# Security Scanning

The ZeroPath MCP Server is an open-source project that allows developers to query security findings such as SAST issues, secrets, and patches using natural language, and directly integrate them into AI-assisted tools. It simplifies the process of handling security issues, providing security context directly in the development environment without the need for manual dashboard or ticket management.

An AI-based NPM package analysis MCP server that provides intelligent functions such as security scanning and dependency analysis

An MCP server integrating Trivy security scanning capabilities, providing project vulnerability scanning and automatic fix capabilities through a standardized interface.

The OWASP ZAP MCP server is a protocol server that integrates the Zed Attack Proxy security scanning tool with an AI assistant. It supports multiple scan types and containerized deployment, enabling shift-left security testing in development.

VulniCheck is an AI - driven security scanner that provides comprehensive security analysis for Python projects and GitHub repositories. It runs as a Docker - based HTTP MCP server, supports standard HTTP streaming, and offers containerized deployment and comprehensive vulnerability scanning capabilities, including dependency checking, key detection, Docker file analysis, and AI risk assessment.

AI package security scanning tool, offering two modes: CLI and MCP server. It can quickly detect vulnerabilities, prompt injection, and supply chain attacks in MCP servers, AI skills, and software packages.

AI Coding Assistant Security Scanner, scans code vulnerabilities, detects AI hallucination packages, and prevents prompt injection attacks through MCP or CLI, supports 12 languages and more than 1,700 security rules

Lyra Intel is a complete intelligent infrastructure engine for large-scale codebase analysis. It combines in-depth code analysis, AI-driven insights, semantic search, and security scanning, supports deployment from local to enterprise level, and provides comprehensive code understanding, security auditing, and intelligent insight functions.

A Python project template managed by Poetry, supporting VS Code configuration, including running a proxy and using CodeQL for code analysis.

A lightweight and configurable WordPress code review MCP server that supports dynamic retrieval of development specifications and security rules from external URLs.

Argus is a multi - language code repository analysis and security assessment tool that supports code quality detection, security scanning, and Git operations.

Cycode CLI is a locally installed application used to scan code repositories for security vulnerabilities, including sensitive information leakage, Infrastructure as Code misconfigurations, Software Composition Analysis vulnerabilities, and Static Application Security Testing issues. This tool supports multiple scan types, such as repository scanning, path scanning, and commit history scanning, and provides an ignore rule function to exclude specific results.

A Nuclei security scanning service based on the MCP protocol, supporting multiple scanning options and JSON - format result output.

MCP Fortress is a comprehensive security tool designed for Model Context Protocol (MCP) servers, offering automated vulnerability scanning, runtime protection, risk scoring, and threat detection functions, and supporting integration with AI assistants such as Claude Code through the MCP server mode for security analysis.

Shrike MCP is an MCP server that provides real - time security scanning for AI agents. It integrates 9 security tools and scans prompts, responses, SQL queries, file writing, CLI commands, and web searches through a multi - stage detection pipeline to prevent prompt injection, jailbreak, PII leakage, and data theft.

An MCP server based on the Shodan API that provides AI assistants with the ability to query Internet-connected devices and services, including host information queries, device searches, network scans, SSL certificate queries, and IoT device searches.

The GitHub Code Review MCP service is a code review tool based on Claude AI, providing automated code review, security vulnerability scanning, performance analysis, etc. for GitHub repositories, and supporting integration with the MCP protocol.

Intruder MCP is a service that allows MCP clients to control the Intruder security scanning tool and supports running through the Smithery platform, a local Python environment, or a Docker container.

ZeroPath MCP Server is an open - source project that allows developers to query security findings such as SAST issues, keys, and patches using natural language and directly integrate them into AI - assisted development tools.

FastApply MCP Server is an enterprise-level code intelligence platform that provides comprehensive code analysis, search, and refactoring capabilities through local AI models, AST semantic search, security scanning, and intelligent pattern recognition. It supports multi-language development and large codebase processing.

A Python - based MCP server that performs Trivy scans and generates SBOM reports in CycloneDX format.

Sonatype MCP Server is a protocol server that connects AI assistants to Sonatype's dependency management and security intelligence platform, providing developers with real-time insights into security vulnerability scanning, license compliance checking, and health analysis of open-source dependencies.