"Popular and Secure Servers with High User Ratings" matching MCP servers:

Verify-and-repair secure-coding harness that generates, hardens, audits, and scores Go code with a build and security scan feedback loop, and includes a transparent proxy to harden any client automatically.

Provides a secure, containerized Python sandbox for executing LLM-generated code with multi-layer isolation, along with JSON/CSV validation and workspace state snapshots.

Tells you how you and your Claude agent actually work together. Reads CLAUDE.md, hooks, skills, memory + scheduled tasks and writes you a letter. Local-only, no API keys, no data leaves your machine.

Enables AI-powered security scanning of codebases through conversational analysis, allowing users to assess, threat model, code review, DAST test, and generate security reports using natural language with Claude.

Local MCP server that scans code for security issues (secrets, dependencies, configurations, risky patterns) and integrates with GitHub Copilot in VS Code for automated pre-commit reviews.

Integrates local language models (like Qwen3-8B) with MCP clients, providing tools for chat, code analysis, text generation, translation, and content summarization using your own hardware.

Enables structured, iterative reasoning for complex problem-solving with features like confidence tracking, revision mechanisms, and branching support. Provides flexible validation and multiple output formats for systematic analysis and decision-making tasks.

locidx

Enables ChatGPT Pro web to securely read workspace files, git diffs, and test records through OAuth-protected read-only MCP tools, so it can plan and review while Codex handles execution without uploading the repository.

Enables AI agents to analyze and diff binaries by driving Ghidra headless or inside its GUI, exposing native reverse-engineering tools such as listing functions and segments, searching strings, decompiling, disassembling, and following cross-references. Ships with a devcontainer and supports local stdio or remote HTTP deployment.

Enables interactive GitHub pull-request review from Claude Code, with tools to fetch PRs, inspect files and repo structure, post review comments, and query a RAG index of the codebase.

Enables MCP clients to load eight on-demand coding skills and inspect project repositories through bounded, read-only map, search, read, diff, checks, and style tools. It keeps context lean by loading skill bodies only when needed and limiting repository scan and output sizes.

Provides code generation and completion capabilities using the DeepSeek API, with support for tool chaining and cost optimization.

A Model Context Protocol (MCP) server for analyzing browser extension security, providing tools for vulnerability detection, signature checking, code review, and security evaluation.

High-performance local MCP server and CLI written in Rust that scrubs 90%+ framework noise from AI debug logs with Tree-sitter AST validation and test rollback.

An MCP server that scans code for exposed secrets (API keys, tokens, private keys, high-entropy strings) with placeholder-aware allowlisting and fully redacted reports, enabling agents to detect leaks before committing.

Provides AI coding agents with reliable root-cause diagnosis and minimal, high-confidence fixes for failing tests.

Provides read-only structural analysis of codebases, surfacing architecture smells with traffic-light ratings and rendering dependency relationships as Mermaid flowcharts.

High-performance code understanding toolkit that enables batch reading of multiple files with dependency context, structural outline extraction with Java annotation awareness, and precise location of classes/methods across large codebases.

Provides AI assistants with secure, read-only access to ShadowGit repositories for debugging and code analysis. Enables powerful analysis of fine-grained git history captured automatically by ShadowGit's continuous commit tracking.