Skip to main content
Glama
61,266 servers. Last updated

Matching MCP tools:

Matching MCP Connectors:

"CodeQL for Code Auditing" matching MCP servers:

  • A
    license
    -
    quality
    D
    maintenance
    Wraps the CodeQL Language Server Protocol to enable LLM agents to write CodeQL queries with intelligent code completion, hover information, and other language features.
    Last updated
    8
    MIT
  • F
    license
    -
    quality
    B
    maintenance
    Enables AI-assisted development of CodeQL queries for security analysis through the Model Context Protocol. Provides tools for compiling, testing, and executing CodeQL queries across multiple programming languages.
    Last updated
    28
  • A
    license
    A
    quality
    A
    maintenance
    PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server. Every finding maps to a specific PCI DSS requirement ID. Taint-aware cardholder data flow analysis with PCI SSC FAQ semantics, designed to complement broad SAST tools like Semgrep and CodeQL - not replace them.
    Last updated
    15
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Deterministic AI safety policy engine with Z3 formal verification. Write, verify, simulate, and enforce machine-verifiable safety constraints for AI agents. Completely outside the LLM.
    Last updated
    6
    15
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    AI-powered security code review for Claude Code that runs multiple scanners (CodeQL, Semgrep, etc.) to detect vulnerabilities, secrets, and dependency CVEs, producing prioritized reports.
    Last updated
    2
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Server security auditing (413 checks, 29 categories), production hardening, and fleet management. Supports Hetzner, DigitalOcean, Vultr, and Linode.
    Last updated
    17
    128
    56
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Lightweight Node.js dependency vulnerability audit tool with CLI and MCP Server modes. Supports npm/pnpm, full dependency chain tracing, remote GitHub repo auditing, and generates Markdown/HTML reports.
    Last updated
    1
    23
    1
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    An MCP server that exposes a 216-rule Kotlin/JVM security analyzer to AI coding agents, enabling real-time security scanning and secure pattern retrieval for frameworks like Spring and Ktor.
    Last updated
    3
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Provides AI assistants with specialized tools to interact with NIST's Open Security Controls Assessment Language (OSCAL) framework. It enables agents to retrieve schemas, explore models, and generate valid OSCAL documentation for security compliance automation.
    Last updated
    40
    48
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to securely access and search enterprise WeChat (WeCom) chat records with full decryption and auditing, supporting message retrieval, decryption, local storage, and querying via MCP tools.
    Last updated
    9
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    CodeSafer is an MCP server that scans AI-generated code for 9 categories of hidden security threats — including invisible Unicode, Trojan Source, homoglyphs, and rules file backdoors — using static analysis plus CodeBERT deep learning. Runs locally, free tier available.
    Last updated
    6
    62
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    A security filter that blocks dangerous code patterns by comparing normalized structural syntax trees against a blacklist of known threats using vector embeddings. It acts as a gatekeeper to prevent malicious code execution by identifying dangerous structures regardless of specific identifiers or literals.
    Last updated
    11
    MIT