"Finding businesses on Google that need a website" matching MCP servers:

A validation layer for AI coding assistants that enforces explicit LLM evaluations on plans, code diffs, and tests to ensure safer and higher-quality code.

Codebase Q&A agent with git-history awareness. Explore a repo with list_files, read_file, and search, plus git log, blame, and diff and a repo map to answer "why did this change?" questions. Runs locally as an MCP server for Claude Code and other MCP clients.

A lean, local knowledge graph that joins a repo's code to its aSPARK delivery artifacts, enabling agents to trace user stories to code and assess impact of changes, served over MCP.

Enables executing arbitrary Joern/CPGQL queries against a loaded Code Property Graph, loading source code in multiple languages (PHP, Java, JavaScript, Python, C/C++) to build new CPGs, and inspecting loaded projects and the active workspace. It communicates with a running Joern server over its synchronous HTTP query endpoint, so no state polling is required.

Zero-dependency MCP server inspector for protocol conformance, tool annotations, and capability checks.

Autonomous AppSec & DAST code and website security scanner across 12 security domains (260+ controls) with 3-Layer Triage.

An MCP server that scans local codebases for quantum-vulnerable cryptography (secp256k1, Ed25519, RSA, etc.) and CI signing commands, classifying each finding as quantum-broken, post-quantum, or neither. It runs entirely locally with no network calls, providing a deterministic inventory for AI agents.

PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server. Every finding maps to a specific PCI DSS requirement ID. Taint-aware cardholder data flow analysis with PCI SSC FAQ semantics, designed to complement broad SAST tools like Semgrep and CodeQL - not replace them.

SkillTotal is a local stdio MCP server that lets an agent check a component before installing it. It statically analyzes MCP servers, agent skills, npm/PyPI packages and repos for supply-chain risks, dangerous capabilities (shell, filesystem, network, credentials), prompt-injection surfaces like tool poisoning, and exfiltration paths. Each finding cites file, line and snippet.

Local stdio MCP server (npx -y caveat-lang mcp) with five tools that validate, check, test and explain programs in Caveat, a rules language whose decisions keep their evidence, grounds and caveats. It also finds what depends on a piece of evidence, so a withdrawn input still leaves a past decision's original basis on record.

Allows Claude Code to request an independent code review from Google Antigravity (Gemini, Claude, or GPT-OSS) via the Antigravity CLI, providing a second opinion on plans or diffs.

Vet ClawHub skills before installing them; detects prompt-injection, exfiltration, and other security issues, outputting a risk score with per-finding evidence.

Detects breaking changes in a TypeScript library's public API and recommends the semver bump, comparing two npm releases, git refs or a working tree. Each finding is graded proven or review-only.

Enables blazingly fast file and content searching in large codebases using ripgrep, with intelligent filtering, fuzzy finding, and directory tree visualization while respecting .gitignore and avoiding common bloat directories.

Exposes Semgrep as deterministic, rule-matching analysis tools over MCP so a code-review agent can scan only the lines changed in a diff, scan whole files on demand, and check analyzer availability, version, ruleset, and limits. Results are returned as compact per-finding lines with source snippets suitable as comment anchors, along with counts of suppressed out-of-diff matches.

Connects MCP clients to pre-submission review that argues against a draft bug-bounty report or smart-contract finding the way a triager would, tying every claim to a supplied file and line and returning a submit, rewrite-then-submit, prove-first, hold-duplicate or drop verdict. Exposes tools to list review profiles, prepare reviews for the agent's own model, build hash-verified review packets, and — with a connection token — run hosted profiles on your own provider key.

Python capability compiler with scientific experiment tracking. Its local stdio MCP server provides six read-only tools for static discovery, readiness, exposure planning and experiment history/comparison under operator grants. Three optional delivery tools need separate enablement and permissions. Generated REST/MCP services execute selected functions separately.

Gives an AI agent complete knowledge of a specific DevExpress XAF application: its entities, controllers, actions, business rules, Model Editor customizations, custom property editors and the version-gated data migrations that ran once on a production database. Reads the source with Roslyn without compiling it, so it works on a branch that does not build and needs no DevExpress licence.

Enables coding agents to get a compact, token-budgeted map of any repository in one call, including file tree, language stats, entry points, and key symbols, so they read only what they need.

A local AST and type-aware Go repository context indexer that uses CHA to map symbols, call graphs, dependencies, and architecture patterns. Built for AI coding agents that need to navigate and reason about large Go codebases without reading raw files.

Query only the data you need from your JSON file and keep your context clean

Enables any general-purpose agent to mod IL2CPP, Mono (.NET), and Unreal games by resolving hook targets from engine metadata rather than memory guessing. Provides 45 tools covering the full workflow of finding a game, indexing types/fields/methods, injecting a Frida probe, hooking methods, and reading or writing game memory.

The js hook toolkit that all you need

locidx

Enables users to scan a website, project folder or HTML file for generic AI-generated copy, template design and unfinished details, scoring each finding with file-and-line evidence and a per-page breakdown. It turns the results into phased, step-by-step repair plans that Claude, Cursor and other AI tools can apply, then re-measures the score after each change.

A Model Context Protocol (MCP) server that helps AI coding assistants identify critical design issues in code, rather than just focusing on cosmetic problems when asked to improve code.

Enables AI coding assistants to perform local semantic code search using AST parsing and embeddings, finding code by meaning with exact file and line locations, plus AST-based usage lookup.

Enables evaluating evidence against independent predicate, choice, and score questions across text, project files, images, and PDF pages, and finding relevant code ranges without returning file contents.

An MCP server that connects Gemini 2.5 Pro to Claude Code, enabling users to generate detailed implementation plans based on their codebase and receive feedback on code changes.

Indexes a workspace and exposes code-navigation tools to Codex, enabling symbol lookup, reference finding, dependency analysis, and security audit for local codebases.