Code Analysis
Tools for static analysis, code intelligence, and code understanding. Provides capabilities for parsing, analyzing, and gaining insights into codebases across different programming languages.
MCP ServersBrowse all →
- AlicenseAqualityAmaintenancePHP static analysis MCP server with 11 tools for querying 60+ code quality metrics, detecting problems (God Class, dependency cycles, SOLID violations), analyzing dependencies, identifying refactoring priorities, and mapping test coverage — all from live analysis data.Last updated11277MIT
- AlicenseAqualityCmaintenanceEnables AI coding agents to scan smart contracts and code for vulnerabilities, check against 12 famous-hack patterns, and return public security receipts directly in the IDE.Last updated423MIT
- AlicenseAqualityAmaintenanceA local AST and type-aware Go repository context indexer that uses CHA to map symbols, call graphs, dependencies, and architecture patterns. Built for AI coding agents that need to navigate and reason about large Go codebases without reading raw files.Last updated857151MIT

@yawlabs/electron-mcpofficial
AlicenseAqualityBmaintenanceProvides 18 tools for Electron development, including secure IPC scaffolding, security audits, migration assistance, and build error diagnosis, enabling AI assistants to generate correct Electron code.Last updated182781MIT
Semgrep MCP Serverofficial
AlicenseBqualityFmaintenanceAn MCP server that provides a comprehensive interface to Semgrep, enabling users to scan code for security vulnerabilities, create custom rules, and analyze scan results through the Model Context Protocol.Last updated6668MIT
agentgraph-trustofficial
AlicenseAqualityCmaintenanceSecurity scanner and trust verification for AI agent tools. Scans GitHub repositories for vulnerabilities and returns signed trust attestations (Ed25519/JWS) with trust-tiered rate limiting recommendations.Last updated101MIT
Omniboard MCPofficial
AlicenseBqualityCmaintenanceMCP server that exposes actionable Omniboard checks for the current project to a local agent.Last updated212MIT- MIT

JSON Contractsofficial
AlicenseAqualityBmaintenanceJSON Contracts is a local MCP server for transforming natural language into Git-controlled JSON contracts, JSON Schema validation, and structured LLM/agent outputs.Last updated8131Apache 2.0
onion-mcp-serverofficial
AlicenseAqualityCmaintenanceA feature-rich MCP server offering 30 tools across AI, code, text, data, web, and system categories, enabling tasks like chat, translation, code review, web scraping, and text processing.Last updated30MIT
ZeroPath MCP Serverofficial
AlicenseBqualityDmaintenanceAllows developers to query security findings (SAST issues, secrets, patches) using natural language within AI-assisted tools like Claude Desktop, Cursor, and other MCP-compatible environments.Last updated179MIT- AlicenseAqualityCmaintenanceGenerates Phaset manifest files by analyzing your repository with Claude's AI, automatically inferring fields from code, configs, and documentation.Last updated391MIT

@lpm-registry/mcp-serverofficial
AlicenseAqualityCmaintenanceMCP server for the LPM package registry, enabling AI tools to search, browse source code, install packages, check quality, and more.Last updated175ISC- AlicenseBqualityCmaintenanceEnables automatic generation and validation of standardized file names using AI-driven conventions for microservices architecture. Supports multi-language naming with structured components like microservice, layer, domain, and action identifiers.Last updated22181MIT

CodeLogicofficial
AlicenseAqualityBmaintenanceInteract with CodeLogic, a Software Intelligence platform that graphs complex code and data architecture dependencies, to boost AI accuracy and insight.Last updated236Mozilla Public 2.0- AlicenseAqualityBmaintenanceAn AppSec-focused MCP server that performs static analysis scans on C/C++ source code for memory-safety vulnerabilities and parses compiled PE/ELF binary headers locally to audit active defensive compiler mitigations (ASLR, DEP/NX, PIE).Last updated44MIT
- AlicenseAqualityBmaintenance14 atomic MCP tools for AppSec and AI Security engineers: source/schema/prompt audit primitives, JWT inspect, HTTP diff, pentest atoms (default creds, GraphQL introspect, phpggc, interactsh OOB), and a defensive helpers library that fixes the bugs the detectors flag. SARIF output, PyPI Trusted Publishing with Sigstore provenance.Last updated614MIT

Xano Developer MCPofficial
AlicenseAqualityCmaintenanceAn MCP server and standalone library that gives AI assistants superpowers for developing on Xano — complete with documentation, code validation, and workflow guides.Last updated55059MIT- AlicenseAqualityBmaintenanceCode dependency graph and AI context engine. 10 MCP tools that give Claude, Cursor, and any MCP client full codebase context — impact analysis, dependency tracing, architecture summaries, and interactive arc diagram visualization. Supports TypeScript, JavaScript, Python, and Go.Last updated2370040Business Source 1.1
- AlicenseAqualityCmaintenanceEnables Claude to authenticate with TuringMind cloud, upload code review results, fetch repository context and memory, and submit feedback on identified issues through type-safe tools.Last updated6MIT

