"A server that scans projects for security vulnerabilities and recommends fixes" matching MCP servers:

Project management CLI + MCP server for AI agents. Register projects once, open them anywhere, sync to S3, auto-init git, and wire into the hasna ecosystem.

github-projects-mcp

MCP server that provides a 216-rule, framework-aware Kotlin/JVM security analyzer, enabling AI coding agents to query real security findings while writing code.

Enables interaction with MongoDB databases through CRUD operations, aggregation, and schema discovery, with automatic field validation and ObjectId conversion.

Enables AI assistants to manage GitHub Projects V2, including items, fields, and views through a standardized interface.

Enables AI assistants to scan project dependencies and Infrastructure as Code files for security vulnerabilities and misconfigurations. It also provides automated fixing capabilities to remediate identified security issues.

Audits npm package dependencies for security vulnerabilities, providing detailed reports and fix recommendations with MCP integration.

Enables AI agents to programmatically manage projects, work items, modules, cycles, labels, views, and other Plane workspace data on 8seneca's Plane deployment.

Enables users to interact with GitHub's Projects v2 API through natural language for Agile project management, supporting repository details, issue tracking, and project board management operations.

MCP server providing a searchable security knowledge base for AI coding assistants, enabling retrieval of secure-coding instructions and feature-specific security guidance.

Detect live website vulnerabilities and security flaws in GitHub repositories using automated DAST and SAST scanning. Safeguard applications by identifying exposed secrets, insecure dependencies, and common code patterns prone to exploitation. Receive structured fix plans with precise code remediation steps to resolve identified risks and improve security posture.

Provides an MCP server for scraping and retrieving data from GitHub Projects, including issues, pull requests, and organizational metadata. It enables natural language interaction with project boards and repository contents using GitHub Personal Access Tokens.

Enables authenticated MCP clients to query Security Context tools against a git tag or commit ref while returning only vulnerabilities and fix fingerprints that predate that snapshot, so agents do not receive live bugs at the tag.

Relays a result screenshot to Slack so you can review a coding agent's output without opening the app.

Security for the MCP servers you use: detects tool poisoning, rug pulls, shadowing, secrets and supply-chain risk (OWASP MCP Top 10), with runtime guards and approved-server policy. Runs locally.

Enables AI agents to interact with Google NotebookLM and Gemini API for document analysis, deep research, and notebook creation with enterprise-grade security including post-quantum encryption and 14 security layers.

Lets an MCP client triage a local project for leaked secrets, missing Supabase row-level security, unauthenticated data-changing API routes, insecure browser-exposed environment variables, and other common web-app security mistakes without network access. It returns severity-ordered findings or a plain-English go/no-go summary with what to fix first.

Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.

Enables coding agents to add a bounded semantic-judgment layer for routing, ranking, extraction, verification, and escalation, returning typed signals and review recommendations.

MCP server for the Codex Security Cloud service, enabling agents to list, inspect, close, reopen findings, request PRs, and apply generated patches.

Enables file operations, npm package management, and configuration checking through MCP.

This project builds a read-only MCP server. For full read, write, update, delete, and action capabilities and a simplified setup, check out our free CData MCP Server for Zoho Projects (beta): https://www.cdata.com/download/download.aspx?sku=PZZK-V&type=beta

Provides over 1,000 creative ways to decline requests across four categories (polite, humorous, professional, and creative). The MCP server wraps a REST API to help users craft professional rejections through natural language interactions.

A validation layer for AI coding assistants that enforces explicit LLM evaluations on plans, code diffs, and tests to ensure safer and higher-quality code.

A TypeScript MCP server with strict schema validation and security guards, currently implementing echo, get_time, hash_text, uuid_generate, and json_validate tools.

Enables Codex to consult Claude Code for a second opinion through a local stdio MCP server, exposing the ask_claude tool for text-only reviews and recommendations using existing Claude Code authentication. Codex can request findings and tradeoff analysis without allowing Claude to edit files or run commands.

A read-only MCP server that lets Claude read and search source code from local project folders, with path containment security.

Use Codex as a subagent inside Claude Code: async dispatch into a long-lived codex app-server, results pushed back into the Claude session automatically, steer/interrupt mid-task, and Codex's built-in code review.

Odds are, most of what you want to build is already open source. Tell your AI agent what you're making, and it finds it: which repos to use as they are, which to adapt, and what's left for you to write. Every repo it names is real, licensed for your use or flagged, and checked live.

Enables users to deterministically audit MCP servers for security issues across manifests, source, runtime responses, multi-call state, identity, and install scripts, and to run an inline gateway that gates tool calls and scans responses before returning them.