A
licenseA
qualityC
maintenanceEnables asynchronous OWASP Dependency-Check vulnerability scanning of allowlisted repositories via three narrow tools for starting scans, checking status, and retrieving structured findings.
3
MIT
Best OWASP Dependency-Check MCP Servers
OWASP Dependency-Check is a software composition analysis utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities.
Why this server?
Provides tools for running OWASP Dependency-Check vulnerability scans against allowed repositories, checking asynchronous scan status, and retrieving normalized reports with dependency and vulnerability findings.
Why this server?
Uses OWASP Dependency-Check as a software composition analysis engine to identify vulnerable dependencies.
Break Anythingofficial
AlicenseNot gradedqualityBmaintenanceConnects AI coding agents to security tooling so they can inspect authorized code, dependencies, container images, and infrastructure, confirm exploitability, and receive evidence-backed remediation plans.3,839 npmMITWhy this server?
Offers multi-language dependency vulnerability scanning through OWASP Dependency-Check integration for identifying known vulnerable components
AlicenseNot gradedqualityBmaintenanceIntegrates 15+ static application security testing tools (Semgrep, Bandit, TruffleHog, etc.) with Claude Code AI, enabling automated vulnerability scanning and security analysis through natural language commands. Supports cross-platform operation with remote execution on dedicated security VMs.6MITWhy this server?
Uses OWASP Dependency-Check to scan Java (and other) dependencies for known security vulnerabilities (CVEs).
AlicenseNot gradedqualityDmaintenanceProvides intelligent codebase analysis, dependency scanning, architecture detection, security vulnerability scanning, and automatic documentation generation for modern development teams.8 npmMIT