code-scanning MCP servers & tools

Symbiotic CLI MCP Server for security scanning and analysis

Security MCP for vibe coding with 330 rules and 29 tools. Purpose-built for AI-generated code — scans Next.js, Supabase, Clerk, Stripe, Prisma, Hono, GraphQL, and 25+ modules. Cross-file taint analysis, host security audit, auto-fix, SARIF export, pre-commit hook, and CVE version detection. Zero config, runs locally.

AI code security scanner MCP server. Detects 9 categories of threats in AI-generated code (invisible Unicode, Trojan Source, homoglyphs, Glassworm steganography, rules file backdoors, dependency typosquatting, obfuscation) using static analysis plus CodeBERT deep learning. Runs locally, free tier.

Embeds Snyk's security engines into agentic workflows. Secures AI-generated code in real-time and accelerates the fixing vulnerability backlogs.

Post-quantum readiness for AI coding agents: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH), explain the harvest-now-decrypt-later exposure, get NIST ML-KEM/ML-DSA/SLH-DSA (and hybrid) migration guidance, verify fixes, and check dependencies. Content-based/advisory tools only. Run local (npx @quantakrypto/mcp) or the hosted OAuth endpoint at mcp.quantakrypto.com.

Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.

FinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality

Deterministic security scanning that needs no model or API key, plus governed coding tasks.

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.

Code security scanner for AI agents. 45+ vulnerability patterns, AST analysis, Solana micropayments.

Local-first PHI detection for source code, LLM prompts, logs, and analytics

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

Scans code for hardcoded secrets (AWS, Stripe, GitHub, JWTs) before an AI agent commits it.