"Information on Security Testing" matching MCP connectors:

Production-safety audits for AI-generated code, with a fix for every finding. Scan for committed secrets and known vulnerable dependencies free with no key; a full audit returns a verdict with security, privacy, reliability and architecture findings, priced per audit and quoted before it runs.

Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).

Pure, bounded analysis of an explicit bill-of-materials graph: validates structure, finds missing...

npm/PyPI dependency upgrades: package security, compatibility, target ranking, and migration plans.

Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.

Check if a dependency's license obligates you, based on how you ship. npm, PyPI, Go.

Proves AI-generated Python does what you asked: lint, types, security, sandbox run, exact fixes.

Security + bug + perf + refactor audit for Python. Returns 0-10 score + MD report.

Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.

Pre-flight MCP security. Blocks compromised deps + tool drift. HMAC-signed. Dredd judges.

MCP gateway with 10 tools for code analysis, architecture, package audit & security.

The OpenZeppelin Stylus Contracts MCP server generates secure smart contracts for the Arbitrum Stylus environment using OpenZeppelin templates, including ERC-20, ERC-721, and ERC-1155 standards. It automatically validates generated code against OpenZeppelin's security and style rules, enforcing best practices for imports, modifiers, naming conventions, and security checks to prevent common vulnerabilities. The server integrates with AI development tools like Cursor, Claude, Gemini, Windsurf, and VS Code to enable AI-assisted, production-ready smart contract development.

The OpenZeppelin Solidity Contracts MCP server integrates OpenZeppelin's security and style rules into AI-driven development workflows, enabling AI assistants to generate safe, correct, and production-ready smart contracts. It automatically validates generated code against OpenZeppelin standards (including imports, modifiers, naming conventions, and security checks) and supports various contract types including ERC-20, ERC-721, ERC-1155, Stablecoins, RWA, Governor, and Account contracts through prompt-driven workflows.

MCP server for static security analysis of Android source code

The OpenZeppelin Cairo Contracts MCP server generates secure smart contracts in the Cairo language for Starknet environments based on OpenZeppelin templates. It brings OpenZeppelin's proven security and style rules directly into AI-driven development workflows to create safe, production-ready contracts. Key capabilities include providing templates for ERC-20, ERC-721, ERC-1155, Multisig, Governor, and Vesting contracts.

Exact text tools for AI agents: unified diff, patch apply, regex testing, grapheme counting.

coderegistryA

io.github.hellosg

Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.

## Skill Catalog The library contains 42 public skills organized by Rails development concern. | Category | Examples | |----------|----------| | Planning | `create-prd`, `generate-tasks`, `plan-tickets` | | Testing | `plan-tests`, `write-tests`, `test-service`, `triage-bug` | | Code quality | `code-review`, `respond-to-review`, `security-check`, `refactor-code` | | Architecture and DDD | `define-domain-language`, `review-domain-boundaries`, `model-domain`, `review-architecture` | | Rails imple

Seal SecurityOAuth

io.sealsecurity

Vulnerability management: scan projects, search sealed packages, manage sealing rules and reports.

Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.