Code Analysis
Tools for static analysis, code intelligence, and code understanding. Provides capabilities for parsing, analyzing, and gaining insights into codebases across different programming languages.
MCP ServersBrowse all →
AlicenseAqualityAmaintenanceAnalyzes code to map behaviors, identify untested gaps, and generate grounded integration tests that actually run.81564317MIT
Verificate MCPofficial
AlicenseAqualityAmaintenanceVerificate combines 17 applications each designed to address a separate issue with AI Coding supported with a Frontier AI Model. This allows you to Vibe Code with confidence and even dropped down to a more basic model with a better outcome.841MIT- AlicenseAqualityAmaintenanceCode dependency graph and AI context engine. 10 MCP tools that give Claude, Cursor, and any MCP client full codebase context — impact analysis, dependency tracing, architecture summaries, and interactive arc diagram visualization. Supports TypeScript, JavaScript, Python, and Go.242,05359Business Source 1.1
- AlicenseAqualityBmaintenanceMCP server that inspects local codebases and generates source-grounded context packs for coding agents, with tools for repository search, symbols, dependencies, Git analysis, and context generation.26MIT

CodeLogicofficial
AlicenseAqualityAmaintenanceInteract with CodeLogic, a Software Intelligence platform that graphs complex code and data architecture dependencies, to boost AI accuracy and insight.838Mozilla Public 2.0
cocoindex-codeofficial
AlicenseAqualityAmaintenanceembedded code search engine CLI -AST based that just works - improves speed and efficiency for coding agent12,636Apache 2.0- AlicenseAqualityBmaintenanceDeterministic code review MCP server that provides tools for file selection, rule matching, comment positioning, and reflection, ensuring stable review quality without LLM calls.5541MIT
- AlicenseBqualityBmaintenanceLLM-native code tools: 44 MCP tools for AI agents to read, understand and modify code. Rust tree-sitter parse daemon (crash-isolated), SQLite symbol index (repo map 98ms), transactional journal-backed writes, deterministic quality gates (zero LLM calls). 512MB cgroup: 128 concurrent, zero OOM. MIT.3441MIT
- AlicenseAqualityAmaintenanceEnables Claude to authenticate with TuringMind cloud, upload code review results, fetch repository context and memory, and submit feedback on identified issues through type-safe tools.34MIT

onion-mcp-serverofficial
AlicenseAqualityDmaintenanceA feature-rich MCP server offering 30 tools across AI, code, text, data, web, and system categories, enabling tasks like chat, translation, code review, web scraping, and text processing.30MIT
Asyntheticofficial
AlicenseAqualityBmaintenanceAn MCP server that gives AI coding agents verified migration maps: exactly what breaks between two versions of a library and how to fix it, from hand-curated maps with source citations - instead of hallucinated answers from stale training data577Business Source 1.1
JSON Contractsofficial
AlicenseAqualityCmaintenanceJSON Contracts is a local MCP server for transforming natural language into Git-controlled JSON contracts, JSON Schema validation, and structured LLM/agent outputs.8371Apache 2.0- AlicenseAqualityAmaintenanceSlimdex is a local MCP server that helps coding agents retrieve code narrowly—outlines, line ranges, symbol bodies, references, and intent-based searches—instead of reading whole files into context, featuring a persistent index and tools for exploration, editing, and session memory.230246MIT

AgentAuditofficial
AlicenseAqualityDmaintenanceEnables AI agents to scan MCP servers and AI packages for vulnerabilities, prompt injection, and supply chain attacks.7156AGPL 3.0- AlicenseBqualityDmaintenanceEnables automatic generation and validation of standardized file names using AI-driven conventions for microservices architecture. Supports multi-language naming with structured components like microservice, layer, domain, and action identifiers.22922MIT
- AlicenseAqualityBmaintenanceEnables Android APK reverse engineering and Flutter runtime injection through a six-step pipeline of decompile, analyze, synthesize, inject, patch, and repackage. Provides MCP tools for authorized security research and penetration testing.891,6183MIT

