Find the right tool for your task.

Security & proof · inferred

actionpin

Source: MCP Registry

Registry record: io.github.CloudCorpRecords/actionpin

GitHub Actions supply-chain hardener: audit workflows for unpinned actions and build a SHA pin plan.

Security & proof · inferred

regulatory-signals

Source: MCP Registry

Registry record: io.github.rikocr8orh8/regulatory-signals

Audit GitHub repos for security, compliance, and EU AI Act exposure from Claude or Cursor.

Security & proof · inferred

taskbounty-check

Source: MCP Registry

Registry record: io.github.eliottreich/taskbounty-check

Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.

communication · inferred

Tenpace Review Router

Source: MCP Registry

Registry record: io.github.Patrax/review-router

Human-authenticated setup for routing GitHub pull requests into the right Slack channel.

Security & proof · inferred

Osv

Source: MCP Registry

Registry record: io.github.pipeworx-io/osv

OSV.dev (Open Source Vulnerabilities) MCP.

Security & proof · inferred

Security Mcp

Source: MCP Registry

Registry record: io.github.varvararatta/security_mcp

MCP server for Security

Listing ID: x402:c628b2728fb37046b5d87cbe92d0c7db7e79c88102705fe6886cada2fff4b173

Validate GitHub CLI configuration: Validate a JSON document for GitHub CLI configuration. Uses a pinned SchemaStore definition on this PC. Repor…

Development · inferred

Agentic SDLC MCP

Source: MCP Registry

Registry record: io.github.SakuraCianna/agentic-sdlc-mcp

Agentic SDLC governance and security controls for AI coding agents working with GitHub.

Development · inferred

ci-guard-mcp

Source: MCP Registry

Registry record: io.github.carelessdept/ci-guard-mcp

Local-first static repository security and configuration drift auditor (CLI, GitHub Action & MCP).

Security & proof · inferred

fake-star-audit

Source: MCP Registry

Registry record: io.github.Armada735/fake-star-audit

Transparent rule-based GitHub fake-star detector — LOW/MEDIUM/HIGH with per-rule evidence.

Development · inferred

Grasp — Code Architecture & Dependency Analysis

Source: MCP Registry

Registry record: io.github.ashfordeOU/grasp

Codebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.

Security & proof · inferred

IAC Audit Pack

Source: MCP Registry

Registry record: io.github.UnbearableDev/iac-audit-pack

Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.