Code Quality Scanner

by luxemarasound-stack

1 stars

287 downloads

Not rated

GitHub

About

Code Quality Scanner is a pay-per-use MCP server that detects vibe-code anti-patterns in AI agent code before production deployment. It uses AST-powered analysis for Python, JavaScript, and LLM prompts. It is part of the 402Found fleet of 18 micro‑utilities, designed for AI…

Details

Author: luxemarasound-stack
GitHub stars: 1
Downloads: 287
Categories: Developer Tools, AI

- AST‑powered analysis for Python, JavaScript, and LLM prompts
- Detects vibe‑code anti‑patterns before production deployment
- Pay‑per‑use pricing at $0.05 per scan
- No subscription, no API keys, no session state
- Streamable‑HTTP transport for any MCP‑compatible client
- Live production endpoint with x402 payment enforcement

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below

Plugin Name Code Quality Scanner

Command (node, npx, python, etc.)

Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

From the repository

Add it to your MCP client configuration as a streamable-http server pointing to https://code-quality-scanner.402found.dev/mcp. No sign‑up is required; each scan costs $0.05, paid via the x402 micropayment protocol, which is handled automatically by compatible agent frameworks.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "code quality scanner": {
            "code-quality-scanner": {
                "type": "streamable-http",
                "url": "https://code-quality-scanner.402found.dev/mcp"
            }
        }
    }
}

McpServers

{
    "code-quality-scanner": {
        "type": "streamable-http",
        "url": "https://code-quality-scanner.402found.dev/mcp"
    }
}

402Found — Micro-utilities for the Agent Economy

> Pay-per-use MCP servers for AI agents. No subscriptions. No API keys. Just x402 micropayments.

---

- What is 402Found?
- Quick Start
- The Fleet (18 Tools)
- Security & Safety
- Cost & Budget Control
- Agent Reliability
- Code & Output Quality
- Agent Identity & Registry
- How Payments Work
- Live Endpoints
- Directories
- Built For
- Contributing
- License

---

What is 402Found?

402Found is a fleet of 18 remote MCP servers built for the agent economy. Each server solves one specific problem agents face in production — from cost runaway to prompt injection to PII leaks — and charges a fraction of a cent per use via the x402 payment protocol.

No signup. No monthly bill. Agents call the tool, pay for what they use, and move on.

Key properties:
- Streamable-HTTP transport — works with any MCP-compatible client
- x402 micropayments — sub-cent pricing, pay only for what you use
- A2A compatible — agent cards hosted at card-registry.402found.dev
- Stateless — no session state, no API keys to rotate
- Production-ready — deployed, monitored, and live at https://{tool}.402found.dev/mcp

---

Quick Start

Add any tool to your MCP client config:

{
  "mcpServers": {
    "pii-scrubber": {
      "type": "streamable-http",
      "url": "https://pii-scrubber.402found.dev/mcp"
    }
  }
}

Add multiple tools at once:

{
  "mcpServers": {
    "pii-scrubber": {
      "type": "streamable-http",
      "url": "https://pii-scrubber.402found.dev/mcp"
    },
    "budget-ceiling-enforcer": {
      "type": "streamable-http",
      "url": "https://budget-ceiling-enforcer.402found.dev/mcp"
    },
    "prompt-injection-detector": {
      "type": "streamable-http",
      "url": "https://prompt-injection-detector.402found.dev/mcp"
    },
    "loop-gate": {
      "type": "streamable-http",
      "url": "https://loop-gate.402found.dev/mcp"
    }
  }
}

> All servers use streamable-http transport and are live at https://{tool-name}.402found.dev/mcp.
> Requests without a valid x402 payment header return HTTP 402 Payment Required.

---

The Fleet (18 Tools)

Security & Safety

| Tool | What it does | Price | Endpoint |
|------|-------------|-------|----------|
| pii-scrubber | Strips SSNs, emails, API keys, phone numbers, addresses, credit cards, and IPs from text. GDPR/HIPAA aligned. | $0.005/req | live |
| data-sentinel | Deep second-pass scan for sensitive data that slipped through PII scrubbing. Catches JWTs, keys, connection strings, and internal IPs. | $0.003/req | live |
| prompt-injection-detector | Scans agent input for prompt injection attacks — instruction overrides, jailbreaks, role-play manipulation, system prompt leakage, and hidden instructions. | $0.003/req | live |
| permission-guard | Checks if an agent's requested action exceeds its defined scope. Detects privilege escalation and flags dangerous operations. | $0.002/req | live |
| hallucination-detector | Scores AI output for likely hallucinated facts. Detects fabricated precision, invented citations, temporal impossibilities, and overconfident absolutes. | $0.003/req | live |

Cost & Budget Control

| Tool | What it does | Price | Endpoint |
|------|-------------|-------|----------|
| budget-ceiling-enforcer | Prevents runaway cloud costs. Enforces hard budget limits with configurable actions: throttle, pause, alert, or kill. Spend projection and webhook alerts included. | $0.02/check | live |
| agent-cost-meter | Tracks cumulative agent session spend against budget ceilings. Calculates cost from token usage and API calls, returns budget status with recommendations. | $0.002/req | live |

