Code Analysis
Tools for static analysis, code intelligence, and code understanding. Provides capabilities for parsing, analyzing, and gaining insights into codebases across different programming languages.
MCP ServersBrowse all →
- AlicenseAqualityDmaintenanceA powerful tool designed to help, primarily LLMs, understand and navigate complex codebases. It functions both as a command-line application for on-demand analysis and as an MCP (Model Context Protocol) server, providing continuous repository mapping capabilities to other applications. By generating22205MIT
- AlicenseBqualityDmaintenanceA Model Context Protocol server that enables AI assistants to interact with IDA Pro for reverse engineering and binary analysis tasks.212101MIT
- AlicenseAqualityAmaintenanceMCP server for diagnosing Apollo InMemoryCache normalization defects, providing cache analysis and repair planning tools for React Native apps.16310ISC

infimiumofficial
AlicenseBqualityCmaintenanceInfimium is an MCP server that gives AI agents persistent memory, deep dependency graphs, and instant code context for repositories. It provides tools like semantic code search, symbol expansion, and local docs retrieval to minimize token bloat while working with large codebases.113422MIT
noir-mcp-serverofficial
AlicenseAqualityCmaintenanceMCP server for Noir development that clones and searches Noir documentation, standard library, examples, and community libraries.9113MIT
Daipendencyofficial
AlicenseBqualityDmaintenanceGet the narrative and API documentation for the exact version of any of your dependencies. (Only Rust is supported at the moment.)1958MIT
agentgraph-trustofficial
AlicenseAqualityCmaintenanceSecurity scanner and trust verification for AI agent tools. Scans GitHub repositories for vulnerabilities and returns signed trust attestations (Ed25519/JWS) with trust-tiered rate limiting recommendations.104MIT
openhonest-umbraofficial
AlicenseAqualityAmaintenanceAudits a module against its test suite and reports the cases the tests are structurally unable to see, then proves each gap with a real failing test rather than a warning. Covers Python, TypeScript, JavaScript, Java, Rust and Go.43Apache 2.0
crosspad-mcp-serverofficial
AlicenseAqualityAmaintenanceMCP server that gives Claude Code full control over the CrossPad development workflow — build, test, manage app packages, interact with the simulator, search code across repos — all from natural language.81341MIT- AlicenseBqualityCmaintenanceConnects Claude Code to a Latent Defense deployment to map GitHub repositories into an infrastructure graph, discover attack paths using the JEPA energy model, and triage findings from the terminal.85Apache 2.0

lachesis-mcpofficial
AlicenseBqualityAmaintenanceExposes Lachesis's code navigation tools over MCP, letting LLM agents ask precise compiler-level questions about dataflow, taint, callers, and guards in source code.503AGPL 3.0- AlicenseAqualityAmaintenanceContract-first programming language with a local MCP server for checking types, effects, capabilities, and contracts in agent-written modules. Its review tool compares before and after source sets and returns receipts for new authority, weaker promise tiers, and new Guarded runtime obligations.78Apache 2.0

@lpm-registry/mcp-serverofficial
AlicenseAqualityCmaintenanceMCP server for the LPM package registry, enabling AI tools to search, browse source code, install packages, check quality, and more.1714ISC- AlicenseAqualityAmaintenanceHigh-performance local MCP server and CLI written in Rust that scrubs 90%+ framework noise from AI debug logs with Tree-sitter AST validation and test rollback.432MIT
- AlicenseAqualityDmaintenanceMCP server that scans Salesforce Agentforce metadata for security vulnerabilities using 61+ SAST rules, integrating into AI coding workflows to guard against OWASP LLM top 10 risks.169Cryptographic Autonomy 1.0 (Combined Work Exception)
- AlicenseAqualityDmaintenanceA Model Context Protocol (MCP) server designed to easily dump your codebase context into Large Language Models (LLMs).173Apache 2.0

AgentAuditofficial
AlicenseAqualityDmaintenanceEnables AI agents to scan MCP servers and AI packages for vulnerabilities, prompt injection, and supply chain attacks.710AGPL 3.0
ZeroPath MCP Serverofficial
AlicenseBqualityDmaintenanceAllows developers to query security findings (SAST issues, secrets, patches) using natural language within AI-assisted tools like Claude Desktop, Cursor, and other MCP-compatible environments.179MIT- AlicenseAqualityBmaintenanceEnables MCP-native multi-agent security audits for Google Antigravity, orchestrating subagents for 0day research, static analysis, PoC verification, exploit chaining, reporting, and code remediation.8153MIT

onion-mcp-serverofficial
AlicenseAqualityDmaintenanceA feature-rich MCP server offering 30 tools across AI, code, text, data, web, and system categories, enabling tasks like chat, translation, code review, web scraping, and text processing.30MIT- AlicenseAqualityAmaintenanceGenerates legal policies (privacy, terms, cookies, etc.) directly from AI coding tools by analyzing codebase context.15137MIT

