"A server that finds and installs other MCP servers" matching MCP servers:

A validation layer for AI coding assistants that enforces explicit LLM evaluations on plans, code diffs, and tests to ensure safer and higher-quality code.

locidx

Enables local, deterministic review of GitHub and GitLab pull request diffs for secret leaks, OWASP injection issues, WCAG 2.2 AA/EU EAA accessibility gaps, EU AI Act transparency, and database RLS risks, producing risk scores, merge decisions, committable suggestions, and SARIF exports.

Codebase Q&A agent with git-history awareness. Explore a repo with list_files, read_file, and search, plus git log, blame, and diff and a repo map to answer "why did this change?" questions. Runs locally as an MCP server for Claude Code and other MCP clients.

A lean, local knowledge graph that joins a repo's code to its aSPARK delivery artifacts, enabling agents to trace user stories to code and assess impact of changes, served over MCP.

Enables AI agents to analyze and diff binaries by driving Ghidra headless or inside its GUI, exposing native reverse-engineering tools such as listing functions and segments, searching strings, decompiling, disassembling, and following cross-references. Ships with a devcontainer and supports local stdio or remote HTTP deployment.

Enables MCP clients to load eight on-demand coding skills and inspect project repositories through bounded, read-only map, search, read, diff, checks, and style tools. It keeps context lean by loading skill bodies only when needed and limiting repository scan and output sizes.

Enables executing arbitrary Joern/CPGQL queries against a loaded Code Property Graph, loading source code in multiple languages (PHP, Java, JavaScript, Python, C/C++) to build new CPGs, and inspecting loaded projects and the active workspace. It communicates with a running Joern server over its synchronous HTTP query endpoint, so no state polling is required.

Zero-dependency MCP server inspector for protocol conformance, tool annotations, and capability checks.

AI code review against your team's own rules from your repository, before the pull request: two tools, review_changes and get_team_rules. Closed-source binary distributed via GitHub Releases; published in the official MCP Registry as dev.reviewgate/reviewgate.

Local stdio MCP server (npx -y caveat-lang mcp) with five tools that validate, check, test and explain programs in Caveat, a rules language whose decisions keep their evidence, grounds and caveats. It also finds what depends on a piece of evidence, so a withdrawn input still leaves a past decision's original basis on record.

Vet ClawHub skills before installing them; detects prompt-injection, exfiltration, and other security issues, outputting a risk score with per-finding evidence.

Finds new UI translation keys in your codebase, dedup-checks them against a Blocks/UILM tenant, and generates the JSON the Blocks portal expects for import.

A research proxy that lets Claude, Cursor, and other MCP clients utilize Gemini's generous free tier for deep codebase analysis without burning your main model's quota!

A stdio MCP server that audits other MCP servers by linting their tool schemas and calling tools with malformed inputs to produce a 0–100 conformance score and Markdown report.

An MCP server that enables coding agents to autonomously test, evaluate, and tune other MCP servers by acting as a proxy and providing linting, trace recording, evaluation, comparison, and reporting tools.

A read-only MCP server that gives Codex and other clients a Kimi K3 second opinion through OpenRouter, enabling algorithm review, code review, and project planning.

AIContextBuilder (AICB): Roslyn MCP server for C#/.NET code intelligence. Gives coding agents semantic code analysis and navigation instead of text search: callers, change impact, implementations, dependency injection, covering tests, side effects, dead code and token-budgeted context. Installs as a dotnet tool and analyzes any csharp solution locally.

Code graph context engine that parses codebases with tree-sitter (170+ languages), builds structural dependency graphs, and provides 24 MCP tools for code intelligence. One prepare_context call gives your AI agent the right files for any task. Includes focus, blast radius, hotspots, dead code detection, and hybrid search.

Strict AI code reviewer powered by Groq. Finds bugs, vulnerabilities and security issues in your code. Supports analyze, compare versions, explain code, generate tests, and HTML reports.

A powerful tool designed to help, primarily LLMs, understand and navigate complex codebases. It functions both as a command-line application for on-demand analysis and as an MCP (Model Context Protocol) server, providing continuous repository mapping capabilities to other applications. By generating

maven-mcp gives AI agents (Claude Code, Cursor, Codex, Grok Build and any MCP client) live knowledge about JVM dependencies. It looks up the latest versions on Maven Central, finds outdated dependencies in Maven, Gradle and version catalog files, checks known vulnerabilities via OSV.dev, pulls changelogs and licenses, and builds dependency graphs with deps.dev. It's a single-file Python 3.9+ serve

Automatically enhances developer prompts with quality requirements, codebase context, and architectural patterns, then orchestrates other MCP servers to ensure AI coding assistants produce high-quality, structured code that follows best practices and security standards.

Serves a facts-only index of SWAT+ Fortran source as read-only MCP tools, enabling coding assistants to answer exhaustive questions about loops, call graphs, file I/O, and other source facts with file and line references.

Security scanner for MCP servers that detects tool poisoning, shadowing, and other risks via static rules and semantic analysis. Exposes the scan_mcp_server tool for scanning MCP servers over stdio.

A git-native merge gate. mergelock check compares two branches before they meet and reports the conflicts git itself won't tell you about: a function whose signature changed on one branch while the other branch added calls to the old signature, a symbol deleted on one side but still used on the other, the same function written twice.

An MCP server that wraps the Svelte Language Server to provide IDE-like tools for Claude Code and other MCP clients. It enables advanced Svelte development features including symbol navigation, diagnostics, refactoring, and component-specific analysis.

MCP server that enables Claude Code to delegate tasks to DeepSeek and other LLMs, offering 20 tools for code review, analysis, testing, and code generation.

This MCP server automatically analyzes project architecture and finds similar code patterns to maintain consistency across different programming languages.

A Roblox MCP bridge that connects Codex and other MCP clients to a live Roblox client, enabling live inspection, control, and authorized reverse engineering.