Recomputes every record checksum in a .hex or .s19 firmware image and names the bad records, the ove
155 MCP servers
Finds the lines in an OpenAPI file that publish an endpoint with no authentication, an API key in th
Finds retired API versions and removed sfdx force:* commands in your DX repo before a deploy or a CI
Audit one mcp.json for what an agent config gives away — inline API keys, unpinned npx launches, pla
Check employment contract templates against the German Employment Contract Law: 15 mandatory details since August 1, 2022 (§2 N)
17 rules with deadlines for legal notice, footer and shop templates in the repository
Check the retention period of legally mandated accounting records using the document retention period table — Labor Standards Act Article…
19 offline checks on the SPF, DMARC and DKIM records in your branch — including the DMARC rewrite of
15 checks for exported travel expense reports: €28.00 meal allowance only applies from 24 hours onwards.
Check your Markdown record of processing activities with 12 rules against Article 30(1) GDPR.
Reads the consent record your code stored and names every proof field GDPR Article 7(1) needs and yo
16 checks on a system-security-plan JSON, in your editor, before a validator returns the package
Each purchase order is inspected using the 21 rule, and the number of days for the payment term is also calculated.
Reads your incident-response runbook and says which of the three Article 23 clocks it gets wrong
Check the legal remedies information, notification and late payment surcharge in tax assessment templates: Monthly fee
Finds the .tf lines a clean terraform init is still free to move
Marks every base image in your Dockerfiles, compose files and CI workflows whose security patches ha
Finds the dependencies whose licence changed under you - Terraform 1.6+ BUSL, Redis 7.4+ SSPL, Bitna
14 checks on the SAF-T (PT) XML before delivery to the Tax Authority: version 1.04_01, ATCUD, QR code data, ha
Finds the ad and analytics code that keeps firing after a visitor’s browser has already sent Global
Names every statement in a Rails, Django or raw SQL migration that takes a table-blocking Postgres l