"A search for a string containing SQL injection and XSS payload characters" matching MCP servers:

A validation layer for AI coding assistants that enforces explicit LLM evaluations on plans, code diffs, and tests to ensure safer and higher-quality code.

Formats SQL queries with support for 14 dialects, keyword casing, and tab width.

MCP server that integrates sql-sop SQL linter into LLM clients, enabling linting SQL queries and listing lint rules via chat tools.

Codebase Q&A agent with git-history awareness. Explore a repo with list_files, read_file, and search, plus git log, blame, and diff and a repo map to answer "why did this change?" questions. Runs locally as an MCP server for Claude Code and other MCP clients.

Enables static, database-free SQL health checks that return rule-based findings and verdicts, propose executable fixes, and verify rewrites are equivalent while comparing execution plans and suggesting indexes. Supports batch/file/git-diff review for CI gating, all at zero-dependency Tier0.

Enables offline analysis of MySQL slow query logs, individual SQL statements, and MyBatis mappers to produce deterministic index recommendations and migration SQL without requiring an API key.

Analyzes SQL queries for performance issues, provides optimization suggestions with automated rewriting, and recommends indexes across multiple database dialects (PostgreSQL, MySQL, Oracle, SQL Server).

An MCP server designed for SQL analysis that demonstrates sampling capabilities by interacting with SQL files in a local directory. It provides a framework for testing client-side sampling while managing SQL-based contexts.

Provides secure, read-only access to Microsoft SQL Server with multi-layer protection, enabling safe query execution, schema discovery, and SQL script analysis through natural language.

Provides SQL analysis, linting, and dialect conversion using SQLGlot, enabling validation, transpilation, and extraction of table/column references.

A Model Context Protocol server that helps programmers understand code by providing explanations, tech stack analysis, and best practice suggestions through prompt templates.

Turns a codebase into a persistent knowledge graph so AI coding agents can answer structural questions about functions, call chains, routes, and cross-service links through graph queries instead of reading files one by one.

Enables executing arbitrary Joern/CPGQL queries against a loaded Code Property Graph, loading source code in multiple languages (PHP, Java, JavaScript, Python, C/C++) to build new CPGs, and inspecting loaded projects and the active workspace. It communicates with a running Joern server over its synchronous HTTP query endpoint, so no state polling is required.

Enables semantic code search across indexed code folders using vector embeddings, with support for multiple embedding providers and automatic file watching. Provides an admin UI and integrates with MCP clients for natural language code queries.

Semantic + lexical code search as an MCP server. Agents query in natural language and get back ranked file:line ranges to read precisely.

Provides tools to prepare and validate ABAP Open SQL statements for SAP's ADT data-preview console, automatically fixing dialect issues like parenthesis spacing and 255-character limits.

A CLI-first semantic code search tool with MCP integration for AI assistants, enabling semantic search, AST-aware parsing, and code analysis across 13 languages.

Enables fast, low-token code search for AI coding agents via a local BM25 engine built on SQLite FTS5, with support for camelCase, snake_case, and Japanese text. Provides a stateless MCP stdio server and a Hermes adapter for multi-agent environments.

Enables blazingly fast file and content searching in large codebases using ripgrep, with intelligent filtering, fuzzy finding, and directory tree visualization while respecting .gitignore and avoiding common bloat directories.

Enables AI agents to perform semantic code search across entire codebases using natural language queries. Provides fast indexing and ranked search results with line numbers and file paths through the Seroost search engine.