"CyberChef MCP server by noorneitzen, a pentesting tool" matching MCP servers:

A tool discovery MCP server that integrates with Azure DevOps wikis and code-graph-rag to match natural language goals to tools, enabling tool composition and proxy testing.

A validation layer for AI coding assistants that enforces explicit LLM evaluations on plans, code diffs, and tests to ensure safer and higher-quality code.

Enables AI assistants to leverage Qwen's code analysis capabilities with large context windows, supporting file/directory analysis, sandbox execution, and multiple approval modes for safe code operations.

Integrates the Atlassian Rovo Dev CLI with the Model Context Protocol, allowing AI assistants to perform deep code analysis using Rovo Dev's large context capabilities. It enables features like repository-wide queries, file-specific analysis, and specialized coding modes through a standard MCP interface.

CodeGuard MCP is a real-time AI code security scanning tool used to detect vulnerabilities, keys, and compliance issues in AI-generated code, and is suitable for code security reviews in development environments

Enables binary comparison capabilities by leveraging IDA Pro and BinDiff to analyze similarities and differences between files. Users can perform automated function analysis to identify changed functions and compare original binaries against patched versions.

Codebase Q&A agent with git-history awareness. Explore a repo with list_files, read_file, and search, plus git log, blame, and diff and a repo map to answer "why did this change?" questions. Runs locally as an MCP server for Claude Code and other MCP clients.

Enables autonomous agents to automatically repair and guard tool-call schemas through deterministic AST analysis and parameter projection validation, ensuring reliable, schema-compliant interactions in MCP-compatible environments.

Enables AI assistants to import binaries into Ghidra, trigger analysis, browse functions, symbols, strings, and imports, and read decompiled C code and disassembly via MCP tools.

Integrates GitHub Copilot CLI with MCP clients to offer various coding assistance tools including asking questions, explaining code, suggesting commands, debugging, refactoring, generating tests, and reviewing code.

Zero-dependency MCP server inspector for protocol conformance, tool annotations, and capability checks.

Enables LLMs to analyze Python repositories structurally via AST and call graphs, providing code search, symbol lookup, change-impact analysis, workflow tracing, and explanation without embeddings.

MCP server for AI-assisted development on the Lampa open-source TV app, providing read-only access to the source tree with 41 tools and 5 resources for structured analysis, planning, editing, and validation.

Enables local SOC 2 compliance work by scanning Infrastructure-as-Code, mapping findings to SOC 2 Trust Services Criteria, explaining risks in plain English, and drafting audit-ready documents without uploading files.

MCP server that exposes SQLFluff's linting, fixing, and parsing capabilities, enabling MCP-aware clients to lint and fix SQL directly.

Exposes Semgrep as deterministic, rule-matching analysis tools over MCP so a code-review agent can scan only the lines changed in a diff, scan whole files on demand, and check analyzer availability, version, ruleset, and limits. Results are returned as compact per-finding lines with source snippets suitable as comment anchors, along with counts of suppressed out-of-diff matches.

Read-only MCP server for self-hosted SonarQube Community Build 26.4+: lets AI agents (Claude Code, Cursor, Copilot) read issues, security hotspots, rules and code snippets to fix findings locally

The only MCP that returns license + supply-chain risk + popularity + price in a single call. 78,094 curated Git assets. Zero config. MIT. Free forever.

Gives AI agents instant access to software architecture, dependencies, and impact analysis through pre-computed sgraph models, replacing dozens of grep/read cycles with a single tool call.

Audits local package folders to generate publish-readiness reports and previews of NPM tarball contents. It helps developers identify and resolve configuration issues like missing types or broken exports before releasing code.