# Security Scanning

An AI-based NPM package analysis MCP server that provides intelligent functions such as security scanning and dependency analysis

MCP Fortress is a comprehensive security tool designed for Model Context Protocol (MCP) servers, offering automated vulnerability scanning, runtime protection, risk scoring, and threat detection functions, and supporting integration with AI assistants such as Claude Code through the MCP server mode for security analysis.

ZeroPath MCP Server is an open - source project that allows developers to query security findings such as SAST issues, keys, and patches using natural language and directly integrate them into AI - assisted development tools.

A Nuclei security scanning service based on the MCP protocol, supporting multiple scanning options and JSON - format result output.

The OWASP ZAP MCP server is a protocol server that integrates the Zed Attack Proxy security scanning tool with an AI assistant. It supports multiple scan types and containerized deployment, enabling shift-left security testing in development.

VulniCheck is an AI - driven security scanner that provides comprehensive security analysis for Python projects and GitHub repositories. It runs as a Docker - based HTTP MCP server, supports standard HTTP streaming, and offers containerized deployment and comprehensive vulnerability scanning capabilities, including dependency checking, key detection, Docker file analysis, and AI risk assessment.

The ZeroPath MCP Server is an open-source project that allows developers to query security findings such as SAST issues, secrets, and patches using natural language, and directly integrate them into AI-assisted tools. It simplifies the process of handling security issues, providing security context directly in the development environment without the need for manual dashboard or ticket management.

A Python project template managed by Poetry, supporting VS Code configuration, including running a proxy and using CodeQL for code analysis.

The GitHub Code Review MCP service is a code review tool based on Claude AI, providing automated code review, security vulnerability scanning, performance analysis, etc. for GitHub repositories, and supporting integration with the MCP protocol.

Sonatype MCP Server is a protocol server that connects AI assistants to Sonatype's dependency management and security intelligence platform, providing developers with real-time insights into security vulnerability scanning, license compliance checking, and health analysis of open-source dependencies.

Argus is a multi - language code repository analysis and security assessment tool that supports code quality detection, security scanning, and Git operations.

FastApply MCP Server is an enterprise-level code intelligence platform that provides comprehensive code analysis, search, and refactoring capabilities through local AI models, AST semantic search, security scanning, and intelligent pattern recognition. It supports multi-language development and large codebase processing.

An MCP server integrating Trivy security scanning capabilities, providing project vulnerability scanning and automatic fix capabilities through a standardized interface.

A Python - based MCP server that performs Trivy scans and generates SBOM reports in CycloneDX format.

A lightweight and configurable WordPress code review MCP server that supports dynamic retrieval of development specifications and security rules from external URLs.

An MCP server based on the Shodan API that provides AI assistants with the ability to query Internet-connected devices and services, including host information queries, device searches, network scans, SSL certificate queries, and IoT device searches.

Intruder MCP is a service that allows MCP clients to control the Intruder security scanning tool and supports running through the Smithery platform, a local Python environment, or a Docker container.

Cycode CLI is a locally installed application used to scan code repositories for security vulnerabilities, including sensitive information leakage, Infrastructure as Code misconfigurations, Software Composition Analysis vulnerabilities, and Static Application Security Testing issues. This tool supports multiple scan types, such as repository scanning, path scanning, and commit history scanning, and provides an ignore rule function to exclude specific results.