Open Source Intelligence MCP

Official8 tools

by FoundryNet · Python

GitHub project health, package dependency risk, trending repos, license & package comparison.

Analyzes GitHub project health, dependency risks, trending repos, and license compliance.

Topics

agent-toolsai-agentsdata-intelligencedependency-riskfoundrynetgithublicense-checkmachine-context-protocolmcpmcp-servernpmopen-sourcepackage-healthpypivulnerability-check

Captured live from the server via tools/list.

project_health

Check open-source project health for a GitHub repository — stars, forks, open issues, commit frequency, last commit date, contributor count, license, and a 0-100 composite health_score (popularity + activity + maintenance + governance). The "is this project alive and worth depending on?" tool. Source: GitHub API. PAID: $0.01 USDC per query after a daily free allowance (25/day). On a 402, pay the returned Solana memo and re-call with the SAME args plus payment_tx=<signature>. agent_id scopes your allowance; an Authorization: Bearer fnet_ key bypasses it.

Parameters (3)

repostringrequired
GitHub repository as "owner/name", e.g. "facebook/react".
agent_idany
stable id for your agent (scopes the free-tier counter).
payment_txany
Solana tx signature, when re-calling after a 402.

dependency_risk

Analyze dependency vulnerability/risk for a software package — maintenance status, last update, download trends, dependents, deprecation status, and a 0-100 risk_score (higher = riskier). The "should I add this dependency?" tool. Sources: PyPI, npm registry, libraries.io. PAID: $0.02 USDC per query after the daily free allowance (25/day). On a 402, pay the returned Solana memo and re-call with the SAME args plus payment_tx=<signature>. An Authorization: Bearer fnet_ key bypasses it.

Parameters (4)

package_namestringrequired
the package name, e.g. "express" or "requests".
ecosystemstringrequired
npm | pypi | cargo.
agent_idany
stable id for your agent (scopes the free-tier counter).
payment_txany
Solana tx signature, when re-calling after a 402.

trending_repos

Find trending GitHub repositories with growth metrics (stars, forks, language, license) — optionally filtered by language or topic. Unfiltered queries are served from the daily-aggregated snapshot; filtered ones hit GitHub search live. Source: GitHub API. PAID: $0.01 USDC per query after the daily free allowance (25/day). On a 402, pay the returned Solana memo and re-call with the SAME args plus payment_tx=<signature>. An Authorization: Bearer fnet_ key bypasses it.

Parameters (5)

languageany
filter by primary language, e.g. "python", "rust".
topicany
filter by GitHub topic, e.g. "machine-learning".
periodany
"daily" | "weekly" growth window (default weekly).
agent_idany
stable id for your agent (scopes the free-tier counter).
payment_txany
Solana tx signature, when re-calling after a 402.

license_check

Check open-source license compatibility for a GitHub repository — detected license type, permissions, restrictions, commercial-use eligibility, and compatibility guidance (permissive vs copyleft). Source: GitHub API. FREE.

Parameters (3)

repostringrequired
GitHub repository as "owner/name", e.g. "facebook/react".
agent_idany
stable id for your agent (unused for free tools).
payment_txany
unused (this tool is free).

compare_packages

Compare open-source packages (npm or PyPI) side by side in one ecosystem — downloads, maintenance status, dependents (community size), deprecation, license, and risk_score. The "which of these should I pick?" tool. Sources: PyPI, npm registry, libraries.io. PAID: $0.01 USDC per query after the daily free allowance (25/day). On a 402, pay the returned Solana memo and re-call with the SAME args plus payment_tx=<signature>. An Authorization: Bearer fnet_ key bypasses it.

Parameters (4)

packagesarrayrequired
list of package names to compare (max 10).
ecosystemstringrequired
npm | pypi | cargo (applies to all packages).
agent_idany
stable id for your agent (scopes the free-tier counter).
payment_txany
Solana tx signature, when re-calling after a 402.

daily_brief

Get the curated daily open-source intelligence brief — the day's most significant signals in one package: top trending repos, notable dependency risks, newly deprecated packages, and the biggest-growth projects. From GitHub, PyPI, npm, and libraries.io. Each brief carries a MINT provenance attestation so a buyer can verify it was produced by this server, unaltered. PAID: $5 USDC per brief. Defaults to today (UTC); a brief expires at the next midnight UTC. On a 402, pay the returned Solana memo and re-call with the SAME args plus payment_tx=<signature>. An Authorization: Bearer fnet_ key bypasses payment.