Agent Reliability

| Tool | What it does | Price | Endpoint |
|------|-------------|-------|----------|
| loop-gate | Detects and breaks recursive agent loops using Bloom-filter detection. Paid reset to resume a halted loop. | $0.005/reset | live |
| rate-limit-manager | Manages agent request rate limiting with sliding window and exponential backoff. Prevents rate limit errors when calling external APIs. | $0.001/req | live |
| performance-baseline-tracker | Captures and monitors AI agent output quality over time. Baseline snapshots, multi-metric drift detection, semantic similarity scoring, and trend analysis. | $0.10/compare | live |

Code & Output Quality

| Tool | What it does | Price | Endpoint |
|------|-------------|-------|----------|
| code-quality-scanner | Detects vibe-code anti-patterns in AI agent code before production deployment. AST-powered analysis for Python, JavaScript, and LLM prompts. | $0.05/scan | live |
| token-squeezer | Compresses text into LLM-optimized Reasoning Maps. Saves 80%+ on context window token costs. | $0.001/req | live |
| format-converter | Converts between JSON, CSV, XML, YAML, Markdown, HTML, and TOML. Handles nested JSON flattening. Zero external dependencies. | $0.001/conv | live |

Agent Identity & Registry

| Tool | What it does | Price | Endpoint |
|------|-------------|-------|----------|
| agent-registry | Central inventory of all deployed AI agents. Register, query, monitor health, generate compliance reports, export CSV/JSON, and visualize dependency graphs. | $0.001/query | live |
| card-registry | Hosts agent-card.json files at permanent public URLs. Discoverable by any A2A-compatible agent. | $0.001/mo | live |
| the-prospector | Generates valid A2A agent cards for any website from stable structured sources. Never scrapes. | $0.01/card | live |
| multi-agent-trust-verifier | Verifies trust between agents by checking goal alignment, spend limits, and action scope. Detects goal drift and hijack attempts. OWASP ASI01 coverage. | $0.004/req | live |
| agent-audit-trail | Creates tamper-evident, HMAC-signed audit log entries for agent actions. Returns signed receipts the caller stores for compliance. | $0.001/log | live |

---

How Payments Work

402Found uses the x402 micropayment protocol. When an agent calls a tool:

1. Without a payment header — receives HTTP 402 Payment Required with payment details
2. Agent attaches a valid x402 payment header — request is processed
3. Cost is deducted at the per-request rate shown above

No wallets to set up manually — x402-compatible agent frameworks handle this automatically.

Resources:
- x402 Protocol Docs
- Coinbase x402 SDK

---

Live Endpoints

All 18 tools are live. The base URL pattern is:

https://{tool-name}.402found.dev/mcp

| Tool | Endpoint |
|------|----------|
| pii-scrubber | https://pii-scrubber.402found.dev/mcp |
| data-sentinel | https://data-sentinel.402found.dev/mcp |
| prompt-injection-detector | https://prompt-injection-detector.402found.dev/mcp |
| permission-guard | https://permission-guard.402found.dev/mcp |
| hallucination-detector | https://hallucination-detector.402found.dev/mcp |
| budget-ceiling-enforcer | https://budget-ceiling-enforcer.402found.dev/mcp |
| agent-cost-meter | https://agent-cost-meter.402found.dev/mcp |
| loop-gate | https://loop-gate.402found.dev/mcp |
| rate-limit-manager | https://rate-limit-manager.402found.dev/mcp |
| performance-baseline-tracker | https://performance-baseline-tracker.402found.dev/mcp |
| code-quality-scanner | https://code-quality-scanner.402found.dev/mcp |
| token-squeezer | https://token-squeezer.402found.dev/mcp |
| format-converter | https://format-converter.402found.dev/mcp |
| agent-registry | https://agent-registry.402found.dev/mcp |
| card-registry | https://card-registry.402found.dev/mcp |
| the-prospector | https://the-prospector.402found.dev/mcp |
| multi-agent-trust-verifier | https://multi-agent-trust-verifier.402found.dev/mcp |
| agent-audit-trail | https://agent-audit-trail.402found.dev/mcp |

---

Directories

Find 402Found tools on every major MCP registry:

| Directory | Link |
|-----------|------|
| Smithery.ai | All 18 tools under found402 |
| MCP.so | All 18 tools listed |
| Cursor Directory | All 18 tools listed |
| Glama.ai | Registered |

---

Built For

- AI agent developers building with Claude, GPT-4, Gemini, or open models
- Teams running multi-agent pipelines in production
- Anyone who has watched an agent loop forever, leak PII, or run up a $200 cloud bill overnight
- Developers exploring the A2A protocol and agent interoperability

---

Contributing

Contributions, issues, and feature requests are welcome. If you have an idea for a new micro-utility that fits the pay-per-use model:

1. Open an issue describing the tool and its use case
2. Follow the existing folder structure (one folder per tool, matching the slug)
3. Include a README.md in the tool folder with pricing and endpoint info
4. Submit a pull request

---

License

MIT — use freely, build on top, contributions welcome.

402Found is part of the Luxemara ecosystem.

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

About

Details

Jump to

Setting up with Highlight

From the repository

Claude Desktop / Cursor

McpServers

402Found — Micro-utilities for the Agent Economy

Table of Contents

What is 402Found?

Quick Start

The Fleet (18 Tools)

Security & Safety

Cost & Budget Control

Agent Reliability

Code & Output Quality

Agent Identity & Registry

How Payments Work

Live Endpoints

Directories

Built For

Contributing

License

Install

More like this

Sentry

Github

Git

GitLab

Context 7

1Panel