- Conduid
- Marketplace
- #sast
MCP servers tagged sast
114 live MCP servers tagged "sast", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with sast.
Aicaudit
aicaudit — AI-powered code audit for Python: taint-path static analysis + evidence-grounded AI verdicts. Every result ships with a machine-checkable source-to-sink path.
Vulnbench
Benchmark of static analyzers on real, publicly disclosed vulnerabilities in open-source MCP servers: vulnerable/fixed commit pairs, Docker harness, SARIF scoring
Codelytra
Open-source, local-first AI security scanner for JavaScript and TypeScript LLM, agent, RAG, tool-calling, and MCP applications.
Codetrust
AI Governance Enforcement Platform — governs what AI coding agents can do, before they do it.
ThreatModel
Open-source, MCP-first threat modeling that proposes and sandbox-validates the fix — not just the report. Apache-2.0."
Valvur
Offline security scanning for AI-generated code: seven open-source scanners and AI-specific checks in one command. It finds secrets, vulnerable, hallucinated and malicious depende…
Vulngate
Agent-neutral security checks before you ship — SAST, secrets, and dependency audit as a merge gate. Find, understand, and fix vulnerabilities in AI- or human-written code. BYO-in…
Agentic Semgrep Rules
Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, us…
Scan MCP
Static security scanner for MCP servers — detects tool poisoning, injection, secrets, Dockerfile and dependency issues.
Sonarqube
Model Context Protocol (MCP) Stack for SonarQube
Guard
Security scanner for MCP (Model Context Protocol) servers: detects tool poisoning, prompt injection, command injection, path traversal and leaked secrets. SARIF, GitHub Action, si…
Agenticqa Scan Action
Analyze AI codebases to identify integration points, security risks, and test coverage gaps in one step with comprehensive reports.
Guard
Validates MCP manifests and built artifacts for provenance, security, and supply-chain compliance.
FortressCI
No description published.