ZeroPath MCP Serverofficial
AlicenseBqualityDmaintenanceAllows developers to query security findings (SAST issues, secrets, patches) using natural language within AI-assisted tools like Claude Desktop, Cursor, and other MCP-compatible environments.179MIT
symbols-mcpofficial
AlicenseAqualityDmaintenanceMCP server for the Symbols.app platform, enabling AI coding assistants to search docs, generate components, audit code, manage projects, and deploy via the smbls stack.287,8201Creative Commons Attribution Non Commercial 4.0 International
openhonest-umbraofficial
AlicenseAqualityAmaintenanceAudits a module against its test suite and reports the cases the tests are structurally unable to see, then proves each gap with a real failing test rather than a warning. Covers Python, TypeScript, JavaScript, Java, Rust and Go.43Apache 2.0- AlicenseBqualityAmaintenanceEnables deterministic verification for AI assistants by executing Python code that uses symbolic engines like SymPy and Z3 for math, logic, and code analysis.2Apache 2.0
- AlicenseAqualityBmaintenanceReal-time crypto whale intelligence MCP server with 55 tools across 14 blockchains. Free, no auth required.10551MIT
- AlicenseAqualityDmaintenanceEnables AI coding agents to scan smart contracts and code for vulnerabilities, check against 12 famous-hack patterns, and return public security receipts directly in the IDE.414MIT
- AlicenseBqualityCmaintenanceConnects Claude Code to a Latent Defense deployment to map GitHub repositories into an infrastructure graph, discover attack paths using the JEPA energy model, and triage findings from the terminal.85Apache 2.0

Daipendencyofficial
AlicenseBqualityDmaintenanceGet the narrative and API documentation for the exact version of any of your dependencies. (Only Rust is supported at the moment.)11958MIT- AlicenseAqualityDmaintenanceMCP server that scans Salesforce Agentforce metadata for security vulnerabilities using 61+ SAST rules, integrating into AI coding workflows to guard against OWASP LLM top 10 risks.1634Cryptographic Autonomy 1.0 (Combined Work Exception)

corbatofficial
AlicenseAqualityBmaintenancePolicy and quality engine for AI coding agents that enforces team coding standards and provides validation gates for agent-assisted software delivery.7624MIT- AlicenseBqualityDmaintenanceAn MCP server for auditing and analyzing user interfaces across 20 platforms based on 30 fundamental UX laws. It provides automated code detection, platform-specific checklists, and comparative analysis to optimize design usability.237122MIT
- AlicenseAqualityDmaintenanceA Model Context Protocol (MCP) server designed to easily dump your codebase context into Large Language Models (LLMs).163Apache 2.0
- AlicenseAqualityAmaintenanceA Model Context Protocol server that enables AI-powered analysis of NPM packages through multiple tools for security vulnerability scanning, dependency analysis, package comparison, and quality assessment.10191,03018TypeScriptMIT
- MIT
MCP ConnectorsBrowse all →
Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
Check that your AI is being logical. Free tool that mathematically catches contradictions in agent reasoning. No account needed. Also offers paid guardrails that converts natural language to formal verification proofs, that anyone can check succinctly.
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
Drupal core API changes, contrib usage, upgrade readiness, patch verdicts, code search, SQL.
Check if a dependency's license obligates you, based on how you ship. npm, PyPI, Go.
Packagephobia MCP — install-size analysis for npm packages
The official Svelte MCP server providing docs and autofixing tools for Svelte development
Lint a SKILL.md for frontmatter, structure, secrets and size. All 6 tools free.
Fleet entry point: 19 hosted MCP servers, 132 tools, 92 free. Searches 138 agent skills.
Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.
Check exact npm/PyPI upgrades for evidence-backed breaking changes; query APIs and components.
Proves AI-generated Python does what you asked: lint, types, security, sandbox run, exact fixes.
Format/lint JS, Python, HubL for automation platforms. Tools: format_code, format_json, ask_codefmt
A skeptical senior-engineer code reviewer over MCP: risk-scans unified diffs, flags AI-generated-code tells, reports complexity hotspots, scans for leaked secrets, and runs an OWASP security pass — real analyzers, no external APIs. Free tier, no signup.
AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties.
A fully free linter for agent skill files: lint_skill validates YAML frontmatter, structure, size budgets, and safety phrasing with a pass/fail verdict; packaging_check validates zip layout against marketplace rules; plus regex_test, json_validate, diff_texts, and cron_explain for skill authors. No license or account required.
Compile code with thousands of compilers, inspect the assembly, and share godbolt.org links