Scans codebases for security vulnerabilities including OWASP Top 10, ISO/IEC 27001, secrets, privacy compliance, and dependency issues.
MIT
306,652 tools. Last updated 2026-07-25 19:02
"OWASP Dependency-Check" matching MCP tools:
- Sanitize and validate incoming API payloads against OWASP security rules while dynamically activating industry compliance profiles.MIT
- Verify server health by returning server and dependency versions. Use as first call to confirm server is running and version compatible.MIT
- Analyzes Electron source code to detect dangerous patterns like shell.openExternal with user input, disabled webSecurity, and other OWASP-style vulnerabilities specific to Electron.MIT
- Retrieve the dependency graph for an intent to see what it depends on, enables, or blocks.MIT
- Check Composer and npm dependency status to identify outdated or missing packages.MIT
Matching MCP Servers
- Alicense-qualityCmaintenanceEnables querying projects, fetching findings, triggering analysis, uploading CycloneDX BOMs, and checking async token status for OWASP Dependency-Track.Last updated251MIT
commit-check-mcpofficial
AlicenseAqualityBmaintenanceEnables validation of commit messages, branch names, author info, push safety, and repository state using commit-check rules, accessible as MCP tools.Last updated8MIT
Matching MCP Connectors
OWASP MCP — keyless.
DependencyOracle - 10 ICT dependency tools: SBOM, supply chain, third-party graph.
- Retrieve details of a tracked dependency using its unique ID.MIT
- Extract documentation and public API for a project's dependency to understand its exact version and functionality.MIT
- Remove a service dependency from tracking to stop monitoring its relationship with other services.MIT
- Validates proposed payloads against OWASP security rules and compliance profiles to detect and block malicious input.MIT
- Scan project files for OWASP Top-10 security vulnerabilities using pattern matching. Returns findings with severity, CWE, and file location.MIT
- Retrieve detailed information about a service by its ID, including dependency tree, health status, SLA metrics, and alert configuration.AGPL 3.0
- Monitor the Run402 service health by retrieving per-dependency check results from the public health endpoint.MIT
- Remove a blocking dependency between two ClickUp tasks to unblock progress. Specify the dependency direction (depends_on or dependency_of) matching creation.Apache 2.0
- Check the liveness of the Run402 service, returning per-dependency health results.MIT
- Scan MCP servers from registry or repository URL to detect vulnerabilities including tool poisoning, command injection, and data exfiltration. Maps results to OWASP Agentic and MCP Top 10.Apache 2.0
- Check credential vault status and loaded profiles to verify optional dependency availability without exposing secrets.MIT
- Generate a security findings report by aggregating taint analysis results and mapping them to a compliance framework such as OWASP, CWE, PCI DSS, or STIG.MIT
- Removes a task dependency using its dependency ID. Retrieve the ID by listing dependencies first.ISC
- Search across indexed offline security knowledge bases from HackTricks, OWASP, and more. Retrieve ranked matches with source and snippet to ground answers in real documentation.MIT