"OWASP Dependency-Check" matching MCP servers:

Monitors and analyzes dependency health in Node.js projects, providing tools to check outdated packages, vulnerabilities, licenses, and suggest safe upgrades.

A Model Context Protocol server for automated security vulnerability assessment, combining OWASP Dependency-Check dependency scanning with custom code vulnerability detection, and generating detailed HTML and JSON reports.

Enables validation of commit messages, branch names, author info, push safety, and repository state using commit-check rules, accessible as MCP tools.

Enables structural framing analysis of documents, identifying perspectives, omissions, and reader positioning, with numerical claim verification against authoritative sources.

Enables MCP clients to inspect Minecraft Java Edition datapack files using the Spyglass language server, returning diagnostics for syntax, JSON schema, and references via MCP stdio.

Analyzes codebases to generate dependency graphs and architectural insights across multiple programming languages, helping developers understand code structure and validate against architectural rules.

Local-only GitHub Actions and CI maintenance scanner for AI-built apps. Exposes scan, explanation, and fix-planning tools to MCP clients; modifies nothing and makes no outbound requests by default.

Maps function and component dependencies in Haskell and ReScript codebases, providing LLMs with a real dependency graph for accurate test generation and change-impact analysis.

Zero-dependency MCP server for querying Chinese public holidays and makeup workdays (2025-2026), offering tools to check specific dates or list yearly schedules offline.

Security scanning for MCP servers from the inside out. Provides runtime inspection, AST-based static analysis, config audit, dependency analysis, and OWASP MCP Top 10 compliance in a single MCP server.

Compares a project's .env file against its .env.example template to surface missing, extra, and empty keys, flag empty required variables, and produce paste-safe key inventories for tickets or sharing. Runs entirely on local files with every value redacted, so secrets are never echoed or uploaded.

Enables managing internal documentation with search and add capabilities, and fetching official documentation from 13+ popular libraries via MCP tools.

Scans markdown vaults to detect contradictory claims (quantitative and negation) between notes with high concept overlap, and provides tools for analysis and reconciliation.

An MCP server that performs comprehensive health checks on project dependencies for JavaScript and Python projects, detecting outdated packages and fetching changelogs.

Enables scanning repositories for hardcoded service URLs and clients, and building service-to-service API dependency maps.

Enterprise-grade zero-dependency security shield and runtime governance engine for MCP servers, providing OWASP MCP Top 10 audits, cryptographic tool call signing, AIBOM generation, and inline parameter firewall protection.

Enables auditing npm, pip, and other package dependencies for known CVEs via the OSV database, with tools to scan manifests, query individual packages, and integrate into CI/CD workflows.

Enables deterministic dependency reasoning over declared graphs, allowing users and AI agents to validate acyclicity, resolve targets, identify runnable parallel layers, assess impact, and explain blockers.

Validate any shell command before execution. AI agents call Check to know if a command will work before running it: returns runnable or invalid. $0.04 AUD per check.

Automates remediation of Java library vulnerabilities by processing a security advisory Excel export, scoping to a Spring Boot Maven app, applying version upgrades to pom.xml, and verifying the build.