Skip to main content
Glama

Code Analysis

Tools for static analysis, code intelligence, and code understanding. Provides capabilities for parsing, analyzing, and gaining insights into codebases across different programming languages.

MCP ServersBrowse all →

  • A
    license
    A
    quality
    C
    maintenance
    Security scanner and trust verification for AI agent tools. Scans GitHub repositories for vulnerabilities and returns signed trust attestations (Ed25519/JWS) with trust-tiered rate limiting recommendations.
    Last updated
    10
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    The dependency bloodhound for AI coding agents. Hound is a free, open-source MCP server that gives AI coding agents a nose for supply chain security. It scans packages for vulnerabilities, checks licenses, inspects dependency trees, and detects typosquatting — with zero API keys, zero config, and zero cost.
    Last updated
    2
    12
    9
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Knot is a semantic and structural codebase indexer designed for AI coding agents and developers navigating large projects. It combines vector search and graph traversal to find code by meaning, analyze impact via reverse dependencies, and explore file architectures.
    Last updated
    6
    4
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Mason indexes your codebase into a persistent concept map linking features and flows to their implementing files, so AI agents can answer "where is X implemented" without running grep/glob. It also provides pre-edit impact analysis and generates CLAUDE.md files from structured analysis of git history, architectural file sampling, and test mappings.
    Last updated
    20
    6
    19
    6
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    PHP static analysis MCP server with 11 tools for querying 60+ code quality metrics, detecting problems (God Class, dependency cycles, SOLID violations), analyzing dependencies, identifying refactoring priorities, and mapping test coverage — all from live analysis data.
    Last updated
    11
    3
    66
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    AST-targeted code editing MCP server with 28 surgical tools for structural edits across 11 languages. Built on tree-sitter, replaces brittle search/replace with byte-correct edits keyed by symbol names.
    Last updated
    8
    28
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    A unified developer toolkit for AI-assisted workflows. Task timing, doc drift detection, env validation, secret scanning, port conflict resolution, AI context generation, and license auditing — one MCP server, one install.
    Last updated
    13
    7
    1
  • A
    license
    B
    quality
    F
    maintenance
    An MCP server that provides a comprehensive interface to Semgrep, enabling users to scan code for security vulnerabilities, create custom rules, and analyze scan results through the Model Context Protocol.
    Last updated
    6
    665
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Code dependency graph and AI context engine. 10 MCP tools that give Claude, Cursor, and any MCP client full codebase context — impact analysis, dependency tracing, architecture summaries, and interactive arc diagram visualization. Supports TypeScript, JavaScript, Python, and Go.
    Last updated
    23
    493
    27
    Business Source 1.1
  • A
    license
    A
    quality
    C
    maintenance
    Provides specialized development tools and utilities for Next.js, allowing AI agents to perform runtime diagnostics and access official documentation. It enables automated context initialization and real-time interaction with Next.js development servers to query application state.
    Last updated
    7
    59,698
    741
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI assistants to perform comprehensive code reviews of local uncommitted changes by combining git diffs with static analysis from linters like ESLint and TypeScript. Returns structured JSON feedback with findings, suggestions, and quality assessments powered by Google's Gemini CLI.
    Last updated
    1
    60
    2
    MIT
  • A
    license
    B
    quality
    C
    maintenance
    An MCP server that connects to running Node.js applications via the Chrome Debug Protocol to analyze Mnemonica type hierarchies at runtime. It enables users to validate and improve static analysis by comparing runtime types with Tactica-generated types.
    Last updated
    3
    MIT
  • A
    license
    B
    quality
    -
    maintenance
    SourceSage is an MCP (Model Context Protocol) server that efficiently memorizes key aspects of a codebase—logic, style, and standards—while allowing dynamic updates and fast retrieval. It's designed to be language-agnostic, leveraging the LLM's understanding of code across multiple languages.
    Last updated
    13
    7
  • A
    license
    B
    quality
    C
    maintenance
    Integrates GitHub Copilot with MCP-compatible tools to provide AI-powered code assistance, including chat, code explanation, and reviews. It leverages existing GitHub CLI authentication to support multiple models like GPT-4o and Claude 3.5 Sonnet.
    Last updated
    4
    25
    2
    MIT
  • A
    license
    B
    quality
    C
    maintenance
    Provides brutally honest, humorous code reviews for GitHub pull requests using Claude Haiku. Enables users to roast their PRs by fetching metadata and diffs via the GitHub CLI and returning severity-rated reviews with genuine compliments.
    Last updated
    2
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    The MCP server for Nanostores that scans your codebase with AST analysis to find stores, subscribers, and dependency chains, and can ingest live events to spot noisy, error-prone, or unused stores.
    Last updated
    12
    45
    1
    MIT

MCP ConnectorsBrowse all →