What is the best alternative to Sast MCP Server?

The top-rated alternatives to Sast MCP Server in the Security category include Guardvibe, Mobb Vibe Shield MCP, Codeinspectus. These servers offer complementary or alternative capabilities depending on your deployment stack and authentication requirements.

How do Sast MCP Server alternatives differ in installation and runtime?

Sast MCP Server and its alternatives vary by runtime requirement (Node.js/npx, Python/uvx, Docker, or remote HTTP/SSE endpoints). Check the specification comparison table above to verify command requirements before installing.

Are alternatives to Sast MCP Server free and open source?

Most MCP servers listed on AllMCPs are open source tools under MIT or Apache licenses that you can self-host or run locally with Claude Desktop, Cursor, VS Code, or Windsurf.

How do I side-by-side compare Sast MCP Server with a specific alternative?

Click the "Compare side-by-side →" button on any alternative card to see an in-depth comparison matrix covering feature lists, stars, npm downloads, install configurations, and schema specifications.

Security• MCP Alternatives Guide

Best Alternatives to Sast MCP Server

Looking for an alternative to Sast MCP Server? Whether you need a different runtime environment, custom authentication support, or alternative API integrations in the Security ecosystem, we have cataloged and compared the top alternative MCP servers below.

Browse all Security servers →View Sast MCP Server Specs →

Target Reference Server

Sast MCP Server Overview

SAST MCP Server exposes 11 security scanners through a unified MCP interface, including SAST, SCA, secret scanning, IaC analysis, container scanning, and OWASP ZAP DAST. Use it to scan codebases, git history, dependencies, images, or running applications and export results for CI/CD and security platforms. It also supports baselines, finding suppression, policy evaluation, and patch remediation workflows.

Server Name	Runtime	Auth	Pricing	GitHub Stars	Downloads	Action
Sast MCP Server (Target)	uvx	API key	Free	3	—	Current
Guardvibe	npx	Free/None	Free	5	—	Compare →
Mobb Vibe Shield MCP	npx	API key	Bring your own API key (usage-based cost)	69	—	Compare →
Codeinspectus	npx	No auth required	Free	47	—	Compare →
Vulnfeed MCP	uvx	API key	Freemium	1	—	Compare →
Gia MCP Server	npx	No auth required	Free	5	—	Compare →
MCP Server	npx	API key	Bring your own API key (usage-based cost)	6	—	Compare →
Agentward	npx	No auth required	Free	19	—	Compare →
Agent Bom	uvx	No auth required	Free	31	—	Compare →
Osv Ui	npx	No auth required	Free	4	—	Compare →
Binary Ninja MCP	npx	No auth required	Paid	438	1	Compare →
Agentforge Trust MCP	npx	API key	Freemium	1	—	Compare →
Agentaegis MCP	Remote (SSE)	API key	Freemium	1	—	Compare →

Detailed Evaluation of Sast MCP Server Alternatives

Guardvibe

Runtime: npx

Local security MCP scanning AI-generated web app code with 460+ rules, cross-file analysis, CVE detection, auto-fix, and pre-commit hooks.

Key Features:

462 security rules and 39 tools tailored for AI-generated code

Daily CVE rule updates from GHSA, OSV.dev, and CISA KEV

Cross-file taint analysis and auth coverage across routes

2 0 5

Compare side-by-side

Mobb Vibe Shield MCP

Runtime: npx

Automates security vulnerability remediation by analyzing SAST reports or scanning repos, providing fix recommendations via MCP.

Key Features:

Supports SAST tools: Checkmarx, CodeQL, Fortify, Snyk

Two modes: Scan (runs SAST scan) and Analyze (uses existing SAST report)

Generates automated code fixes for detected vulnerabilities

2 0 69

Compare side-by-side

Codeinspectus

Runtime: npx

Local MCP security scanner for AI-generated JavaScript and TypeScript with offline SAST, secrets, SCA, and AI-specific checks.

