Code Analysis
Tools for static analysis, code intelligence, and code understanding. Provides capabilities for parsing, analyzing, and gaining insights into codebases across different programming languages.
MCP ServersBrowse all →
- AlicenseAqualityDmaintenanceMCP server that scans Salesforce Agentforce metadata for security vulnerabilities using 61+ SAST rules, integrating into AI coding workflows to guard against OWASP LLM top 10 risks.1621Cryptographic Autonomy 1.0 (Combined Work Exception)

Code-Fundi MCP Serverofficial
AlicenseAqualityAmaintenanceA production-grade MCP server for the Code-Fundi API, enabling AI agents to map codebases, search semantically, and analyze blast radius. It provides tools for repository management, AI-powered research, and impact analysis before shipping changes.27841MIT- AlicenseAqualityAmaintenanceGenerates legal policies (privacy, terms, cookies, etc.) directly from AI coding tools by analyzing codebase context.15137MIT
- AlicenseAqualityBmaintenanceStandard coding agents waste 70% of context tokens re-reading raw files with shell grep. Synapse-MCP indexes your codebase into a sub-millisecond local AST graph—giving Claude Code, Cursor, and Windsurf exact caller trees, 60% lower token spend, and zero-hallucination refactoring.2141MIT
- AlicenseAqualityBmaintenanceDeterministic code review MCP server that provides tools for file selection, rule matching, comment positioning, and reflection, ensuring stable review quality without LLM calls.5191MIT

@lpm-registry/mcp-serverofficial
AlicenseAqualityCmaintenanceMCP server for the LPM package registry, enabling AI tools to search, browse source code, install packages, check quality, and more.1718ISC- AlicenseBqualityAmaintenanceLLM-native code tools: 44 MCP tools for AI agents to read, understand and modify code. Rust tree-sitter parse daemon (crash-isolated), SQLite symbol index (repo map 98ms), transactional journal-backed writes, deterministic quality gates (zero LLM calls). 512MB cgroup: 128 concurrent, zero OOM. MIT.3442MIT
- AlicenseAqualityAmaintenanceEnables Claude to authenticate with TuringMind cloud, upload code review results, fetch repository context and memory, and submit feedback on identified issues through type-safe tools.34MIT

OrangePro MCPofficial
AlicenseAqualityAmaintenanceAnalyzes code to map behaviors, identify untested gaps, and generate grounded integration tests that actually run.1578917MIT
Daipendencyofficial
AlicenseBqualityDmaintenanceGet the narrative and API documentation for the exact version of any of your dependencies. (Only Rust is supported at the moment.)11958MIT
corbatofficial
AlicenseAqualityBmaintenancePolicy and quality engine for AI coding agents that enforces team coding standards and provides validation gates for agent-assisted software delivery.7624MIT- AlicenseBqualityDmaintenanceAn MCP server for auditing and analyzing user interfaces across 20 platforms based on 30 fundamental UX laws. It provides automated code detection, platform-specific checklists, and comparative analysis to optimize design usability.237122MIT
- AlicenseAqualityDmaintenanceEnables AI coding agents to scan smart contracts and code for vulnerabilities, check against 12 famous-hack patterns, and return public security receipts directly in the IDE.416MIT
- AlicenseAqualityDmaintenanceGenerates Phaset manifest files by analyzing your repository with Claude's AI, automatically inferring fields from code, configs, and documentation.3131MIT

ZeroPath MCP Serverofficial
AlicenseBqualityDmaintenanceAllows developers to query security findings (SAST issues, secrets, patches) using natural language within AI-assisted tools like Claude Desktop, Cursor, and other MCP-compatible environments.179MIT
logicstamp-mcpofficial
AlicenseAqualityCmaintenanceMCP server that provides AI assistants with structured access to codebases via LogicStamp Context, enabling component analysis, dependency graphs, drift detection, and token-optimized context delivery.794MIT
openhonest-umbraofficial
AlicenseAqualityAmaintenanceAudits a module against its test suite and reports the cases the tests are structurally unable to see, then proves each gap with a real failing test rather than a warning. Covers Python, TypeScript, JavaScript, Java, Rust and Go.43Apache 2.0- AlicenseBqualityDmaintenanceEnables automatic generation and validation of standardized file names using AI-driven conventions for microservices architecture. Supports multi-language naming with structured components like microservice, layer, domain, and action identifiers.22232MIT

