apsa
Related Servers
Alternatives to apsa
No user-submitted related servers found.
Related Servers
- AlicenseNot gradedqualityBmaintenanceEnables security scanning of source code and Apple configuration files, providing evidence-based findings, explanations, remediation plans, threat modeling, and knowledge base access through MCP tools.MIT
- FlicenseBqualityCmaintenanceEnables local-first static and optional controlled dynamic analysis of Android APK artifacts, with provenance-aware downloads, Markdown reports, and structured security findings via MCP stdio tools.9-
- AlicenseNot gradedqualityAmaintenanceEnables MCP clients to drive the complete mobile security toolkit—static/dynamic analysis, Frida hooks, runtime exploration, traffic interception, network setup, and IoT scans—through engine-exposed tools.2GPL 3.0
- FlicenseNot gradedqualityAmaintenanceEnables users to run security-focused operations such as network scanning, binary and symbol analysis, string extraction, live/pcap traffic inspection, and sandboxed command execution through an MCP client.-
- AlicenseNot gradedqualityCmaintenanceEnables MCP clients to run and track scans, inspect quota usage, redeem existing studio report rights, and list or download generated reports through the associated REST API. It operates locally over stdio with API-key authentication and bounded retry/polling behavior.38 npmApache 2.0
- AlicenseNot gradedqualityBmaintenanceEnables MCP clients to scan codebases, persist and prioritize security findings against SLAs, retrieve CVE details, propose fixes, and create tickets through its tools. It also supports agent-assisted remediation drafting while enforcing human approval and preventing auto-merge.1MIT
TDQS
Scored across 24 tools
Most tools target clearly distinct resources and actions, and the descriptions clarify boundaries well. However, audit_scan/audit_start/audit_reassess and reports_get/reports_followup/reports_history/reports_compare overlap enough that an agent may hesitate without reading the full descriptions.
The set predominantly follows a snake_case category_action convention (jobs_*, reports_*, audit_*, intelligence_*), making tool families predictable. Minor deviations are the bare capabilities tool and the verb-first verify_finding.
24 tools is heavy for a single MCP server, sitting in the borderline 16-25 range. The mobile security audit domain is broad, but some report and job tools could plausibly be consolidated.
The surface covers scanning, persistent jobs, report retrieval/follow-up/compare/history/checklist/SARIF ingest/baseline export, intelligence, dependency checks, spec validation, finding verification, runtime planning/devices, and policy evaluation. Minor gaps such as report deletion or cleanup and explicit approval workflow details are workaroundable.