"Semgrep static analysis tool" matching MCP servers:

Enables static analysis of Solidity smart contracts using Slither, including contract metadata, function details, inheritance, and security detectors through MCP tools.

Integrates Checkov, Semgrep, Bandit, and ASH to provide comprehensive code security analysis for AI coding assistants.

Records and scores prospective equity earnings predictions made by AI agents, allowing comparison of different agent configurations.

Enables AI assistants to execute security testing tools on a Kali Linux machine over SSH, including reconnaissance, web app scanning, and static/dynamic analysis.

PHP static analysis MCP server with 11 tools for querying 60+ code quality metrics, detecting problems (God Class, dependency cycles, SOLID violations), analyzing dependencies, identifying refactoring priorities, and mapping test coverage — all from live analysis data.

An MCP server that provides a comprehensive interface to Semgrep, enabling users to scan code for security vulnerabilities, create custom rules, and analyze scan results through the Model Context Protocol.

Local static inspection of MCP and AI-agent tool manifests before attachment, reporting findings and missing evidence without executing proposed tools. Results do not establish runtime safety.

Local, read-only MCP server that provides verified access to bounded.tools' signed static API, including the Web-Build Conformance report and SPDX SBOM, with byte-for-byte verification against a Sigstore-signed manifest.

Enables agents to synthesize typed MCP tool schemas at runtime, validate Python ASTs for unsafe imports, compile sandboxed callable handlers, and hot-plug them into an active MCP runtime. It provides a zero-dependency, standard-library-only MCP server for safe just-in-time tool creation and execution.

This read-only MCP Server allows you to connect to SQL Server Analysis Services data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out our MCP Server for SQL Server Analysis Services (https://www.cdata.com/drivers/ssas/download/mcp).

Enables AI assistants to access options analysis data, market research tools, portfolio risk snapshots, and platform context via 32 tools.

Provides advanced string manipulation tools for AI agents, including text analysis, transformation, diffing, templating, and slug generation.

Static analysis for vibe-coded apps. Flags security, reliability, performance, and AI quality issues in code generated by Cursor, v0, Bolt, and Copilot.

Enables deterministic AST static analysis and call-graph auditing to identify orphaned functions, unreachable methods, and token-bloat clusters, producing refactoring plans that reduce context waste.

Enables autonomous agents to automatically repair and guard tool-call schemas through deterministic AST analysis and parameter projection validation, ensuring reliable, schema-compliant interactions in MCP-compatible environments.

Enables agents and MCP-compliant clients to resolve tool execution graphs by scheduling calls as a topological dependency DAG, running independent tools in parallel batches while speculatively prefetching and evaluating arguments. This cuts latency and token burn by handling routine tool orchestration deterministically without extra LLM round-trips.

Enables static AST-based dataflow analysis to trace untrusted sources to sensitive sinks, supporting automated code review and security auditing through MCP.

Enables Claude and other MCP-compatible agents to process documents, extract structured data, detect PII, and export LLM-ready datasets through natural language tool calls.

MCP server that lets AI assistants like Claude or Cursor extract structured data (e.g., invoices) from images and PDFs via Vision API, with tools for analysis, questions, and preset management.

Provides a local MCP server that exposes the check_prompt_injection tool to MCP clients, letting agents scan untrusted text (web pages, documents, tool outputs, emails) for prompt injection before passing it to another LLM.