"A service for finding coding review resources and best practices" matching MCP servers:

A Model Context Protocol (MCP) server for producing better Terraform through CLI analysis (tflint, checkov, trivy, kics, infracost), best-practice guidance from terraform-best-practices.com, cloud provider recommendations (Azure, AWS, GCP), and Terraform Registry resource and module guidance.

MCP server enabling Claude Code to capture screenshots of Windows applications through WSL2, allowing AI to diagnose UI errors and verify layouts.

Enables AI agents to call tools through a security gateway that intercepts requests, enforces deterministic policy and risk checks, blocks or escalates high-risk actions for human approval, and keeps tool credentials and audit logs protected.

A reusable MCP HTTP server with OAuth 2.1 that turns any JSON-RPC handler into a production-ready endpoint with dynamic client registration, PKCE, refresh tokens, and OpenAPI docs.

Enables enterprise-managed authorization for MCP on Azure App Service, with deployable Entra OAuth and a local EMA ID-JAG lab exposing whoami and authorization_model tools.

Enables AI agents to request an independent second opinion from a different frontier model, with PII scrubbing before transit, live web search grounding, caching, and multi-provider failover.

Enables agents to read, create, and modify invitations for calendar events through a deny-by-default broker that validates OAuth bearer tokens and intersects server-owned per-subject, per-calendar grants with token scopes. Access is limited to a narrow, data-minimized calendar surface with idempotent writes and fail-closed authorization, rather than arbitrary service or network execution.

This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions.

Enables AI agents to inspect any public domain’s web technology stack, email deliverability and DNS health (MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI), and HTTPS security posture with typed JSON scores and remediation-ready findings, plus history, bulk checks, monitoring alerts, and reverse technology lookups.

Enables automated pull request review, security vulnerability analysis, and code quality improvement suggestions through any MCP client.

Enables MCP clients to run local scans for known AI coding-assistant backdoor indicators and risky Claude Code/MCP configuration patterns, returning findings directly in chat.

A stateless remote MCP server that lets AI agents anonymously submit encrypted reports of alignment and safety failures to leaks.md (what others did) and confession.md (what the agent itself did), returning a receipt without accounts or keys. It exposes public tools such as submit_leak and submit_confession over Streamable HTTP.

Panel Review is the guardian agent for AI's highest-stakes coding decisions. Before an agent's riskiest designs, diffs, or commits ship, four frontier models, from OpenAI, Anthropic, Google, and xAI, argue them through and return severity-tagged findings, with review gates the agent cannot silently skip.

Enables AI agents to securely access authenticated services (HTTP, SSH, SMTP) without exposing secrets, by acting as a server-side proxy that injects authentication.

Comprehensive MCP server for analyzing GitHub pull requests, detecting security vulnerabilities, assessing code quality, and providing risk ratings across multiple languages.

Enables AI agents to manage VPN infrastructure through provisioning, lifecycle control, traffic routing, and health monitoring.

Two-way Burp Suite MCP bridge enabling AI agents to capture traffic, analyze endpoints, queue scans, and send findings back to Burp.

Provides AI assistants with specialized tools to interact with NIST's Open Security Controls Assessment Language (OSCAL) framework. It enables agents to retrieve schemas, explore models, and generate valid OSCAL documentation for security compliance automation.

A client-side MCP proxy that injects OAuth 2.0 bearer tokens or API keys into MCP requests, enabling MCP clients to connect to OAuth/API-key-protected MCP servers like Amazon Bedrock AgentCore Gateway. It automatically fetches and refreshes credentials using AgentCore Identity or static values.

A hardened MCP server that enforces authentication via Easy Auth and OAuth, manages secrets with Key Vault, and restricts network access using VNet integration and API Management, enabling secure tool invocations through a fully private infrastructure.

Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.

Enables auditing product review streams for review-velocity clustering, sentiment dissonance, repetitive incentivized phrases, and review hijacking. Produces adjusted authentic ratings and authenticity indexes for e-commerce products.

An MCP server that enables interaction with Xero's Identity Service API, providing OAuth 2 authentication and identity management capabilities through natural language commands.

Compare service-grant changes, tool alias origins, and saved MCP tool definitions with Gooo rules. Reports preserve incomplete-capture uncertainty and source bindings. No grants are applied and no compared tools are invoked.

Enables comprehensive security vulnerability scanning and code quality analysis for Python applications. Provides detailed reports with scoring, actionable suggestions, and comparison tracking specifically designed for backend developers working with frameworks like Django, Flask, and FastAPI.

Manage a fleet of OPNsense firewalls from an AI agent, inside guardrails it can't drive around. MCP server for central management of OPNsense firewall fleets. 129 tools across devices, config sync, tasks, schedules, templates, backups and remote consoles - destructive actions confirmation-gated, MCP-issued tokens lifetime-bounded, backup and storage secrets excluded from the toolset entirely.

Provides agent certification and trust verification tools for AI agents, enabling certification checks, trust score calculations, audit ticket issuance, and emergency kill switch activation through the A-SOC trust network.

Enables secure one-time encrypted file and note sharing by encrypting data locally before upload and providing tools for sending, listing, checking, and revoking links.

Enables a sandboxed Claude Code session to see editor selections, review proposed edits as VS Code diffs, and read workspace diagnostics through an MCP-over-WebSocket IDE bridge.

Enables AI agents to securely reach enterprise tools and other agents through a governed gateway with pinned tool definitions, delegated authorization, content inspection, human approval, and signed audit trails.