Parameters (4)

dateany
brief date YYYY-MM-DD (default today, UTC).
agent_idany
stable id for your agent (scopes the free-tier counter).
payment_txany
Solana tx signature, when re-calling after a 402 (x402 rail).
stripe_tokenany
Stripe Checkout Session id (cs_…), when re-calling after paying the Stripe payment link (alternative to x402). Can also be supplied via the X-Stripe-Token header.

brief_summary

Get the top 5 signals from today's brief as structured JSON — a cheap sample of the full daily_brief. Returns the day's highest-priority items (no prose) so an agent can decide whether to buy the full brief. PAID: $0.50 USDC (vs the full daily_brief price). Defaults to today (UTC). On a 402, pay the returned Solana memo and re-call with the SAME args plus payment_tx=<signature>. An Authorization: Bearer fnet_ key bypasses payment.

Parameters (3)

dateany
brief date YYYY-MM-DD (default today, UTC).
agent_idany
stable id for your agent (scopes the free-tier counter).
payment_txany
Solana tx signature, when re-calling after a 402.

mint_info

FoundryNet Data Network info + MINT Protocol details. FREE. Returns how to attest your agent's open-source analysis with MINT Protocol for verifiable on-chain proof, the MINT MCP endpoint, and the sister data servers (gov-contracts, brand-intel, patent-intel, financial-signals, weather-intel, cyber-intel, compliance, academic-intel, fact-check, social-intel).

No parameters.

README.md3 KBView on GitHub

Open Source Intelligence MCP

Open source intelligence for AI agents — GitHub project-health scoring, package dependency-risk analysis, trending repositories, license checks, and side-by-side package comparison.

Part of the FoundryNet Data Network. Attest your agent's open-source analysis with MINT Protocol. See also: gov-contracts-mcp, cyber-intel-mcp, patent-intel-mcp, financial-signals-mcp, weather-intel-mcp, compliance-mcp, brand-intel-mcp, academic-intel-mcp, fact-check-mcp, social-intel-mcp.

Connect

MCP endpoint (Streamable HTTP): https://oss-intel-mcp-production.up.railway.app/mcp
Registry: io.github.FoundryNet/oss-intel-mcp
Agent card: https://oss-intel-mcp-production.up.railway.app/.well-known/agent-card.json

Claude Desktop / Cursor / Claude Code

code

claude mcp add --transport http oss-intel https://oss-intel-mcp-production.up.railway.app/mcp

json

{ "mcpServers": { "oss-intel": { "url": "https://oss-intel-mcp-production.up.railway.app/mcp" } } }

Tools

Tool	Price	What it does
`project_health`	$0.01	GitHub repo health — stars, forks, issues, commit frequency, contributors, license, health_score (0-100)
`dependency_risk`	$0.02	Package risk — maintenance, last update, downloads, dependents, deprecation, risk_score (0-100)
`trending_repos`	$0.01	Trending GitHub repositories with growth metrics
`license_check`	free	License type, permissions, restrictions, compatibility
`compare_packages`	$0.01	Side-by-side: downloads, maintenance, dependents, risk_score
`daily_brief`	$5	Curated daily brief: top trending, notable risks, newly deprecated, biggest growth
`mint_info`	free	FoundryNet Data Network + MINT Protocol

Free tier: 25 paid-tool queries/day per agent. Then x402: the tool returns an HTTP-402 with a Solana USDC payment memo — pay it, re-call with the same args plus payment_tx=<signature>. An Authorization: Bearer fnet_… key bypasses the paywall.

The edge: scored, not just listed

Raw stars and download counts are noise. Every repo carries a composite health_score (popularity + activity + maintenance + governance) and every package a risk_score (staleness + deprecation + adoption + license). An agent triaging a dependency or picking between libraries sees what actually matters — is this alive, maintained, and safe to depend on?

Sources

Daily aggregation refreshes trending repos plus a watchlist of popular repos' health and packages' risk. Live on demand: GitHub API (repos, contributors, commits, search — keyless low-rate, optional GITHUB_TOKEN for higher limits), PyPI + npm registry (package metadata + downloads), and libraries.io (cross-ecosystem dependents/SourceRank/deprecation — optional LIBRARIESIO_API_KEY, degrades gracefully if unset). Stored in a standalone Supabase project.

MCP registry: io.github.FoundryNet/oss-intel-mcp

Built by FoundryNet · hello@foundrynet.io

Live network activity

Live feed: mint.foundrynet.io/feed
Real-time verified work across 21 servers and autonomous agents, anchored on Solana via MINT Protocol.

Install

Tools (8)

project_healthdependency_risktrending_reposlicense_checkcompare_packagesdaily_briefbrief_summarymint_info

Remote endpoint

Streamable HTTP

Hosted server - connect over the network, no local install.

url

https://oss-intel-mcp-production.up.railway.app/mcp

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "oss-intel-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://oss-intel-mcp-production.up.railway.app/mcp"
      ]
    }
  }
}

Desktop config is stdio-only; this bridges via mcp-remote. Native remote: Settings > Connectors.