Key Features:

Offline local scanning with zero scan-time network egress

CWE-keyed findings across multiple security engines

AI-code-specific native detectors

6 0 47

Compare side-by-side

Vulnfeed MCP

Runtime: uvx

Scans dependency lockfiles for vulnerabilities, adds EPSS exploit scores, and recommends fix versions.

Key Features:

Auto-detects and scans supported lockfiles

Scans npm, Yarn, pnpm, pip, Pipenv, Go, Rust, Ruby, and PHP dependencies

Enriches vulnerability results with EPSS scores

2 0 1

Compare side-by-side

Gia MCP Server

Runtime: npx

MCP governance server for decision classification, approval gates, controlled context, compliance scoring, and hash-chained audit trails.

Key Features:

57 MCP tools across public, tenant, and operator visibility tiers

MAI decision classification with dynamic elevation and gate registration

Human-in-the-loop approval gates

2 0 5

Compare side-by-side

MCP Server

Runtime: npx

Remote MCP server for querying RAD Security findings, reports, and runtime data across Kubernetes and cloud environments.

Key Features:

Hosted Streamable HTTP MCP endpoint

Security findings queries

Security report retrieval

2 0 6

Compare side-by-side

Agentward

Runtime: npx

Enforces YAML permissions on agent tool calls, inspects sensitive data and tool chains, and records audit trails.

Key Features:

YAML policy enforcement

PII and PHI classification

Dangerous tool-chain detection

5 0 19

Compare side-by-side

Agent Bom

Runtime: uvx

Open-source AI supply chain security scanner and control plane with 77 MCP tools and multi-ecosystem compliance enforcement.

Key Features:

Auto-discovers 20 MCP clients and supports 15 package ecosystems

Detects CVEs using OSV, NVD, EPSS, and CISA KEV databases

Maps blast radius from vulnerabilities to exposed credentials and tools

2 0 31

Compare side-by-side

Osv Ui

Runtime: npx

Scans supported project manifests for OSV vulnerabilities, opens a review dashboard, and applies confirmed dependency fixes.

Key Features:

Multi-ecosystem manifest scanning

Live OSV.dev vulnerability lookups

Local browser dashboard for human review

3 0 4

Compare side-by-side

Binary Ninja MCP

Runtime: npx

Binary Ninja plugin and MCP server enabling AI-assisted binary analysis and reverse engineering via MCP clients.

Key Features:

Real-time integration between Binary Ninja and MCP clients

Support for multiple MCP clients including Cline, Claude Desktop, Roo Code, Cursor, Windsurf, Claud…

Automatic switching between multiple open binaries

2 1 438

Compare side-by-side

Agentforge Trust MCP

Runtime: npx

Audits MCP server trust, evaluates connection policies, searches trusted servers, and can proxy catalog tools.

Key Features:

Trust scores across five audit dimensions

Policy-based allow or deny checks

Trusted-server search and recommendations

2 0 1

Compare side-by-side

Agentaegis MCP

Runtime: Remote (SSE)

Scans MCP plugins, agent skills, endpoints, code, networks, and configurations for security and compliance risks.

Key Features:

MCP plugin and skill supply-chain scanning

Endpoint PROCEED/CAUTION/BLOCK verdicts

Network, web application, code, and dependency scans

3 0 1

Compare side-by-side

Best Alternatives to Sast MCP Server

Sast MCP Server Overview

Specification Matrix: Sast MCP Server vs Alternatives

Detailed Evaluation of Sast MCP Server Alternatives

Guardvibe

Mobb Vibe Shield MCP

Codeinspectus

Vulnfeed MCP

Gia MCP Server

MCP Server

Agentward

Agent Bom

Osv Ui

Binary Ninja MCP

Agentforge Trust MCP

Agentaegis MCP

Frequently Asked Questions: Sast MCP Server Alternatives