Tagsstatic-analysis

Tag Topic

static-analysis MCP Servers

Showing 19 Model Context Protocol tools tagged with “static-analysis”.

Browse MCP Servers

Discover, filter, and connect verified Model Context Protocol tools to your AI agents.

Codebase Memory MCP

Knowledge & Memory

Code-intelligence engine that indexes a repo into a persistent knowledge graph — functions, classes, call chains, HTTP routes, cross-service links. 159 languages via tree-sitter + Hybrid LSP, sub-ms structural queries, 99% fewer tokens than grep. Single static binary, zero dependencies, 100% local. npx codebase-memory-mcp

Gatetest

111-module QA gate for Claude Code. Scan repos, auto-fix, AI diagnosis. Replaces SonarQube + Snyk.

Code Auditor MCP

Developer Tools

Code Quality Auditor: Analyze code for SOLID principles, DRY violations, and more

Skylos

Dead code detection, security scanning, and code quality analysis for Python, TypeScript, and Go. 98% recall with fewer false positives than Vulture. Includes AI-powered remediation.

Axint

Apple-native execution layer for AI agents. Compiles TypeScript to validated Swift — App Intents, SwiftUI views, WidgetKit widgets, and full apps. 13 MCP tools, 150 diagnostics, 500 tests.

Bigindexer

Developer Tools

Hierarchical code intelligence for AI coding agents. Scans local source code, clusters files by behavioral roles, maps coupling seams, and provides in-repo twins/context for complex implementation tasks.

Bumpguard MCP

Developer Tools

Pre-flight dependency-upgrade impact analysis: reports exactly which of your code's API usages break before you bump a dependency, with line numbers, severity, and fix hints. Also verifies AI-written code against the actually-installed API to catch hallucinated calls. Static analysis only — never runs third-party code. Python + .NET. pip install bumpguard-mcp

MCP Blast Radius

Biology & Bioinformatics

MCP Blast-Radius Auditor — static blast radius extraction and AOS manifest.json divergence gate (Oracle / Permitted / Prohibited). Stdio MCP (mcp-blast-radius) plus CI blocking gate (mcp-blast-radius-gate). Install: pip install mcp-blast-radius==0.2.0 · PyPI

Depwire

Dependency graph + 15 MCP tools for AI coding assistants. Parses TypeScript, JavaScript, Python, Go, Rust, and C. Arc diagram visualization, health scoring, dead code detection, and temporal graph.

Django Orm Lens

Django ORM static-analysis MCP server. Nine read-only tools (listapps, listmodels, describemodel, findrelations, cascadepreview, erdiagram, describemigrationdependency, suggestindexes, signalgraph) that expose Django schema, relationships (FK/M2M/O2O, ondelete, relatedname), migration deps, missing indexes, and signal graphs — no DB, no Django boot, no credentials. Companion to a VS Code / VSCodium / Cursor extension (Open VSX verified) and a django-orm-lens PyPI CLI. pip install django-orm-lens[mcp].

MCP Shield

Security scanner for MCP servers. Detects backdoors, exfiltration code, obfuscation, dangerous code execution, prompt injection, and supply chain risks before you install. Four tools: scan npm packages, scan local directories, check prompt injection, and audit supply chain trust score. npx @muhannad-hash/mcp-shield

Gograph

An AST-aware structural repository graph engine and MCP server designed for AI agents. Understands Go struct embeds, public API surfaces, SQL queries, and error mapping to give agents instant codebase context without blindly grepping.

PhpCodeArcheology

PhpCodeArcheology

PHP static analysis MCP server for architecture and maintainability. 11 tools exposing 60+ code quality metrics, problem detection, refactoring priorities, dependency graphs, git hotspots, test coverage, and impact analysis. Installable via Composer.

SecureAudit MCP

Model Context Protocol (MCP) server for static C/C++ memory-safety scanning and compiled PE/ELF binary protections auditing (ASLR, DEP/NX, SafeSEH, PIE) with secure templates remediation.

Infrawise

Cloud Platforms

Cloud infrastructure analysis for AI coding assistants — detects IaC drift, missing indexes, security gaps, and performance anti-patterns across AWS services and databases. 13 tools, works with Claude Code and Cursor.

Open Code Review

Developer Tools

AI code quality gate detecting hallucinated packages, phantom dependencies, stale APIs, and AI-specific code defects. MCP Server + CLI + CI/CD integration.

MCP Shield

Static security scanner and MCP server for MCP servers and AI agent tools. Detects secrets, shell execution, risky tool descriptions, environment access, and prompt-injection phrases. mcp-shield-server

Pci Dss MCP

PCI DSS v4.0.1 static-analysis MCP server for Go payment codebases. 12 scanners detect PAN/CVV exposure, weak crypto, missing audit logs, vulnerable deps, TLS misconfig, auth weaknesses, plus CycloneDX 1.6 SBOM generation - each finding mapped to the exact PCI requirement. AI-assisted triage via triagefindings. Keyless-signed multi-arch Docker image on ghcr.io.

MCP Gateway Scan

Read-only static scanner for MCP / agent-gateway production-readiness. The scangateway tool scores a repo across 7 security dimensions (RBAC, fail-closed, supply chain, observability, cost, secrets, prod-readiness). Never executes code or prints secret values.

static-analysis MCP Servers & Tools | AllMCPs