CLI & MCP server for scanning code definitions (.gitignore aware, LLM output)

WCAG 2.1 AA accessibility scanner (Playwright + axe-core) with grounded, browser-verified fixes. MCP server for Claude Code and any MCP client; also a Claude Code plugin.

WCAG 2.1 AA accessibility scanner for Claude Code: Playwright + axe-core, grounded fixes, browser-verified (MIT client; hosted insights API is proprietary)

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.

AI-generated code safety scanner for the vibe coding era. Catches hallucinated imports, hardcoded secrets, security vulnerabilities, and dead code. CLI + Python API.

MCP-native security scanner that asks "should I ship tonight?" for AI-generated code.

MCP server for SixthWall AI code security scanner. Integrates with Claude Code for automatic vulnerability detection with Fix Packs.

Python dead code, security and secrets scanner with a pull-request gate; narrower checks for TypeScript, Java and more.

Offline security scanning for AI-generated code: seven open-source scanners and AI-specific checks in one command.

SkillSync MCP — security-gated skill management for Claude Code, OpenClaw, Cursor & Windsurf. 60+ threat pattern scanner.

MCP security scanner — source code audit with 25+ Semgrep rules, config health checks, SARIF output for CI/CD

MCP server (not a Claude Code Skill) for the VibeSafe security scanner — scan code, live URLs and run a Launch Check from Claude Desktop, Claude Code, Cursor, Windsurf or any MCP client.

MCP server for FinishKit. Production readiness scanner for AI-built apps. Enables AI agents in Claude, Cursor, Windsurf, and VS Code to check if code is ready to ship.

Free security & privacy scanner for AI-coded apps. 766 rules, 84 MCP tools, 13-layer defense, zero-trust sandbox, AI firewall. Runs locally, never sends data anywhere. Scan your AI-generated app for leaked keys, open databases, and injection holes in 5 seconds.

Free Roblox Studio MCP server and plugin. Connect Claude Code, Cursor or any MCP client to Studio: 85 tools, snapshots, two-way script sync, git and a backdoor scanner.

AI-powered open source license compliance scanner. Analyzes how dependencies are actually used — not just what license they have — to determine if obligations trigger for your distribution model. Multi-agent AI pipeline, MCP server for Claude Code integration, and structured output for AI assistants. Zero API keys needed for local use.

Static security scanner for machine-learning model files. Checks PyTorch, pickle, joblib, GGUF, SafeTensors, ONNX and Keras checkpoints for code execution before you load them. CLI, GitHub Action, load guard, MCP server.

MCP server that checks a working copy and a customer's proven site: vulnerable packages, secrets, insecure config and code, TLS, headers, exposure and open services, each finding mapped to ENS and NIS2. Native AOT, scanners run in Nomad.

Zero-trust local security scanner, MCP server & .cursorrules generator for vibe-coded apps

Open-source AST aware code scanner to find your app’s vulnerabilities.

Gadriel AI Security Harness for Claude Code — local SAST, SCA/SBOM, secrets, container, config & OWASP LLM security scanner via MCP.

Gadriel AI Security Harness for VS Code — local SAST, SCA/SBOM, secrets, container, config & OWASP LLM security scanner and MCP server.

AI code security scanner MCP server — detects invisible Unicode, Trojan Source, homoglyphs, Glassworm steganography, rules file backdoors, and dependency attacks in AI-generated code. Static analysis + CodeBERT deep learning. Runs locally.

GitHub repository scanner for AI agents u2014 analyze structure, code quality, contributors, dependencies, and detect secrets.

Local-first MCP security scanner for AI-generated apps: four open-source engines plus the Synvoya engine. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

Real-time AI safety guardrails for LLM apps. 10 scanners: prompt injection, PII, harmful content, code vulnerabilities, obfuscation detection. Sub-ms latency. Python + TypeScript SDKs. MCP proxy. Claude Code hooks.

Go-only, report-first code scanner exposed as an MCP server. Indexes a module, runs deterministic analyzers, and reports genuine bugs, dead code, stale docs & outdated APIs — never editing your code until you ask.

Design system enforcement for AI coding assistants. 23 CLI commands, 25 scanners, 21 MCP tools, 8 presets.

Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.

Anti reverse engineering scanner for Electron, JS and game builds. See your app the way REA and other AI RE agents see it, then fix it. CLI + MCP server for Claude Code, Codex, OpenCode.

Open-source context engineering scanner for Claude Code. Scores 45 check layers across CLAUDE.md, skills, hooks, memory, and planning artifacts. Free local tools + paid upgrades via MemoryOS.

Open-source context engineering scanner for Claude Code. Scores 45 check layers across CLAUDE.md, skills, hooks, memory, and planning artifacts. Free local tools + paid upgrades via MemoryOS.

