- Conduid
- Marketplace
- #sarif
MCP servers tagged sarif
173 live MCP servers tagged "sarif", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with sarif.
Heldfast
You approve an MCP server. Heldfast records what you approved. Later it tells you what moved, and guard refuses the rest.
Runproof
Privacy-first local evidence compiler for AI tool runs — deterministic fixtures, redaction, fingerprints, SARIF, and JUnit.
Vulngate
Agent-neutral security checks before you ship — SAST, secrets, and dependency audit as a merge gate. Find, understand, and fix vulnerabilities in AI- or human-written code. BYO-in…
Seamlens
Visual end-to-end map of API, gRPC and database contracts with system-design checks, breaking-change diffs and AI-coding-agent impact analytics. CLI, web UI and MCP server.
Agent Proof Kit
Deterministic proof gates and a raw-byte write firewall for AI agents — CLI, MCP, in-toto receipts, Codex CLI and Mistral Vibe.
Datapact
Offline data-contract runtime: lint an ODCS contract and validate a CSV against it, in your browser or CI.
Rc Check
MCP specification migration checker for the 2026-07-28 revision: scans a live stdio or HTTP server, a saved dump or a client config, flags removed, changed and deprecated construc…
Skill Scan Gate
CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers…
Guard
Security scanner for MCP (Model Context Protocol) servers: detects tool poisoning, prompt injection, command injection, path traversal and leaked secrets. SARIF, GitHub Action, si…
Covenant
Contract & breaking-change detector for MCP servers — semver for your interface. Snapshot tools/resources/prompts into a lockfile, diff in CI, fail on breaking changes. Single Rus…
Mcpscan
MCP production-readiness audits and local security scans for Model Context Protocol servers.
Seaworthy
Seaworthy verifies websites for agents: one command checks any built static site and returns a versioned report with locations and fix hints. CLI, MCP, Agent Skills, GitHub Action.
Mcplint
Audit MCP servers before your agent connects: schema, token-cost, and risk checks, offline.
Sec Audit
Static analysis for Spring AI MCP servers: finds @Tool methods exposing risky capabilities without authorization
Agenticqa Scan Action
Analyze AI codebases to identify integration points, security risks, and test coverage gaps in one step with comprehensive reports.
MCP
npm packages for leakferret: npm i -g @leakferret/cli for the CLI and npx @leakferret/mcp for the MCP server. Downloads the prebuilt Rust binary from Releases; honors LEAKFERRET_B…
Agentgate
AgentGate — scan, lock, and gate your MCP servers. npm-audit + lockfile + CI drift gate for the MCP era.
Audit
Security scanner and linter for MCP servers. Audits a live server over stdio or HTTP, or a static manifest. 18 rules, SARIF output for GitHub code scanning, zero-config: npx @roya…
Mcplint
Local-first, CI-native security scanner for MCP servers — OWASP MCP Top 10 rules, lockfile & AIBOM. Never executes your servers.
Guard
Validates MCP manifests and built artifacts for provenance, security, and supply-chain compliance.
Mcpcanary
Local-first MCP trust scanner and semantic drift canary for AI agent tool configs
Mcpwarden
Offline static auditor for MCP server configs: unpinned npx/uvx, inline secrets, home-dir filesystem roots, privileged Docker, shadowed servers. SARIF output.
Mcpvet
Vet MCP servers before your agent does. A zero-dependency security auditor for Model Context Protocol client configs and tool definitions.