- Conduid
- Marketplace
- #static-analysis
MCP servers tagged static-analysis
643 live MCP servers tagged "static-analysis", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with static-analysis.
safedep/vet
Protect against malicious open source packages 🤖
Pyscn
Code quality analysis for Python in the age of AI coding.
Lintlang
Static analysis for AI agent configs, tool descriptions, and system prompts — catches vague tool descriptions, missing stop conditions, and schema gaps before they reach runtime.…
Fossil MCP
The code quality toolkit for the agentic AI era. Find dead code, clones, and scaffolding across 15 languages. MCP server + CLI.
zboralski/ida-headless-mcp
Headless IDA Pro binary analysis via Model Context Protocol
Aguara
The open source security engine for AI agent and supply-chain trust.
Fallow
Deterministic codebase intelligence for TypeScript and JavaScript. Quality, risk, architecture, dependencies, duplication, and safe cleanup evidence for humans, CI, and agents. Op…
Codebadger
🦡 codebadger is a containerized Model Context Protocol (MCP) server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through Joern Code…
Ghidra MCP
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server int…
Ccc
Custom launcher for Claude Code, supporting dynamic prompts, layered configuration and easy custom hooks and MCPs.
Code Review Graph
Local knowledge graph for Claude Code. Builds a persistent map of your codebase so Claude reads only what matters — 6.8× fewer tokens on reviews and up to 49× on daily coding task…
Ruff
An extremely fast Python linter and code formatter, written in Rust.
Qu1cksc0pe
All-in-One malware analysis tool.
Static Analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
Mcpdebugger
A MCP Debugger Server for Windows executables (x86 and x64). Exposes debugger functionality as MCP Tools for static / dynamic analysis of the debuggee and memory inspection throug…
Awesome Reverse Engineering
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
Graphsense
MCP server providing code intelligence using static analysis
Codesight
Universal code structure visualization via static analysis — tree-sitter powered, no LLM
Sentrux
Real-time architectural sensor that helps AI agents close the feedback loop, enabling recursive self-improvement of code quality. Pure Rust.
Codanna
Local code intelligence MCP server and CLI for AI coding agents
Ship Safe
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
Rea Agents
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Codeindex
Repo dependency analyzer with **blast-radius impact scoring** for AI-assisted development.
Enola
Understand, analyze, and govern software systems across repositories, languages, and technologies.
ozgurcd/gograph
aware structural repository graph engine and MCP server designed for AI agents. Understands Go struct embeds, public API surfaces, SQL queries, and error mapping to give agents in…
OpenLore
openlore provides persistent architectural memory for AI coding agents by turning codebases into queryable knowledge graphs featuring static analysis, living specs, automated drif…
Aislop
Catch the slop AI coding agents leave in your code: narrative comments, swallowed exceptions, as-any casts, dead code, oversized functions. 50+ rules across 7 languages (TypeScrip…
Brainblast
Predict the silent integration traps an AI agent would ship (zero-revenue configs, auth bypasses, immutable wrong choices) — then enforce, in CI, that they stay fixed. Research sk…
Ripwire
The ripgrep of AI context: a zero-dependency C++23 CLI + MCP server giving coding agents a ranked, deterministic map of any repo, blast radius, tests-to-run and quality deltas. Si…
Juror
Cheaper and better Greptile alternative runs on your own github actions.
Procoder
Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call unfinished work done, and a lessons loop…
TamiShaks-2/git-context-mcp
Local MCP server that extracts high-level Git repository context for AI coding agents
Bgts Context Engine
Deterministic code-graph context engine for AI coding agents - PostgreSQL + Apache AGE + pgvector, MCP & REST, no LLM in the loop.
AgentScan
Security scanner for AI-agent configs: MCP servers, CLAUDE.md, settings, hooks. Zero-dependency static analysis.
Spec Gen
Automate the reverse-engineering of your codebase into structured OpenSpec specifications using static analysis and LLM-powered generation to extract business logic, verify archit…
Trust Kit
Deterministic CI scanner and surface-risk scoring for MCP (Model Context Protocol) servers.
PhpCodeArcheology/PhpCodeArcheology
PHP static analysis MCP server for architecture and maintainability. 11 tools exposing 60+ code quality metrics, problem detection, refactoring priorities, dependency graphs, git…
Veritensor
The Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data Poisoning, PII, and Prompt Injections.…
Agents Shipgate
The deterministic merge gate for AI-generated agent capability changes — a local-first, static Tool-Use Readiness review for MCP, OpenAPI, and SDK tool surfaces. Open-source CLI +…
Throughline
Multi-engine SAST scanner that traces tainted data source-to-sink across JS/TS, Python, Go, PHP and Ruby — with AI triage over MCP.
Axon Pro
Enterprise-grade graph-powered code intelligence engine. Deep structural awareness for Laravel, PHP, Python, and JS. Powers AI agents with high-fidelity architectural context via…
Logicstamp Context
A Context Compiler for TypeScript. Deterministic, diffable architectural contracts and dependency graphs for AI coding workflows.
VibeDrift
Ship agentic. Stay coherent. Self-checking code integrity for AI coding agents, via MCP.
Giulia
A persistent, local-first AI development daemon built in Elixir/OTP. AST-level code intelligence, Property Graph, runtime BEAM introspection, and semantic search — all via a 80+ e…
Spc
High-performance zero-dependency static analysis tool enforcing NASA Power of Ten rules across 20 programming languages, plus AI agent skill, MCP server config, prompt template, a…
codeql-development-server
LLM <-- MCP --> CodeQL( AST | CFG | CLI | LSP )
Eslint Plugin MCP SDK Security
ESLint plugin for Model Context Protocol (MCP) SDK security — catches tools registered without an input schema, handlers reading arguments the schema never declared, model-visible…
Server
📏 Rule-based linter for structured Markdown documents
Graf
graf is graphify, rebuilt properly in rust: 1000x faster search, 89x faster updates, and one native binary.
Codeql Development MCP Server
LLM <-- MCP --> CodeQL( AST | CFG | CLI | LSP )