"CodeQL static analysis tool and semantic code analysis platform" matching MCP tools:

• get_static_code_flowC

  project-code-intelligenceB

  Retrieve ordered SARIF or CodeQL code-flow steps for a static-analysis finding to understand data flow paths.

  MIT

• rush_codeqlC

  rushC

  Import CodeQL SARIF reports or run CodeQL analysis with build enabled to identify security vulnerabilities and code defects in your codebase.

  MIT

• github_code_scanning_get_variant_analysis_repo_taskC

  github-mcpC

  Retrieve the analysis status of a repository in a CodeQL variant analysis to monitor code scanning progress and results.

  -

• github_code_scanning_create_variant_analysisC

  github-mcpC

  Initiate a CodeQL variant analysis on a GitHub repository to detect code vulnerabilities.

  -

• delimit_design_validate_responsiveA

  delimitA

  Validate responsive design patterns with static CSS analysis and optional Playwright testing to flag missing media queries, fixed widths, or non-mobile-first patterns for CI checks.

  MIT

• analyze_codeA

  Tokenectomy-RazorA

  Detect resource leaks, security vulnerabilities, and logic flaws in Python code via static AST analysis. Use before committing or running to catch defects without executing code.

  MIT

• xlide_analyzeA

  xlide-excel-word-powerpoint-access-office-vba-mcpA

  Run static analysis on every VBA module in an Office file to return problems with module, line, column, code, and message. No Office installation required.

  MIT

• apk_teardown_submitA

  Crawlora MCPC

  Submit an APK for static teardown analysis: upload a file or provide an HTTPS URL to enqueue a Tier 1 job covering manifest, permissions, signing, and SDK detection.

  MIT

• seo_audit_performanceA

  SEO, AEO, GEO & Digital Marketing Audit + Safe Fix MCP ServerA

  Detects code-level Core Web Vitals risks: CLS from missing image dimensions, LCP from unoptimized formats, and render-blocking scripts. Static analysis only—no live benchmarks or file changes.

  MIT

• get_asset_flow_analysis_planA

  Threat Modeling MCP ServerB

  Generate a structured asset flow analysis plan to uncover security risks, using AI analysis and AWS documentation validation.

  Apache 2.0

• get_phase_7_5_guidanceA

  Threat Modeling MCP ServerB

  Find structured guidance for Phase 7.5 code validation analysis, including objectives, recommended steps, tools, and expected outputs to support threat modeling activities.

  Apache 2.0

• analyze_complexityA

  codecalcA

  Estimate asymptotic Big-O time complexity of a code snippet through structural analysis. Identify performance scaling without running the code.

  Apache 2.0

• code-fundi-researchA

  Code-Fundi MCP ServerA

  Search repositories and receive AI-synthesized analysis of code. Streams intelligent summaries to explain matching files and deliver code context.

  MIT

• code-fundi-file-docsA

  Code-Fundi MCP ServerA

  Generate AI documentation for any file in an indexed repository, including summaries, functions, dependencies, and code analysis. Understand file purpose and behavior.

  MIT

• pine_analyzeA

  TVControlB

  Run static analysis on Pine Script code to catch array out-of-bounds, unguarded array.first()/last(), bad loop bounds, and implicit bool casts without compiling. Works offline.

  MIT

• analyze_code_scanningA

  projectpulse-mcpA

  Identify static code vulnerabilities by fetching or triggering CodeQL scan alerts for a GitHub repository, including severity and rule details.

  MIT

• analyze_captureA

  nsight-graphics-mcpA

  Extract a bounded static analysis from Nsight captures: stream shape, top calls, thread distribution, resource population, compatibility/security findings, and known limitations.

  MIT

• turingmind_index_codebaseA

  TuringMind MCP ServerA

  Parses codebases with AST to extract functions, classes, and files, enabling relationship-aware code review and impact analysis.

  MIT

• run_detectorsA

  Slither MCP ServerA

  Run static analysis detectors on Solidity smart contracts to identify vulnerabilities, code quality issues, and informational findings. Filter results by detector names, impact, confidence, or exclude paths.

  AGPL 3.0

• get_architecture_analysis_planC

  Threat Modeling MCP ServerB

  Generate a comprehensive architecture analysis plan for security concerns, using AI-powered analysis with AWS documentation validation.

  Apache 2.0

• vectr_ingest_tracesA

  VectrA

  Import runtime trace events to enrich static call analysis, revealing dynamic dispatch patterns such as decorators and monkey-patching that static analysis cannot see.

  MIT