"CodeQL static analysis tool and semantic code analysis platform" matching MCP tools:

• get_static_code_flowC

  project-code-intelligenceB

  Retrieve ordered SARIF or CodeQL code-flow steps for a static-analysis finding to understand data flow paths.

  MIT

• rush_codeqlC

  rushC

  Import a local CodeQL SARIF report or run CodeQL analysis with build allowed to detect code vulnerabilities.

  MIT

• github_code_scanning_get_variant_analysis_repo_taskC

  github-mcpC

  Retrieve the analysis status of a repository in a CodeQL variant analysis to monitor code scanning progress and results.

  -

• github_code_scanning_create_variant_analysisC

  github-mcpC

  Initiate a CodeQL variant analysis on a GitHub repository to detect code vulnerabilities.

  -

• delimit_design_validate_responsiveA

  delimitB

  Validate responsive design patterns with static CSS analysis and optional Playwright testing to flag missing media queries, fixed widths, or non-mobile-first patterns for CI checks.

  MIT

• delimit_tdqs_lintA

  delimitB

  Score MCP tool docstrings against 6 TDQS quality dimensions to catch low-quality descriptions before publication. Performs read-only static analysis on Python files via ast, with no side effects.

  MIT

• list_profilesA

  tactual-mcpA

  Retrieve available assistive-technology profiles, each modeling a specific screen reader and platform with navigation cost weights. Use the returned profile IDs to configure analysis tools.

  Apache 2.0

• vectr_ingest_tracesA

  VectrA

  Import runtime trace events to enrich static call analysis, revealing dynamic dispatch patterns such as decorators and monkey-patching that static analysis cannot see.

  MIT

• analyze_code_scanningA

  projectpulse-mcpA

  Retrieve CodeQL security alerts for a GitHub repository, or trigger a new scan. Get vulnerability details by severity and location to prioritize fixes.

  MIT

• get_asset_flow_analysis_planA

  Threat Modeling MCP ServerB

  Generate a structured asset flow analysis plan to uncover security risks, using AI analysis and AWS documentation validation.

  Apache 2.0

• get_phase_7_5_guidanceA

  Threat Modeling MCP ServerB

  Find structured guidance for Phase 7.5 code validation analysis, including objectives, recommended steps, tools, and expected outputs to support threat modeling activities.

  Apache 2.0

• code-fundi-researchA

  Code-Fundi MCP ServerA

  Search repositories and receive AI-synthesized analysis of code. Streams intelligent summaries to explain matching files and deliver code context.

  MIT

• code-fundi-file-docsA

  Code-Fundi MCP ServerA

  Generate AI documentation for any file in an indexed repository, including summaries, functions, dependencies, and code analysis. Understand file purpose and behavior.

  MIT

• turingmind_index_codebaseA

  TuringMind MCP ServerA

  Parses codebases with AST to extract functions, classes, and files, enabling relationship-aware code review and impact analysis.

  MIT

• file_analyze_peA

  Windows Forensics MCP ServerB

  Perform static analysis on Windows PE files to extract headers, imports, exports, sections, compute hashes (MD5, SHA1, SHA256, Imphash), and detect packers or suspicious indicators.

  MIT

• run_detectorsA

  Slither MCP ServerA

  Run static analysis detectors on Solidity smart contracts to identify vulnerabilities, code quality issues, and informational findings. Filter results by detector names, impact, confidence, or exclude paths.

  AGPL 3.0

• platform_create_siteA

  @shiplohq/mcpA

  Create a new static site with a platform-assigned hostname, configure routing mode (static or SPA), and set a preferred subdomain for deployment.

  MIT

• get_architecture_analysis_planC

  Threat Modeling MCP ServerB

  Generate a comprehensive architecture analysis plan for security concerns, using AI-powered analysis with AWS documentation validation.

  Apache 2.0

• get_authoring_conventionsA

  senti-mcp-serverA

  Retrieve MQL5 authoring constraints before generating source to avoid static-analysis rejections and costly serial compile failures.

  MIT

• search_hybrid_contextA

  knotA

  Locate code by natural language meaning, combining semantic vector search with graph analysis to surface relevant files, signatures, and dependencies for initial codebase discovery.

  MIT

• get_exploit_analysisA

  eip-mcpA

  Retrieve a full AI analysis of an exploit by its platform ID to verify safety before code review. Includes classification, attack type, complexity, and deception indicators.

  MIT