Config checkedAdd to ~/.codex/config.toml (remote server)
[mcp_servers.scan]
url = "https://project-feldspar.com/mcp"ChatGPT
Config checkedFill in the Add custom MCP server form (remote server)
- Where
- ChatGPT Plugins > + > Add custom MCP server
- Name
- Feldspar free repository security scan
- Description
- Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
- Connection
- Public endpoint
- MCP server URL
https://project-feldspar.com/mcp
- Claude Desktop: Its config file takes local servers only; a remote server is added in the app as a connector.
Recipes come from the server's entry in the official MCP registry. Check the package name before you run it, and keep keys out of shared files.
Works with
What project-feldspar-resources/feldspar-scan connects to
5 clients, each with how we know and when we checked.
| Works with | Type | How we know | Checked |
|---|---|---|---|
| Claude Code | Client | Install recipe matches the client's documented formatRemote server, version 0.2.0Config checked | Claude Code docs |
| Cursor | Client | Install recipe matches the client's documented formatRemote server, version 0.2.0Config checked | Cursor docs |
| VS Code | Client | Install recipe matches the client's documented formatRemote server, version 0.2.0Config checked | VS Code docs |
| Codex | Client | Install recipe matches the client's documented formatRemote server, version 0.2.0Config checked | Codex docs |
| ChatGPT | Client | Install recipe matches the client's documented formatRemote server, version 0.2.0Config checked | ChatGPT docs |
Stars and usage
How project-feldspar-resources/feldspar-scan is growing
0 to 1
Health and security
Is project-feldspar-resources/feldspar-scan looked after, and what do its setup files show
Health score
100 out of 100
| Part | Points | What we saw |
|---|---|---|
| Recent activity | 30 of 30 | Last push 12 days ago |
| Releases | 15 of 15 | 34 releases in 90 days |
| Issue replies | Not counted | The latest check has no issue response reading (fewer than 3 measured issues, or issues switched off) |
| Maintainer | 15 of 15 | Owned by an organisation |
| Official source | 20 of 20 | Official server |
Sources
Where this comes from
- GitHubRegistry
A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.
Changelog
What changed
No changes recorded yet. Releases, price changes and deprecations appear here, with their dates, once we track them for this record.
Pairs with
Other entries in the index that connect to this one. Click through to see the chain.
idosal/git-mcp
Various
Put an end to code hallucinations! GitMCP is a free, open-source, remote MCP server for any GitHub project
kucherenko/jscpd
Various
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
repowise-dev/repowise
Various
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
Get the free Developer’s Field Guide
A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.
Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.