MCP servers that ship as code — a repository or a package you install and run locally (usually over stdio). They have no hosted endpoint, so we cannot probe or grade them: instead each one shows its repository, install command, license, stars and when it was last updated.
Collected from GitHub repositories and npm, PyPI, Cargo, Go, Maven, NuGet and RubyGems packages tagged as MCP servers, the official MCP Registry, Docker's MCP catalog, ModelScope, Baidu MCP World, Cline and other public directories; one entry per repository. A server that also offers a hosted endpoint is listed under Remote instead. These entries are not counted in our reachability, verification or readiness statistics.
-
agent-skill-scan-mcpgithub.com/rexcoleman/agent-skill-scan-mcpupdated this year
MCP server: Scan OpenClaw SKILL.md and MCP tool definitions for security vulnerabilities. 22 rules. For Claude Code.
MIT -
zeropath-agent-plugingithub.com/ZeroPathAI/zeropath-agent-pluginupdated this year
ZeroPath plugin for AI code agents — bring AppSec scanning (SAST, secrets, SCA, IaC), finding triage, and security context into Claude Code from chat.
MIT -
A blazingly fast MCP server for code intelligence - multi-language parsing, semantic search, call graphs, security scanning
npm MIT OR Apache-2.0 -
leakrank-guardgithub.com/ProtoTeemo/leakrank-guardupdated this year
Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents. MCP server, docs for the leakrank-guard npm package.
MIT -
bazaar-mcpgithub.com/opspawn/bazaar-mcp-serverupdated this year
MCP server for the OpSpawn x402 Bazaar — screenshot capture, AI analysis, PDF/HTML generation, code security scanning, and dependency auditing via x402 micropayments
npm MIT -
mcp-server-cloud-agentgithub.com/joepangallo/mcp-server-cloud-agentupdated this year
MCP server for Cloud Agent — an AI software engineer that writes code, opens PRs, reviews code, generates tests, runs security scans, and answers codebase questions. Connect from any MCP client (Claude Code, Cursor, Windsurf) and delegate engineering task
npm MIT -
@stranzwersweb2/skillsync-mcpgithub.com/adityasugandhi/skillsync-mcpupdated this year
SkillSync MCP server — search, scan, install & manage Claude Code skills with built-in security scanning and startup verification
npm MIT -
AI-powered pentesting automation with MCP integration for Claude Code - parallel scanning, OWASP ASVS 5.0, workflow recording/replay
NOASSERTION ★ 1 -
MCP server that lets AI agents scan code, staged diffs and text for secrets with gitleaks. Findings are always redacted.
MIT -
CLI & MCP server for scanning code definitions (.gitignore aware, LLM output)
GPL-3.0 ★ 2 -
blackduck-polaris-mcp-serverupdated this year
Feature-rich MCP server for Black Duck Polaris — trigger SAST/SCA/DAST scans, query findings, generate reports (SBOM, SPDX, CycloneDX), manage policies, triage issues, and more. Works with Claude Code, Claude Desktop, GitHub Copilot, Cursor, and any MCP-c
npm MIT -
cleaner-codegithub.com/goldmembrane/cleaner-codeupdated this year
Scans AI-generated code for invisible Unicode, Trojan Source, and supply-chain threats.
npm ISC -
mcpgithub.com/qrxcodes/mcpactive
QRX MCP server for stdio clients: art QR codes that always scan
npm MIT -
rlm-mcpgithub.com/NextTokens/rlm-mcpupdated this year
MCP to optimize Claude code context window and effectively scan large files and code
MIT ★ 3 -
mdfi connector for coding agents: read PDFs, scans and Office files page by page over MCP
Apache-2.0 ★ 1 -
gadriel-claude-pluginsgithub.com/Gadriel-ai/gadriel-claude-pluginsupdated this year
Gadriel AI Security Harness plugins for Claude Code — local SAST, SCA/SBOM, secrets & OWASP LLM security scanning via MCP.
