MCP servers for static-analysis

Laravel-aware static analysis for the debt AI coding agents leave behind. 24 rules, git-diff review, a Rector and Pint fix pass, Pest expectations, CI annotations, agent rulesets and an MCP server. De

Guide pédagogique non officiel en français sur REA (Reverse Engineer Anything) : analyser des applications et des binaires avec un agent de code via MCP et CLI, Hopper ou Ghidra, preuves à l'appui. In

Rust-native, multi-session headless IDA Pro MCP server with isolated workers and stdio or Streamable HTTP transports.

Local CLI that audits coding-agent configuration for security, instructions, context, and MCP — no API key or code upload by default.

零依赖的本地 APK/AAR/DEX 结构索引 + MCP Server。17 个工具，为 Xposed 模块开发提供静态反查。

MCP server that gives your AI coding agent a map of your polyglot codebase — reverse dependencies, gRPC tracing, event/topic flows, and doc search, without burning context. Single local Rust binary, n

Git PR diff semantic analyzer detecting breaking REST/GraphQL API schema mutations (Optic / Buf)

Whole-program callgraph reachability pruner locating dead functions & stale flags (Knip / Tsukuyomi)

Static AST dataflow tracer following untrusted sources to sensitive sinks (Semgrep / Snyk)

Automated test suite trace analyzer identifying timing races & state pollution (Datadog CI / Trunk)

Asynchronous control flow auditor identifying unawaited promises & race conditions (ESLint)

GenPark AI Agent Skill - AST-based semantic PR diff reviewer, change impact scoring, cognitive complexity delta, and automated refactoring suggestions.

GenPark AI Agent Skill - AST-based semantic PR diff reviewer, change impact scoring, cognitive complexity delta, and automated refactoring suggestions.

Git PR diff semantic analyzer detecting breaking REST/GraphQL API schema mutations (Optic / Buf)

Asynchronous control flow auditor identifying unawaited promises & race conditions (ESLint)

Whole-program callgraph reachability pruner locating dead functions & stale flags (Knip / Tsukuyomi)

Static AST dataflow tracer following untrusted sources to sensitive sinks (Semgrep / Snyk)

Automated test suite trace analyzer identifying timing races & state pollution (Datadog CI / Trunk)

Code-to-column change-impact knowledge graph for AI coding agents: the round trip from a screen to a database column and back, over MCP

Token-safe AST import re-aliasing and dependency migration engine safely replacing module paths and callsites without regex bugs.

Token-safe AST import re-aliasing and dependency migration engine safely replacing module paths and callsites without regex bugs.

AST-level static call-graph analyzer and dead code pruner identifying orphaned functions, unreachable methods, and token-bloat clusters.

Semantic versioning (SemVer 2.0) breaking change auditor inspecting AST public API surface diffs, parameter reordering, and removed exports.

AST McCabe cyclomatic complexity and cognitive nesting depth evaluator identifying refactoring hotspots and decomposition plans.

Monorepo dependency cycle resolver and topological build-order planner using Tarjan SCC and Kahn algorithms.

Adversarial security review for AI skills, repos, MCP servers, and packages before you install them. A read-only scanner plus a five-persona reasoning pass, ending in a GO / GO WITH MITIGATIONS / NO-G

Portal de arquitetura auto-hospedado + linguagem executável: catálogo verificado, landscape C4 com drill-in, governança (fitness functions e SLO por caminho crítico) e editor no browser. Binário Go ún

AI code review agent MCP server. Reviews code like a kernel maintainer: blunt, technical, no sugarcoating. Detects bugs + OWASP Top 10 security vulnerabilities. 4 harshness levels. Anti-RLHF.

Find and fix what the MCP 2026-07-28 spec revision breaks in your server. 21 rules, 5 autofixers, and a readiness board.

AI agents for pentesting, code audit, fuzzing, vulnerability discovery, and reverse engineering — harnesses, sandboxes, security MCP servers, benchmarks, and evals.

LayerMap MCP: a layered map of your codebase for coding agents: callers, callees and the impact of a change, for TypeScript, JavaScript, Go, Python and Java. MCP server, CLI, and plugins for Claude Co

Live sidebar, ER diagrams, CLI, and MCP server for Django models. VS Code + PyPI + MCP Registry + Glama. Zero-dep parser, no DB required.

Public distribution surface for jarvis — local-first code intelligence MCP server (SCIP navigation + Zoekt search). Installer, Claude Code / Codex / Cursor plugins, and prebuilt binaries.

Find which APIs of your pinned Python dependencies changed after your coding model's training cutoff, and give the agent short AGENTS.md / CLAUDE.md notes from a static API diff. No model calls, no AP

A deterministic code graph for codebases: every caller, route, page and table a change touches, with file:line evidence. CLI, MCP server and web view for AI agents and reviewers.

⚡ Autonomous reverse engineering engine & Model Context Protocol (MCP) server for binaries and applications in Systems Rust

Prevent cross-repo architectural breakage before merge. Architecture knowledge graph from static analysis, blast radius in CI, MCP server for AI agents.

Your app generates its own verified UI transition graph — screens as nodes, guarded (event, effect) edges. Proof-gated verification, trust tiers, model-free MCP for AI agents.

Free security & privacy scanner for AI-coded apps. 699 rules, 76 MCP tools, 13-layer defense, zero-trust sandbox, AI firewall. Runs locally, never sends data anywhere. Scan your AI-generated app for l

Scan MCP servers & AI-agent skills for malicious patterns (prompt injection in tool descriptions, credential exfil, download-and-execute). 17 patterns / 60 signatures, zero-dep. Measured over 196 publ

Deterministic AST Safety Guard, High-Throughput Compound Pipelines, Bidirectional Intent Synthesizer, Polyglot Graph & Zero-Dependency MCP Server in Pure Safe Rust.

Governance for agent instructions: audit, score, and pin MCP servers, Agent Skills, and prompts. Deterministic; findings carry a reference and a fix.

Evidence-first code intelligence for AI coding agents: verified claims with evidence, honest unknowns, a name check for Python and Java (invented APIs, Mixin targets), PDF/Office documents and screens

An MCP server that cuts coding-agent token usage by retrieving only the relevant JS/TS code using the TypeScript compiler and Jev.

Fast single-binary security scanner for MCP (Model Context Protocol) servers — config audit, live capability enumeration, tool-poisoning detection & risk grading. Zero deps, fully offline — trivy for