kinofficial
AlicenseAqualityAmaintenanceA graph-native code repository for people and AI agents. Kin helps you and your AI agents understand what a code change might affect before you make it.2257Apache 2.0
DeepContextofficial
AlicenseAqualityFmaintenanceAdds symbol-aware semantic search to coding agents like Codex CLI and Claude Code, enabling precise codebase context via natural language queries.463276Apache 2.0- AlicenseAqualityAmaintenanceEnables Claude to authenticate with TuringMind cloud, upload code review results, fetch repository context and memory, and submit feedback on identified issues through type-safe tools.34MIT
- AlicenseBqualityAmaintenanceAutonomous cross-source inconsistency and contradiction intelligence engine for AI agents. Detects specification drift, SemVer conflicts, and infrastructure mismatches across code, docs, and deployments.1422MIT
- AlicenseAqualityBmaintenanceDeterministic code review MCP server that provides tools for file selection, rule matching, comment positioning, and reflection, ensuring stable review quality without LLM calls.5191MIT
- AlicenseAqualityDmaintenanceEnables AI coding agents to scan smart contracts and code for vulnerabilities, check against 12 famous-hack patterns, and return public security receipts directly in the IDE.46MIT
- AlicenseAqualityAmaintenanceVerum's MCP server turns any codebase into a deterministic, queryable fact layer — an agent can ask who calls a function, what a change impacts, where the dead code and duplicates are, which client calls hit which routes, and run a full security/quality audit. It returns byte-identical answers in a few hundred tokens instead of grepping and reading whole files.413MIT
- AlicenseAqualityAmaintenanceEnables AI agents to interact with IDA Pro databases and GUI, supporting reverse engineering tasks such as analyzing binaries and querying open files via natural language.61121MIT
- AlicenseBqualityBmaintenanceABAPilot by Crimson Consulting connects AI coding assistants to SAP ECC and on-premise S/4HANA through MCP. Use SAP source and dictionary context for ABAP explanation, review and development. Available operations depend on the deployed version and enabled endpoints. The external connector is MIT-licensed; a licensed SAP-side ABAPilot backend is required.2493MIT
MCP ConnectorsBrowse all →
**Can AI actually read your page?** ChatGPT, Perplexity, Claude and Google's AI Overviews fetch pages very differently from your browser — no JavaScript, tight timeouts, and a robots.txt rulebook of their own. Lekta fetches a URL exactly the way they do and grades what survives, **A+ to F**. This is the technical half of **AEO** (answer engine optimization) and **GEO** (generative engine optimization): before a model can cite you, it has to be able to fetch you, parse you, and find one sentence worth quoting. **The loop this server was built for:** `Audit https://mysite.com/pricing with Lekta, apply the fixes it lists, audit it again, and show me the difference.` Your agent gets a graded verdict, a ranked fix plan with the exact markup to paste, and a diff that proves the change landed. Repeat until A+. **Four layers, 100 points:** **Access** 25 — do the ~17 AI crawler tokens get past robots.txt? **Indexability** 25 — how much content survives without JavaScript? **Answerability** 30 — is there a single quotable sentence an engine can lift? **Recency** 20 — can a model tell when this page was last true? **What this is not:** a rank tracker. Lekta will not tell you how often ChatGPT mentions your brand. It tells you whether your page can be read and quoted when it does — the part you can actually fix. **No black box.** Every finding cites its basis — an RFC, a vendor doc, or a dated measurement we ran. The engine is versioned with a public changelog: a score never moves without a published shift table. **Tools:** `lekta_audit` (fresh fetch) · `lekta_report` (cached read) · `lekta_fix_plan` (ranked, paste-ready) · `lekta_diff` (before/after) · `lekta_my_sites` Listing tools is open. Tool calls need a free key from lekta.dev/en/panel/api — send `Authorization: Bearer lekta_…` or `x-api-key`. Cached reads, fix plans and diffs cost nothing; only fresh fetches count against the daily limit. **Topics:** AEO · GEO · AI SEO · LLM SEO · answer engine optimization · generative engine optimization · AI crawler access (GPTBot, ClaudeBot, PerplexityBot, Google-Extended) · JavaScript-free indexability · structured data · content freshness
Lint a SKILL.md for frontmatter, structure, secrets and size. All 6 tools free.
Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Production-safety audits for AI-generated code, with a fix for every finding.
CodeSentinel — AI-powered codebase health agent
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Canonicalize Tailwind classes to their short form, and search LunarWerx free dev tools.
Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
DBRE-grade SQL analysis inside any MCP client. No connection. No install. Paste a query.
Drupal core API changes, contrib usage, upgrade readiness, patch verdicts, code search, SQL.
Check that your AI is being logical. Free tool that mathematically catches contradictions in agent reasoning. No account needed. Also offers paid guardrails that converts natural language to formal verification proofs, that anyone can check succinctly.
Check exact npm/PyPI upgrades for evidence-backed breaking changes; query APIs and components.
Repository knowledge graph MCP server for codebase understanding and debugging.
npm/PyPI/Django dependency upgrades: security, runtime compatibility, migration, package ranking.
Free tools: 2026 API shutdown scanner, small-business website auditor, photo resale estimator.
Explain a regex in plain English and detect catastrophic backtracking risk.
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
The official Svelte MCP server providing docs and autofixing tools for Svelte development