Code Analysis
Tools for static analysis, code intelligence, and code understanding. Provides capabilities for parsing, analyzing, and gaining insights into codebases across different programming languages.
MCP ServersBrowse all →
AlicenseAqualityAmaintenanceA production-grade MCP server for the Code-Fundi API, enabling AI agents to map codebases, search semantically, and analyze blast radius. It provides tools for repository management, AI-powered research, and impact analysis before shipping changes.27731MIT
DeepContextofficial
AlicenseAqualityFmaintenanceAdds symbol-aware semantic search to coding agents like Codex CLI and Claude Code, enabling precise codebase context via natural language queries.4109276Apache 2.0- AlicenseAqualityAmaintenanceGenerates legal policies (privacy, terms, cookies, etc.) directly from AI coding tools by analyzing codebase context.15137MIT
- AlicenseAqualityDmaintenanceA Model Context Protocol (MCP) server designed to easily dump your codebase context into Large Language Models (LLMs).1123Apache 2.0
- AlicenseAqualityAmaintenanceContract-first programming language with a local MCP server for checking types, effects, capabilities, and contracts in agent-written modules. Its review tool compares before and after source sets and returns receipts for new authority, weaker promise tiers, and new Guarded runtime obligations.78Apache 2.0

Daipendencyofficial
AlicenseBqualityDmaintenanceGet the narrative and API documentation for the exact version of any of your dependencies. (Only Rust is supported at the moment.)12257MIT- AlicenseAqualityBmaintenanceEnables AI assistants to monitor GitHub repository health by calculating health scores, fetching repository metadata, analyzing Dependabot alerts, checking CI/CD status, and retrieving code scanning alerts.271421MIT
- AlicenseAqualityAmaintenanceEnables Claude to authenticate with TuringMind cloud, upload code review results, fetch repository context and memory, and submit feedback on identified issues through type-safe tools.34MIT

onion-mcp-serverofficial
AlicenseAqualityDmaintenanceA feature-rich MCP server offering 30 tools across AI, code, text, data, web, and system categories, enabling tasks like chat, translation, code review, web scraping, and text processing.30MIT- AlicenseAqualityDmaintenanceMCP server that scans Salesforce Agentforce metadata for security vulnerabilities using 61+ SAST rules, integrating into AI coding workflows to guard against OWASP LLM top 10 risks.1621Cryptographic Autonomy 1.0 (Combined Work Exception)

JSON Contractsofficial
AlicenseAqualityCmaintenanceJSON Contracts is a local MCP server for transforming natural language into Git-controlled JSON contracts, JSON Schema validation, and structured LLM/agent outputs.8591Apache 2.0- AlicenseAqualityBmaintenanceDeterministic code review MCP server that provides tools for file selection, rule matching, comment positioning, and reflection, ensuring stable review quality without LLM calls.5191MIT

noir-mcp-serverofficial
AlicenseAqualityCmaintenanceMCP server for Noir development that clones and searches Noir documentation, standard library, examples, and community libraries.9153MIT
@lpm-registry/mcp-serverofficial
AlicenseAqualityCmaintenanceMCP server for the LPM package registry, enabling AI tools to search, browse source code, install packages, check quality, and more.1718ISC
logicstamp-mcpofficial
AlicenseAqualityCmaintenanceMCP server that provides AI assistants with structured access to codebases via LogicStamp Context, enabling component analysis, dependency graphs, drift detection, and token-optimized context delivery.794MIT
openhonest-umbraofficial
AlicenseAqualityAmaintenanceAudits a module against its test suite and reports the cases the tests are structurally unable to see, then proves each gap with a real failing test rather than a warning. Covers Python, TypeScript, JavaScript, Java, Rust and Go.43Apache 2.0- AlicenseBqualityDmaintenanceEnables automatic generation and validation of standardized file names using AI-driven conventions for microservices architecture. Supports multi-language naming with structured components like microservice, layer, domain, and action identifiers.22232MIT
- AlicenseAqualityAmaintenanceVerum's MCP server turns any codebase into a deterministic, queryable fact layer — an agent can ask who calls a function, what a change impacts, where the dead code and duplicates are, which client calls hit which routes, and run a full security/quality audit. It returns byte-identical answers in a few hundred tokens instead of grepping and reading whole files.413MIT

ZeroPath MCP Serverofficial
AlicenseBqualityDmaintenanceAllows developers to query security findings (SAST issues, secrets, patches) using natural language within AI-assisted tools like Claude Desktop, Cursor, and other MCP-compatible environments.179MIT- AlicenseAqualityAmaintenanceGives OpenAI Codex behavioral history from workspace.json, exposing file fragility and co-change partners as tools to enforce safer edits and block incomplete patches.4242Apache 2.0
- AlicenseAqualityAmaintenanceSignalint is an MCP server that provides JavaScript and TypeScript diagnostics by running Oxlint, TypeScript, and optionally Biome, with caching, clustering of repeated issues, and detection of oscillating diagnostics.253131MIT
- AlicenseBqualityCmaintenanceConnects Claude Code to a Latent Defense deployment to map GitHub repositories into an infrastructure graph, discover attack paths using the JEPA energy model, and triage findings from the terminal.85Apache 2.0
- AlicenseAqualityAmaintenanceocal-first, read-only MCP server that audits repository test architecture across ten language ecosystems. It returns deterministic evidence-backed findings, blockers, rankings, and repository-native test plans without modifying source files.219141MIT
- AlicenseAqualityAmaintenanceEnables AI to read and analyze repository incident scan results, including file diffs and summaries, to help investigate suspicious changes. It is read-only and does not execute code or send data externally.1178MIT

