Repomix is a tool that packages codebases into an AI - friendly format, supporting local and remote repository handling, providing code compression, security checks, and multiple output formats.

Aderyn is an open - source Solidity smart contract static analysis tool written in Rust, which helps developers and security researchers discover vulnerabilities in Solidity code. It supports Foundry and Hardhat projects, can generate reports in multiple formats, and provides a VSCode extension.

JADX is a powerful decompilation tool for Android Dex and Apk files. It supports converting Dalvik bytecode into Java source code, decoding resource files, and restoring code obfuscation. It provides two operation modes: command-line and graphical interface, and is suitable for developers and security researchers.

Cycode CLI is a locally installed application used to scan code repositories for security vulnerabilities, including sensitive information leakage, Infrastructure as Code misconfigurations, Software Composition Analysis vulnerabilities, and Static Application Security Testing issues. This tool supports multiple scan types, such as repository scanning, path scanning, and commit history scanning, and provides an ignore rule function to exclude specific results.

The Semgrep MCP Server is a server based on the Model Context Protocol (MCP) for scanning code for security vulnerabilities through Semgrep, supporting multiple integration methods and tools.

This project implements functions similar to Claude Code through the MCP protocol, providing tools for code understanding, modification, and command execution. It supports multiple models and Jupyter notebook operations, and has security control and development expansion capabilities.

This is an MCP server project for GitHub Advanced Security (GHAS), used to call the security scanning functions of GitHub repositories through the MCP protocol, including dependency alerts, secret scanning alerts, and code scanning alerts. It supports authentication through GitHub CLI or a personal access token and provides an installation method for the VS Code extension.

MCP Servers is a project hosted on GitHub, which includes workflows such as automated testing, code coverage checking, and security scanning, and follows open - source licenses and community codes of conduct.

GhidraMCP is a Ghidra plugin that enables AI - assisted binary analysis through the Model Context Protocol (MCP), connecting reverse engineering with AI assistants and providing functions such as natural language interaction, in - depth code analysis, and security vulnerability detection.

This project provides code analysis and editing capabilities through the LSP protocol, supports MCP tool calls for TypeScript/JavaScript, includes functions such as file operations, symbol lookup, and error checking, and has security features such as path restrictions.

Sandbox MCP is a model context protocol server that allows LLMs to run code in secure Docker containers, solving the security problem of the inability to test code generated by AI.

Octocode MCP is an advanced AI code assistant that provides intelligent search and discovery functions across the GitHub and npm ecosystems. It helps developers quickly understand codebases, analyze project architectures, discover security patterns, and supports enterprise-level security and cross-platform use.

URL MCP is a tool for building MCP servers without writing or hosting code, mainly used for protocol and security experiments, supporting static text and dynamic HTTP responses.

MCP Fortress is a comprehensive security tool designed for Model Context Protocol (MCP) servers, offering automated vulnerability scanning, runtime protection, risk scoring, and threat detection functions, and supporting integration with AI assistants such as Claude Code through the MCP server mode for security analysis.

SecureAnnex MCP Server is a tool for analyzing the security of browser extensions, providing functions for querying, analyzing, and evaluating the security of extensions, including vulnerability detection, signature check, code review, etc.

MCP Server Semgrep is a server that complies with the Model Context Protocol standard, integrating the Semgrep static analysis tool with an AI assistant to provide code security analysis, quality improvement, and vulnerability detection functions. The project simplifies the architecture design, supports multi - platform operation, can be installed in multiple ways, and provides a rich set of code analysis functions.

An AI architecture analysis server based on the MCP protocol, providing intelligent architecture decision analysis and ADR management functions for AI assistants, supporting code analysis, security detection, and deployment verification.

The MCP Backup Server is an instant backup and recovery system designed specifically for AI agents and code editing tools, providing fast security points and context preservation functions.

A Ruby-based AI pair programming MCP server that provides AI-assisted programming functions such as code review, brainstorming, performance analysis, and security check through OpenRouter.