onion-mcp-serverofficial
AlicenseAqualityDmaintenanceA feature-rich MCP server offering 30 tools across AI, code, text, data, web, and system categories, enabling tasks like chat, translation, code review, web scraping, and text processing.30MIT- AlicenseAqualityBmaintenanceMCP server that inspects local codebases and generates source-grounded context packs for coding agents, with tools for repository search, symbols, dependencies, Git analysis, and context generation.26MIT
- AlicenseAqualityAmaintenanceEnables AI assistants to perform read-only introspection of Symfony applications, exposing routes, controllers, services, entities, database schema, migrations, logs, and more via MCP tools.105750MIT
- AlicenseBqualityCmaintenanceConnects Claude Code to a Latent Defense deployment to map GitHub repositories into an infrastructure graph, discover attack paths using the JEPA energy model, and triage findings from the terminal.85Apache 2.0
- AlicenseAqualityDmaintenanceA Model Context Protocol (MCP) server designed to easily dump your codebase context into Large Language Models (LLMs).1123Apache 2.0
- AlicenseAqualityAmaintenanceocal-first, read-only MCP server that audits repository test architecture across ten language ecosystems. It returns deterministic evidence-backed findings, blockers, rankings, and repository-native test plans without modifying source files.219141MIT

JSON Contractsofficial
AlicenseAqualityCmaintenanceJSON Contracts is a local MCP server for transforming natural language into Git-controlled JSON contracts, JSON Schema validation, and structured LLM/agent outputs.8591Apache 2.0
CodeLogicofficial
AlicenseAqualityAmaintenanceInteract with CodeLogic, a Software Intelligence platform that graphs complex code and data architecture dependencies, to boost AI accuracy and insight.838Mozilla Public 2.0- AlicenseAqualityAmaintenanceEnables AI agents to interact with IDA Pro databases and GUI, supporting reverse engineering tasks such as analyzing binaries and querying open files via natural language.61357MIT
- AlicenseAqualityBmaintenanceEnables MCP-native multi-agent security audits for Google Antigravity, orchestrating subagents for 0day research, static analysis, PoC verification, exploit chaining, reporting, and code remediation.2153MIT
- AlicenseAqualityAmaintenanceCode dependency graph and AI context engine. 10 MCP tools that give Claude, Cursor, and any MCP client full codebase context — impact analysis, dependency tracing, architecture summaries, and interactive arc diagram visualization. Supports TypeScript, JavaScript, Python, and Go.242,05359Business Source 1.1
- AlicenseAqualityAmaintenanceContract-first programming language with a local MCP server for checking types, effects, capabilities, and contracts in agent-written modules. Its review tool compares before and after source sets and returns receipts for new authority, weaker promise tiers, and new Guarded runtime obligations.77Apache 2.0
MCP ConnectorsBrowse all →
Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
Drupal core API changes, contrib usage, upgrade readiness, patch verdicts, code search, SQL.
Check that your AI is being logical. Free tool that mathematically catches contradictions in agent reasoning. No account needed. Also offers paid guardrails that converts natural language to formal verification proofs, that anyone can check succinctly.
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
The official Svelte MCP server providing docs and autofixing tools for Svelte development
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
Check if a dependency's license obligates you, based on how you ship. npm, PyPI, Go.
Proves AI-generated Python does what you asked: lint, types, security, sandbox run, exact fixes.
Lint a SKILL.md for frontmatter, structure, secrets and size. All 6 tools free.
Fleet entry point: 19 hosted MCP servers, 132 tools, 92 free. Searches 138 agent skills.
Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.
Check exact npm/PyPI upgrades for evidence-backed breaking changes; query APIs and components.
Bundlephobia MCP — npm bundle-size analysis
Format/lint JS, Python, HubL for automation platforms. Tools: format_code, format_json, ask_codefmt
A skeptical senior-engineer code reviewer over MCP: risk-scans unified diffs, flags AI-generated-code tells, reports complexity hotspots, scans for leaked secrets, and runs an OWASP security pass — real analyzers, no external APIs. Free tier, no signup.
Packagephobia MCP — install-size analysis for npm packages
AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties.
A fully free linter for agent skill files: lint_skill validates YAML frontmatter, structure, size budgets, and safety phrasing with a pass/fail verdict; packaging_check validates zip layout against marketplace rules; plus regex_test, json_validate, diff_texts, and cron_explain for skill authors. No license or account required.
deps.dev — Google's package metadata + dependency graph API