Retrieve ordered SARIF or CodeQL code-flow steps for a static-analysis finding to understand data flow paths.
MIT
343,068 tools. Last updated 2026-07-30 12:16
"CodeQL static analysis tool and semantic code analysis platform" matching MCP tools:
- Retrieve the analysis status of a repository in a CodeQL variant analysis to monitor code scanning progress and results.
- Initiate a CodeQL variant analysis on a GitHub repository to detect code vulnerabilities.
- Scores MCP tool docstrings against six quality dimensions to catch low-quality descriptions before publishing. Use as a CI gate for static analysis of Python files with @mcp.tool() decorators.MIT
- Retrieve available assistive-technology profiles, each modeling a specific screen reader and platform with navigation cost weights. Use the returned profile IDs to configure analysis tools.Apache 2.0
- Check the planned status of a future deep-dive workflow. This tool is reserved and currently performs no analysis.MIT
Matching MCP Servers
- Alicense-qualityDmaintenanceAn MCP server that provides six code review tools for use with Claude Code or any MCP client. Each tool reads a file from disk, pairs its contents with a structured review prompt, and returns the bundle for the LLM to evaluate.Last updatedMIT
- FlicenseAqualityDmaintenanceThe server facilitates natural language interactions for exploring and understanding codebases, providing insights into data models and system architecture using a cost-effective, simple setup with support for existing Claude Pro subscriptions.Last updated427
Matching MCP Connectors
MCP server for SEO and web analysis data including keyword rankings, backlink profiles, site audits, and traffic analytics for AI agents.
Options analytics: 17 pricing models, 17 Greeks, GEX, IV, 23 screeners, unusual, dark pool, max pain
- Scan Solidity smart contracts for security vulnerabilities using Slither static analysis. Returns validated findings with severity, description, and code snippets.MIT
- Execute configured quality gates (PHPStan, Rector, ECS) before committing to validate static-analysis and style compliance. Returns structured per-tool results.MIT
- Parses codebases with AST to extract functions, classes, and files, enabling relationship-aware code review and impact analysis.MIT
- Run static analysis detectors on Solidity smart contracts to identify vulnerabilities, code quality issues, and informational findings. Filter results by detector names, impact, confidence, or exclude paths.AGPL 3.0
- Retrieve a full AI analysis of an exploit by its platform ID to verify safety before code review. Includes classification, attack type, complexity, and deception indicators.MIT
- Compile Compact contract code to validate syntax and semantics using a hosted compiler. Returns compiler errors or falls back to static analysis for reliability.MIT
- Execute Python code with automatic retry and intelligent error analysis. On failure, it diagnoses the error, searches past solutions, and suggests fixes for robust execution.MIT
- Validate DazScript code for anti-patterns that cause crashes or timeouts, providing static analysis errors and suggestions before execution.MIT
- Validate Java syntax quickly for a file or inline code. Returns syntax errors without semantic analysis for speed.MIT
- Validate PLC project edits by running syntax and semantic analysis without generating code. Faster than a build, it confirms correctness after changes.MIT
- Analyze contract structure and security patterns through static analysis. Provides structural insights and recommendations without compiling the code.MIT
- Compare Figma design tokens with code tokens to detect matches, missing tokens, and value divergences for design-code gap analysis.MIT
- Generate a read-only code-analysis checklist for a specified target, depth, focus, and tech stack. Use this methodology to guide analysis without inspecting code or storing results.MIT
- Solves complex problems by searching the web, analyzing URLs, and executing Python code for data analysis and research.MIT