"CodeQL for Code Auditing" matching MCP servers:

embedded code search engine CLI -AST based that just works - improves speed and efficiency for coding agent

This MCP server is designed for planning with Claude Code, Cline, or Cursor and making changes with Cerebras to maximize speed and intelligence while avoiding API limits. It uses the Qwen 3 Coder model for high-quality code generation and can be embedded in IDEs.

Injects the Code-Me brand identity, tone, and visual guidelines into LLMs with zero latency using built-in context files.

Deterministic code review MCP server that provides tools for file selection, rule matching, comment positioning, and reflection, ensuring stable review quality without LLM calls.

Just to be clear about the final JSON: the MCP server is named herdr-inbox, and it enables Claude Code agents in herdr to ask questions asynchronously without stalling, with all open questions answered from one popup and answers routed back to the asking agent.

Serves bundled local engineering guidance—four instructions, a control Guide and 20 software engineering procedures—over local STDIO so coding agents can discover and read the right procedure for a task. It is read-only and stateless, leaving all project changes and permissions to the consuming agent.

An MCP server for WCAG accessibility auditing in AI coding agents, providing tools to audit HTML, files, URLs, and diffs, plus a prompt for React component auditing.

A production-grade MCP server for the Code-Fundi API, enabling AI agents to map codebases, search semantically, and analyze blast radius. It provides tools for repository management, AI-powered research, and impact analysis before shipping changes.

Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.

Provides tools to search and execute Code Ocean capsules and pipelines while managing platform data assets. It enables users to interact with Code Ocean's computational resources and scientific workflows directly through natural language interfaces.

An oil & gas data-analytics MCP server that enables guarded SQL queries, well valuation, and map rendering within chat apps.

Enables deploying apps, managing servers, domains/DNS, VPS lifecycle, and account balance on Impreza Host via AI in VS Code.

A client-side MCP proxy that injects OAuth 2.0 bearer tokens or API keys into MCP requests, enabling MCP clients to connect to OAuth/API-key-protected MCP servers like Amazon Bedrock AgentCore Gateway. It automatically fetches and refreshes credentials using AgentCore Identity or static values.

Persistent project memory + architectural decisions + pre-execution safety hooks for Claude Code. Local-only storage, multi-repo workspace, automatic knowledge extraction via background auditor.

Allows agents to lookup code snippets in your project. Uses a remote MCP server with a collection of code snippets, with support for automatic project language detection.

Enables querying indexed code across multiple repositories with file-level citations, reviewing pull requests, auditing dependencies, and exporting SBOMs and evidence packs through MCP tools.

Enterprise-grade code intelligence server for AI assistants that analyzes codebases for due diligence, tech debt, security vulnerabilities, and code quality.

Enables AI assistants to surgically extract and analyze code, reducing token usage and costs by up to 200x compared to reading entire files.

QR Code AI - MCP server providing AI-powered tools and automation by MEOK AI Labs

Enhances LLM responses by grounding them in official Google Maps Platform documentation and code samples via MCP tools for developing applications.

An MCP server for securely executing Python code, supporting STDIO, Streamable HTTP, and SSE transports, with easy deployment on Heroku.

Provides AI coding agents with structured access to indexed codebases via semantic search, symbol analysis, and file reading tools.

Automated SEO, AEO, ADA auditing for your website or project.

Indexes your codebase so AI coding agents can search instead of re-reading files, saving up to 94% of tokens.

Enables agents and MCP clients to safely execute and verify multi-language code in a deterministic sandbox, using AST security analysis to block dangerous system calls and capture isolated execution telemetry.

A local, cross-editor MCP server that provides persistent memory for coding agents, capturing and recalling decisions, conventions, and fixes across sessions without API keys.

Enables coding agents to run deterministic, zero-dependency AST static analysis over source code, building call graphs and dependency metrics to find orphaned functions, unreachable methods, breaking API surface diffs, and token-bloat clusters, then return a structured refactoring plan. It plugs into MCP clients like Claude Desktop, Cursor, and Windsurf via a single Python entrypoint.

Enables deterministic AST static analysis and call-graph auditing to identify orphaned functions, unreachable methods, and token-bloat clusters, producing refactoring plans that reduce context waste.

Enables static AST-based dataflow analysis to trace untrusted sources to sensitive sinks, supporting automated code review and security auditing through MCP.

Enables scanning code and URLs for API deprecations, auditing websites for professional quality, and running resale value scans from photo URLs over MCP streamable HTTP.