Upgrade intelligence for AI coding agents: what changes between your installed and target version (changelog, breaking changes, the files you import it from), a pre-install verdict on each bump, vulnerability scanning at osv-scanner parity across npm/pnpm

AI-native SDLC framework for regulated industries. 8 phase-gated stages, 9 specialized agents, built-in HIPAA / SOC 2 / PCI / GDPR scanners. Plugs into Claude Code via MCP (30+ tools). MIT, self-hostable. pip install octalume.

Offline security scanning for AI-generated code: seven open-source scanners and AI-specific checks in one command. It finds secrets, vulnerable, hallucinated and malicious dependencies, poisoned agent configuration, and infrastructure and code flaws. An MCP server for Claude Code and Kiro, and a CLI. Your source never leaves your machine.

AI-powered secret scanner for code and git history. Finds leaked API keys, tokens and credentials with near-zero false positives by pairing Rényi entropy detection with LLM adjudication. Runs as a CLI, pre-commit hook, GitHub Action, MCP server or Claude Code hook. Single Go binary, MIT licensed.

Scanners flag CVEs. CheckExploit proves which ones actually reach your code — by running the real exploit against your actual code inside an isolated sandbox. Supports Python,Node repos; generates and verifies remediation patches. Built on OpenCode + MCP.

Find the security holes your AI left behind. Zero-config scanner for apps built with Cursor, Claude Code, Lovable & Copilot: leaked keys, open Supabase/Firebase data, missing auth, SQL injection and more. Every finding comes with a fix prompt for your AI editor. CLI + MCP server

Stdlib-only Python MCP server with three security tools: CVE lookup via OSV.dev, host exposure via Shodan InternetDB, and orchestration of a locally installed Nuclei scanner. No exploit code bundled; 19 tests; alpha companion to Voraxx.

MCP server that extends the official GitLab MCP with security, compliance and GitLab Duo tools: vulnerability triage and bulk actions, security policies, compliance violations, SBOM, scanner coverage, Duo usage, seats and credits, and AI governance. One Go binary with a built-in installer for Claude Code and Cursor, and a read-only mode.

Static analysis scanner for MCP server code and multi-tenant SaaS applications. 57 deterministic rules covering tenant isolation, tool visibility, cache key scoping, RLS, IDOR, and credential vault isolation. MCP server for AI agent integration.

Stable since v1.0.0 — MCP server + cross-host agent skill (Claude Code / Codex / OpenClaw / Hermes) for QA testing across pytest / Jest / Cypress / Go / Maestro / Schemathesis / Newman, plus v1.1 Edge AI Runner (RTSP + YOLO). 22 frozen tools, bilingual EN/zh-TW QA knowledge, AI Visual Challenge Solver (reCAPTCHA / hCaptcha), OWASP API Top 10 (2023) scanner, universal qa_plan + verify bookend across 5 core tools (AI 測試大師)

macOS process investigation tool — inspects running processes, network connections, and code signing status. Flags suspicious activity. CLI + MCP server for Claude Code.

Local MCP server for QR code and barcode image scanning, preserved payload bytes and QR scannability reports

MCP server providing Claude Code with real-time stock and crypto market data, SEC filings, insider trades, and technical analysis

MCP server for supply chain package scanning — detects typosquatting, malicious install scripts, obfuscation, and dependency confusion in npm/PyPI packages. Works with Claude Code, Cline, and any MCP client.

Scan to PDF and print from Telegram or from AI agents (MCP) with any SANE/eSCL scanner and CUPS printer. One Docker container.

MCP server for AI agents to scan and audit smart contracts on Base for security vulnerabilities. Detect honeypots, rug pulls, hidden mints, proxy risks, and generate full audit reports.

GuardRails by Abscissa: VS Code extension-package security, exact-release evidence, workspace monitoring, and a read-only OAuth MCP server.

MCP server for home network discovery and security scanning

Local-first context engine for AI coding agents. Pre-indexes your codebase into a dependency graph and feeds any MCP agent only the code that matters, so it stops rediscovering your repo before every change. Fable-5-level results from Opus 5 on SWE-bench

An MCP-based security scanner and agentic AI for vulnerability detection

MCP server for the Frame security scanner: scan, verify, fix, exploit, framework packs and the separation logic solver, from any MCP client.

Security scanner + AI agent firewall. Blocks secret/PII exfiltration in real time. 752 rules, 82 MCP tools (agent-scan, mcp-audit, guard-action, generate-sbom, dep-reachability, license-compliance), AST taint analysis. Offline, zero telemetry, zero depend

Production readiness for vibe-coded apps — know your AI code is ready to ship

AI compliance scanner and MCP server for GDPR, CCPA/CPRA, WCAG, PCI-DSS, HIPAA, EU AI Act, LGPD, COPPA, PIPEDA, privacy, accessibility, and AI governance.

Windows network scanner that finds AI/ML services and MCP servers on your network (shadow AI discovery). Signed, self-updating detection signatures. Runs as an MCP server too.

Production readiness for vibe-coded apps — know your AI code is ready to ship

—

MCP Server for Open Code Review - AI code quality gate for Claude Desktop, Cursor, Windsurf, VS Code Copilot