CodeLogicofficial
AlicenseAqualityAmaintenanceInteract with CodeLogic, a Software Intelligence platform that graphs complex code and data architecture dependencies, to boost AI accuracy and insight.838Mozilla Public 2.0- AlicenseAqualityAmaintenanceMCP server for diagnosing Apollo InMemoryCache normalization defects, providing cache analysis and repair planning tools for React Native apps.163466ISC
- AlicenseAqualityBmaintenanceEnables MCP-native multi-agent security audits for Google Antigravity, orchestrating subagents for 0day research, static analysis, PoC verification, exploit chaining, reporting, and code remediation.2153MIT
- AlicenseAqualityDmaintenanceEnables AI coding agents to scan smart contracts and code for vulnerabilities, check against 12 famous-hack patterns, and return public security receipts directly in the IDE.416MIT
- AlicenseAqualityDmaintenanceGenerates Phaset manifest files by analyzing your repository with Claude's AI, automatically inferring fields from code, configs, and documentation.3211MIT
- AlicenseAqualityAmaintenanceCode dependency graph and AI context engine. 10 MCP tools that give Claude, Cursor, and any MCP client full codebase context — impact analysis, dependency tracing, architecture summaries, and interactive arc diagram visualization. Supports TypeScript, JavaScript, Python, and Go.241,80460Business Source 1.1
MCP ConnectorsBrowse all →
**Can AI actually read your page?** ChatGPT, Perplexity, Claude and Google's AI Overviews fetch pages very differently from your browser — no JavaScript, tight timeouts, and a robots.txt rulebook of their own. Lekta fetches a URL exactly the way they do and grades what survives, **A+ to F**. This is the technical half of **AEO** (answer engine optimization) and **GEO** (generative engine optimization): before a model can cite you, it has to be able to fetch you, parse you, and find one sentence worth quoting. **The loop this server was built for:** `Audit https://mysite.com/pricing with Lekta, apply the fixes it lists, audit it again, and show me the difference.` Your agent gets a graded verdict, a ranked fix plan with the exact markup to paste, and a diff that proves the change landed. Repeat until A+. **Four layers, 100 points:** **Access** 25 — do the ~17 AI crawler tokens get past robots.txt? **Indexability** 25 — how much content survives without JavaScript? **Answerability** 30 — is there a single quotable sentence an engine can lift? **Recency** 20 — can a model tell when this page was last true? **What this is not:** a rank tracker. Lekta will not tell you how often ChatGPT mentions your brand. It tells you whether your page can be read and quoted when it does — the part you can actually fix. **No black box.** Every finding cites its basis — an RFC, a vendor doc, or a dated measurement we ran. The engine is versioned with a public changelog: a score never moves without a published shift table. **Tools:** `lekta_audit` (fresh fetch) · `lekta_report` (cached read) · `lekta_fix_plan` (ranked, paste-ready) · `lekta_diff` (before/after) · `lekta_my_sites` Listing tools is open. Tool calls need a free key from lekta.dev/en/panel/api — send `Authorization: Bearer lekta_…` or `x-api-key`. Cached reads, fix plans and diffs cost nothing; only fresh fetches count against the daily limit. **Topics:** AEO · GEO · AI SEO · LLM SEO · answer engine optimization · generative engine optimization · AI crawler access (GPTBot, ClaudeBot, PerplexityBot, Google-Extended) · JavaScript-free indexability · structured data · content freshness
Production-safety audits for AI-generated code, with a fix for every finding. Scan for committed secrets and known vulnerable dependencies free with no key; a full audit returns a verdict with security, privacy, reliability and architecture findings, priced per audit and quoted before it runs.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Canonicalize Tailwind classes to their short form, and search LunarWerx free dev tools.
Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
Explain a regex in plain English and detect catastrophic backtracking risk.
Check that your AI is being logical. Free tool that mathematically catches contradictions in agent reasoning. No account needed. Also offers paid guardrails that converts natural language to formal verification proofs, that anyone can check succinctly.
Drupal core API changes, contrib usage, upgrade readiness, patch verdicts, code search, SQL.
Pure, bounded analysis of an explicit bill-of-materials graph: validates structure, finds missing...
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
npm/PyPI dependency upgrades: package security, compatibility, target ranking, and migration plans.
AI product expert answering from live source code, with sources and a verification status.
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
Agentic code review, no signup to try: reality gates + frontier-model review, with veto.
Check if a dependency's license obligates you, based on how you ship. npm, PyPI, Go.
Checks AI-written SvGrid code against the real API, plus version-pinned Svelte 5 grid docs.
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
EU AI Act + GDPR compliance scanner. One call, no arguments, 10 seconds. 22 AI frameworks detected.
Proves AI-generated Python does what you asked: lint, types, security, sandbox run, exact fixes.