"Code Execution" matching MCP servers:

A security filter that blocks dangerous code patterns by comparing normalized structural syntax trees against a blacklist of known threats using vector embeddings. It acts as a gatekeeper to prevent malicious code execution by identifying dangerous structures regardless of specific identifiers or literals.

Security analysis for Python codebases through the guard-core engine: SecurityConfig validation that catches keys pydantic silently drops, docs search over the vendored corpus, live detection probing, and verified setup guidance for Python, Typescript, Rust, PHP and Go adapters.

Biometric authorization for AI agent actions via Face ID on iPhone, enabling secure approval of sensitive actions and credential-safe API calls through vault execution.

A tool for detecting and cleaning Java memory shells via local or SSH remote execution. It enables AI agents to scan Java processes, analyze suspicious class code, and safely remove memory shells after user confirmation.

Provides a human-approval tool for MCP-compatible agents, pausing execution until a human approves or edits the action, with every decision logged.

Runtime policy enforcement for AI agents. Evaluate every agent action against your organization's policies before execution, with observe and enforce modes.

An MCP server that enforces plain-English rules on AI agent tool calls, deterministically blocking forbidden actions before execution via a Claude Code hook and a check_action tool.

Enables Claude Desktop and Claude Code to inspect a Postgres schema and run read-only SQL queries against a demo database through the tools describe_schema and query_readonly. Every proposed query passes the same deterministic guardrails — SELECT-only, allow-listed tables, enforced row limits, statement timeouts and a read-only role — before execution.

Provides real-time security risk assessment for AI coding prompts, analyzing potential dangers, blast radius, and complexity before code execution in Cursor.

Checks a code repository without running it: Safe, Works and Complete scores with an A-F grade, catching leaked keys, dangerous calls, invented or lookalike packages, broken imports and missing project files. Standard-library Python; MCP tools scan, orphans and explain.

Enables AI to read and analyze repository incident scan results, including file diffs and summaries, to help investigate suspicious changes. It is read-only and does not execute code or send data externally.

Governor is an MCP server that acts as a safety belt for AI agent payments, providing a three-layer deterministic evaluation (rules, behavior anomaly, and intention coherence) to approve, escalate, or block payments before execution, and integrates directly with Claude Code.

Security gate that scans MCP servers and Claude Code Skills for vulnerabilities before execution.

MCP server for angr — symbolic execution + CFG + reaching-definitions.

Strict AI code reviewer powered by Groq. Finds bugs, vulnerabilities and security issues in your code. Supports analyze, compare versions, explain code, generate tests, and HTML reports.

Indexes a workspace and exposes code-navigation tools to Codex, enabling symbol lookup, reference finding, dependency analysis, and security audit for local codebases.

Enables safe GitHub automation by queuing write operations for admin approval before execution.

Experimental Python MCP server exposing traceguard_shield_exec to evaluate proposed tool calls through an authorization hook. Returns approval or rejection messages over stdio; it does not execute the requested tools.

Enables agents to validate, explain, and gate SQL statements against a supplied schema before execution, returning safe/review/blocked verdicts, issue codes, and fix suggestions. It acts as a pre-execution go/no-go guard and composes with database access servers.

CodeSafer is an MCP server that scans AI-generated code for 9 categories of hidden security threats — including invisible Unicode, Trojan Source, homoglyphs, and rules file backdoors — using static analysis plus CodeBERT deep learning. Runs locally, free tier available.

Local privacy testing for AI agents. Scan code for PII and secrets, analyze execution traces across internal channels, and redact sensitive text through MCP tools.

Enables role-based interaction with iGrid-Prometheus APIs, including domain listing, AI agent execution, action proposal, and CSV ingest/export, supporting Read, Write, and Admin permission levels.

Enables AI agent tool calls to be intercepted and judged before execution, allowing, asking a human, or blocking based on calibrated risk and policy.

MCP server for the Codex Security Cloud service, enabling agents to list, inspect, close, reopen findings, request PRs, and apply generated patches.

An MCP server that provides passive and low-impact active reconnaissance tools for authorized bug bounty and security assessments, enabling LLMs to perform structured recon and generate reports.

Governed agent execution gateway for LLM workflows, providing deterministic FSM-based execution, audit trails, and idempotency guarantees via MCP.

Enables MCP clients to resolve, inspect, and verify verifiable VAGP authority for registered agents, including issuing execution permits only when authority is confirmed.

Enables agents to inspect a user's pre-approved Codex command execution rules before acting, reading global and project-scope *.rules files with their paths and scopes. It exposes allow, prompt, and forbidden decisions read-only without deduplicating or interpreting them.

Provides comprehensive management of Microsoft 365 services including Exchange, SharePoint, Teams, Azure AD, Intune device management, security & compliance frameworks, and universal access to 1000+ Microsoft Graph API endpoints with advanced features like batch operations, delta queries, and real-time webhooks.

Provides secure access to Kali Linux security tools through containerized execution, enabling network scanning, web application testing, and security assessments.