A service toolset based on the Model Context Protocol, providing functions such as encoding conversion, network diagnosis, system monitoring, security encryption, and QR code generation, and supporting LLM agents to call system tools.

AI code review and issue repair agent for analyzing codebases, detecting security vulnerabilities, reviewing code quality, and providing repair suggestions based on Sentry error logs.

FastApply MCP Server is an enterprise-level code intelligence platform that provides comprehensive code analysis, search, and refactoring capabilities through local AI models, AST semantic search, security scanning, and intelligent pattern recognition. It supports multi-language development and large codebase processing.

This is an MCP server that provides a standardized interface for the CodeQL N1ght tool, enabling AI assistants to automate the code analysis workflow, including environment installation, database creation, and security scanning.

The Authenticator App MCP Server is a secure MCP (Model Context Protocol) server that enables AI agents to interact with the Authenticator App, seamlessly obtain 2FA codes and passwords, help automate the login process, and maintain security.

Asterisk MCP Server is a middleware service that connects IDEs/code editors with Asterisk's security API through the Model Context Protocol (MCP) to provide real-time code security scanning, including code snippet detection, codebase analysis, and change verification.

An MCP server integrating the Vibe Coding method and knowledge graph technology, using the Kuzu graph database for AI-assisted software development, supporting multi-language code analysis and enterprise-level security performance.

Alibaba Cloud DMS MCP Server is an AI-driven unified data management gateway that supports connecting to more than 30 data sources, providing a one-stop solution for cross-source data secure access, and has core functions such as NL2SQL, code generation, data retrieval, and security auditing.

The Claude Project Coordinator is an MCP server for managing and coordinating multiple Xcode/Swift projects, providing project status tracking, code pattern search, and development knowledge base maintenance functions. It includes features such as security verification, project analysis, and automated technology detection.

A Java source code vulnerability auditing tool based on function-level taint analysis. It provides security analysis capabilities for AI assistants through the MCP protocol, supporting the detection of multiple vulnerability types and call chain tracing.

This project demonstrates a security vulnerability that enables remote code execution and data theft through MCP tool poisoning. It includes the implementation of a malicious server and an explanation of the attack principle, aiming for educational research.

UltimateCoder MCP is a locally prioritized automation server designed for developers and engineers, offering terminal command automation, file editing, and AI tool enhancement functions. It supports localized operations to ensure data security, and has advanced file processing, process control, and code search capabilities, suitable for large-scale code refactoring and automated workflows.

A comprehensive code repository security scanning tool that provides functions such as vulnerability detection, sensitive information scanning, and dependency auditing through the MCP server to help developers identify security issues in code repositories.

The GitHub MCP server provides AI-assisted tools such as code review, PR analysis, and security detection, and supports local and Docker deployment.

The Gemini CLI Orchestrator is a multi-step code analysis tool based on Google Gemini AI. It guides developers through a systematic analysis via a structured workflow rather than replacing human thinking. It offers four core functions: analysis planning, prompt optimization, iterative analysis, and result synthesis, and is suitable for complex scenarios such as security audits and performance optimization.

Argus is a multi - language code repository analysis and security assessment tool that supports code quality detection, security scanning, and Git operations.

A curated list of Model Context Protocol (MCP) servers in the DevOps field, covering categories such as infrastructure as code, container orchestration, CI/CD, monitoring and observability, security, and other practical tools.

This project is a CI/CD automation tool based on GitHub Actions, providing functions such as code testing, security scanning, and automatic publishing

A security analysis MCP server integrating OSV.dev and an AI model to detect code vulnerabilities and provide security suggestions.

A command-line tool for MXQL queries of WhaTap monitoring data, supporting security authentication, project management, complex queries, multi-format output, and integration with Claude Code

HooksMCP is a tool that provides MCP access rights to coding agents through a YAML configuration file. It supports functions such as code inspection, testing, and formatting, simplifies the development process, and enhances security.