-
Rust MCP server for comprehensive code intelligence - 90 tools, 32 languages, security scanning, call graphs, and more
Apache-2.0 ★ 188 -
@vettiq/mcp-servergithub.com/lumeniqjs/vettiq-platformupdated this year
VettIQ MCP server — security scanning for AI-generated code, callable from Cursor, Claude Code, and any MCP-compatible agent.
npm UNLICENSED -
A Model Context Protocol (MCP) server that provides security scanning capabilities for code snippets, codebases, and verification of code changes
pypi Apache Software License -
mustelgithub.com/mustel-py/mustelupdated this year
Non-AI static analysis layer for AI IDEs and coding agents - bug detection, security scanning, and CVE checking via MCP
pypi MIT License -
QRX MCP server for stdio clients: art QR codes that always scan. Bridges to the hosted QRX MCP server at qrx.codes/mcp.
npm MIT -
mcp-codedocgithub.com/Akshay1018/mcp-codedocupdated this year
Professional AI-driven code documentation & quality audit agent. Scans projects, identifies bugs, and persists reports locally via MCP.
MIT -
Offline security scanning for AI-generated code: seven open-source scanners and AI-specific checks in one command.
pypi Apache-2.0 -
Scan your machine for known AI-coding-assistant supply-chain backdoor indicators (Claude Code / Cursor / Windsurf extensions, MCP servers) plus risky hook/permission config patterns. Usable as a CLI or as an MCP server.
pypi MIT -
Structural code intelligence for AI agents. Scan once, query everything — dead exports, circular imports, dependency graphs, and more. CLI + MCP server.
NOASSERTION ★ 10 -
devscopegithub.com/lpbird/devscopeupdated this year
Detect, install, and manage development environments. Scan & visualize all your local code projects. MCP-native.
npm MIT -
Local code index for AI coding agents: MCP server that gives Cursor, VS Code Copilot, and other agents ranked, token-budgeted context instead of whole-repo scans.
npm MIT -
Scan and fix vulnerabilities in Python, JavaScript, TypeScript, Go, and Java code using AI-powered analysis with 200 built-in security rules.
MIT ★ 2 -
simply-ops-guardgithub.com/nardovibecoding/simply-ops-guardupdated this year
Claude Code plugin - 49 hooks + 28 MCP tools for enforcement, security scanning, prompt injection defense, VPS ops, audit logging
AGPL-3.0 ★ 1 -
qrlia remote MCP server: create and manage dynamic QR codes and read scan analytics from Claude, Cursor and other MCP clients.
-
godkiller-mcpgithub.com/taurus42119-stack/godkiller-mcpupdated this year
GODKILLER MCP — Antigravity phase/evidence orchestrator with code, scan, and browser facades
pypi MIT -
WhatsApp channel plugin for Claude Code — connect your WhatsApp to an AI agent. QR scan, voice transcription, access control, media support.
MIT ★ 18 -
codescan-mcpgithub.com/yifanyifan897645/codescan-mcpupdated this year
MCP server that scans your codebase for TODOs, FIXMEs, code complexity, file stats, and tech debt signals. Zero config.
npm MIT -
Encrypted local vault for API keys. Your AI fetches keys on demand and scans code for leaks. Local MCP server.
MIT ★ 1 -
QNSQY for Claude Code: post-quantum scanning, encryption and verification tools in a strict mode that never takes passwords or keys
NOASSERTION -
Codebase analysis as MCP tools for Claude Code — scan, risk-score and patch a repo, and it tells you what it couldn't read.
MIT ★ 2 -
Linkbreakers MCP server for AI agents: create, track and manage dynamic QR codes and short links, with scan analytics. Stdio proxy to mcp.linkbreakers.com.
MIT -
Local MCP server for QR code and barcode image scanning, preserved payload bytes and QR scannability reports
npm AGPL-3.0-or-later -
MCP server (not a Claude Code Skill) for the VibeSafe security scanner — scan code, live URLs and run a Launch Check from Claude Desktop, Claude Code, Cursor, Windsurf or any MCP client.
MIT -
quasar-graphgithub.com/o-samoilov/quasar-graphupdated this year
Claude Code plugin that turns your projects into a living architecture graph — scan, explore, and query your codebase as a map.
MIT ★ 3 -
Official clients, OpenAPI and examples for the QRFLOW.codes API: dynamic QR codes you can change after printing, your own domain, scan analytics, webhooks, MCP server.
MIT -
Local-first MCP security scanner for AI-generated apps: four open-source engines plus the Synvoya engine. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.
npm Apache-2.0 ★ 51 -
Turn PDFs, Office files and scans into token-lean Markdown for LLMs and coding agents. Local-first: web app, desktop, CLI, MCP server, Claude Code & OpenCode hooks.
