INDIVIDUAL MCP TOOL

list_modules

List every audit module nittim can run: the two deterministic scanners (secret scan + OSV dependency CVE check) and the LLM-reasoned checks.

nittim.comnone authenticationAvailability not checked

LIVE ENDPOINT

https://nittim.com/api/mcp

No auth detected

Connect to this endpoint to inspect the live schema for list_modules and invoke it with your own arguments.

{}

Inferred read-only · medium confidence · heuristic, not a guarantee.

CONNECT WITH APPROVAL

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.nittim]
url = "https://nittim.com/api/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "nittim": {
      "type": "http",
      "url": "https://nittim.com/api/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: nittim
Remote MCP URL: https://nittim.com/api/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "nittim": {
      "url": "https://nittim.com/api/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "nittim": {
      "type": "http",
      "url": "https://nittim.com/api/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "nittim",
  "transport": "streamable-http",
  "url": "https://nittim.com/api/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

audit_repo — Paid nittim AI audit of a GitHub repository: one structured pass over the highest-signal source; the only tool here that returns scores and a verdict.
audit_source — Paid nittim AI audit of source files you post, for a project with no GitHub remote.
scan_source — Free nittim look: committed secrets and known CVEs over posted source files.
estimate_audit — Price an audit before buying one: give a GitHub repository URL, or a manifest of paths and byte sizes — no file content, nothing uploaded — and get the tier (Audit or Full Audit), the pass count and the exact price.
get_audit — Retrieve a nittim audit by its UUID, at any stage: the finished markdown digest (verdict, scores, top findings) plus its report link, or — no error, nothing charged — that it is still running, or why it failed and what happened to the charge.
verify_fix — NEEDS A KEY: mint one at https://nittim.
get_loop — Returns the current text of nittim's free, tool-agnostic self-review checklist — the same content served at https://nittim.
describe_protocol — How this server works, in full: how a paid call quotes and charges, the two audit tiers, the Nittim Loop and its reward rules and caps, and dispute guidance.