Daipendencyofficial
AlicenseBqualityCmaintenanceGet the narrative and API documentation for the exact version of any of your dependencies. (Only Rust is supported at the moment.)Last updated11457MIT- AlicenseAqualityAmaintenanceAST-targeted code editing MCP server with 28 surgical tools for structural edits across 11 languages. Built on tree-sitter, replaces brittle search/replace with byte-correct edits keyed by symbol names.Last updated828MIT
- AlicenseAqualityBmaintenanceKnot is a semantic and structural codebase indexer designed for AI coding agents and developers navigating large projects. It combines vector search and graph traversal to find code by meaning, analyze impact via reverse dependencies, and explore file architectures.Last updated842MIT
- AlicenseAqualityBmaintenanceA Model Context Protocol (MCP) server that helps large language models index, search, and analyze code repositories with minimal setupLast updated214954MIT
- AlicenseAqualityCmaintenanceA Model Context Protocol (MCP) server designed to easily dump your codebase context into Large Language Models (LLMs).Last updated1113Apache 2.0
- AlicenseAqualityBmaintenanceC++26 paper reference MCP with lookup_paper, fuzzy search, and compiler_status tools over a 216-paper ISO/IEC 14882:2026 corpus. Backs a Claude Code plugin that biases the model toward final-form C++26 idioms (reflection, contracts, std::execution senders, expansion statements, #embed).Last updated63MIT

logicstamp-mcpofficial
AlicenseAqualityBmaintenanceMCP server that provides AI assistants with structured access to codebases via LogicStamp Context, enabling component analysis, dependency graphs, drift detection, and token-optimized context delivery.Last updated7214MIT
Next.js DevTools MCPofficial
AlicenseAqualityCmaintenanceProvides specialized development tools and utilities for Next.js, allowing AI agents to perform runtime diagnostics and access official documentation. It enables automated context initialization and real-time interaction with Next.js development servers to query application state.Last updated765,010762MIT- AlicenseAqualityCmaintenanceA security-focused server that integrates with Cursor IDE to provide real-time vulnerability detection, exploit generation, and security insights during software development.Last updated71MIT
- AlicenseAqualityCmaintenanceAn MCP server that validates VTK Python code by checking class and method existence, import correctness, and provides structured error reporting to catch API hallucinations.Last updated18MIT
MCP ConnectorsBrowse all →
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
AI-powered intelligence for your development workflow via Indicate.
Stop your AI agents from writing sloppy TypeScript. A toolkit that teaches coding agents like Claude Code, Codex, Cursor, Amp, and more to ship production-ready code in half the time, at half the cost. Docs are available at https://convention.sh/docs
Ship production-ready TypeScript code in half the time, at half the cost.
Check that your AI is being logical. Free tool that mathematically catches contradictions in agent reasoning. No account needed. Also offers paid guardrails that converts natural language to formal verification proofs, that anyone can check succinctly.
MCP server providing Pine Script v6 documentation. Enables AI to: Look up Pine Script functions and validate syntax Access official documentation for indicators, strategies, and visuals Understand Pine Script concepts (execution model, repainting, etc.) Generate correct v6 code with proper function references
Behavioral oracle for Rust crate APIs: runtime behavior, yank/advisory, deprecation, sig search
Pre-flight MCP security. Blocks compromised deps + tool drift. HMAC-signed. Dredd judges.
MCP server for static security analysis of Android source code
50 AI tools for D365 F&O: X++ search, ADO integration, code gen, security tracing & upgrade impact.
Generate AGENTS.md, AP2 compliance docs, checkout rules, debug playbook & MCP configs from any repo.
Real-time Python package and vulnerability data for AI coding agents.
The OpenZeppelin Stylus Contracts MCP server generates secure smart contracts for the Arbitrum Stylus environment using OpenZeppelin templates, including ERC-20, ERC-721, and ERC-1155 standards. It automatically validates generated code against OpenZeppelin's security and style rules, enforcing best practices for imports, modifiers, naming conventions, and security checks to prevent common vulnerabilities. The server integrates with AI development tools like Cursor, Claude, Gemini, Windsurf, and VS Code to enable AI-assisted, production-ready smart contract development.
Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.
The OpenZeppelin Solidity Contracts MCP server integrates OpenZeppelin's security and style rules into AI-driven development workflows, enabling AI assistants to generate safe, correct, and production-ready smart contracts. It automatically validates generated code against OpenZeppelin standards (including imports, modifiers, naming conventions, and security checks) and supports various contract types including ERC-20, ERC-721, ERC-1155, Stablecoins, RWA, Governor, and Account contracts through prompt-driven workflows.
The OpenZeppelin Cairo Contracts MCP server generates secure smart contracts in the Cairo language for Starknet environments based on OpenZeppelin templates. It brings OpenZeppelin's proven security and style rules directly into AI-driven development workflows to create safe, production-ready contracts. Key capabilities include providing templates for ERC-20, ERC-721, ERC-1155, Multisig, Governor, and Vesting contracts.
Send a coupling matrix, get zone classifications and optimal factorization strategy.
Governance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.
Kotlin compile-time SQL library. Docs, code validation, and SQLite execution tools.