Apache-2.0 -
GRASP — Code architecture visualizer + 150-tool MCP server. Dependency graphs, security scanning, multimodal knowledge graph, ORM tracking, git change impact, graph schema v3. Works with GitHub, GitLab & local dirs. 35 languages. Zero data collection.
NOASSERTION ★ 33 -
MCP server for local PII scanning and redaction. Check sensitive files and create redacted copies from Claude Code. Powered by DataFog Core.
MIT -
OffSeq Threat Radar MCP server: CVE, CISA KEV, EPSS and exploit intelligence, SBOM scans and IOC checks for coding agents. Gemini CLI extension and Claude Code plugin.
MIT -
ai-agent-apigithub.com/AntoNYak0/ai-agent-apiupdated this year
30 AI-powered tools for code audit, DeFi analysis, solidity scanning & more — pay-per-use via x402 USDC micropayments. MCP SSE server for AI agents.
MIT -
Open Reality OS as MCP tools: drive scan upload, reconstruction, scene query, scene agents, and robot-training exports from Claude Code, Claude desktop, Codex, or Cursor.
npm BSD-2-Clause -
codewikitapgithub.com/burakarslan0110/codewikitap-mcpupdated this year
Project-aware MCP server that brings Google CodeWiki documentation into coding agents (Claude Code, Cursor, VS Code, Codex CLI, Gemini CLI, Qwen Code, opencode, Windsurf, Antigravity). Scans your project's manifests, detects which dependencies have CodeWi
npm MIT -
MCPBusinessAnalyticsgithub.com/keidson299/MCPBusinessAnalyticsupdated this year
This is an MCP server that will perform business analytics functionality, it can scan emails and spreadsheets to determine urgencym tone of voice, patterns in data and more. Built to experiment with agentic development using Claude Code.
MIT -
mcpvetgithub.com/volohq-info/mcpvetupdated this year
MCPVet — scan MCP servers, Claude Code skills & plugins for unsafe behavior before you install them. One-step MCP server + skill. https://mcpvet.com
-
Upgrade intelligence for AI coding agents: what an upgrade changes and where it touches your code, lockfile vulnerability scans, upgrade plans. Local MCP server, no account.
npm Apache-2.0 -
12,000+ AI agent skills (SKILL.md) for Claude Code, Codex, Cursor, Gemini CLI & Copilot — license-checked, safety-scanned, auto-updated every Friday. Use it as a Claude Code plugin marketplace or an MCP server.
MIT -
testpilot-mcpgithub.com/aishwaryshrivastav/testpilotupdated this year
Context-aware testing layer for Playwright MCP — scans your codebase, generates precise test plans, and produces CTO-level reports. Works with Claude Code and Cursor.
npm MIT -
MCP server for PhishClean security tools — check URLs for phishing, analyse email headers, decode JWTs, scan code for leaked secrets. Works with Claude Desktop, Claude Code, Cursor.
MIT -
MCP server for Airlock — let an AI coding agent (Cursor, Claude) scan a deployed site for an exposed Supabase service_role key and audit Row Level Security, mid-build. Catches the #1 vibe-coding leak.
npm MIT -
tiamat-scanner-mcpgithub.com/toxfox69/tiamat-entityupdated this year
MCP server for supply chain package scanning — detects typosquatting, malicious install scripts, obfuscation, and dependency confusion in npm/PyPI packages. Works with Claude Code, Cline, and any MCP client.
npm MIT -
Local code index for AI agents. Scans a repo with tree-sitter into one SQLite file — function inventory, call graph, module deps, control flow, impact analysis — then serves 32 MCP tools to Claude Code, Cursor and VS Code. No LLM calls, no upload, no telemetry. npm i -g codindex
MIT ★ 3 -
Multi-provider AI agent bridge, an MCP server that lets Claude Desktop delegate tasks (security scans, code review, analysis) to Gemini, AWS Bedrock, and OpenAI-compatible models, with a dynamic agent registry and safety limits.
-
cheat-engine-mcpgithub.com/coffeegrind123/cheat-engine-mcpupdated this year
A HTTP MCP bridge plugin for Cheat Engine. 176 tools exposing CE's memory, scanning, debugging, and code-injection APIs to Claude Code and other MCP clients.
★ 2