Task · Coding
Best AI agents to scan code for vulnerabilities
This task needs 2 capabilities. 19 tools cover all of them; 920 cover at least one.
| # | Tool | Coverage | Access | Trust | Seen |
|---|---|---|---|---|---|
| 601 | agentscoreMCP MCP security trust layer: scan packages, inspect repos, check exposure, monitor changes. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 602 | Kaito Query ServiceMCP AI LLM with Gemini, MiniMax, Replicate, OpenRouter. Vision, search, code review. USDC on Base. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 603 | developer-tools-mcp-serverMCP Access GitHub repos, npm/PyPI packages, Stack Overflow, arXiv, and Google Scholar | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 604 | ScriptDocs MCPMCP Real, live npm/PyPI docs and OSV.dev vulnerability data for AI coding agents. No fake data. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 605 | HarvestMCP Plain-English training-data scout: 12 experts sweep HuggingFace + GitHub, compose scored packs. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 606 | ZephexMCP MCP gateway with 10 tools for code analysis, architecture, package audit & security. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 607 | Webhook ToolkitMCP Webhook URLs for AI agents: receive, wait for, replay, sign and verify webhooks (Stripe, GitHub…). | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 608 | mcpMCP Symbiotic CLI MCP Server for security scanning and analysis | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 609 | universal-connector-mcpMCP Security-first MCP server that connects any OpenAPI, GraphQL, gRPC or SOAP API to AI agents. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 610 | BoltworkMCP AI services via Bitcoin Lightning — PDF summarisation, code review, translation and more. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 611 | Domain FinderMCP Check if a brand name is free across domains, GitHub, npm and PyPI, and suggest available names. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 612 | Company filing and CVE evidence snapshotsMCP Company filing/CVE snapshots, status and optional feedback. Remote MCP or local stdio. Free Phase A. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 613 | myopicMCP Code-review MCP: review a GitLab MR or GitHub PR against the whole codebase, not just the diff. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 614 | trustsourceMCP x402-paid domain verification for AI agents — trustscore, SSL, security headers, robots. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 615 | SAST MCP ServerMCP 11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 616 | freshdeps-mcpMCP Live npm/PyPI dependency-health verdicts so AI agents stop recommending stale or CVE'd packages | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 617 | SonarQube MCP ServerMCP Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 618 | i18n-agent-actionMCP An i18n github action for language translate | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 619 | arachne-mcpMCP Arachne MCP — scraping, browser, vision, OCR, RAG, Social Research, GitHub + VRT (56 tools). | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 620 | thrdMCP Thrd MCP: agent email tools for events/threads, safe send/reply, usage, trust and security. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 621 | Abnormal Security MCPMCP Abnormal Security email threats, cases, and reporting in your terminal and your AI agents. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 622 | agent-harnessesMCP Agent-harness picks, decision guides, and setup templates; live GitHub/HN discovery. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 623 | agentpay-sentinel-mcpMCP Security guardrails for AI agent payments | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 624 | acceleratorsMCP 36 tools for AWS infrastructure, security compliance, AI workflows, and ACI governance. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 625 | mcpsentryMCP Security scanner and runtime proxy for MCP servers. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 626 | skillguardMCP Security scanner for third-party AI agent-skill files (SKILL.md, hooks, scripts) via MCP. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 627 | security-orchestraMCP Multi-agent MCP platform for data centers and critical power. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 628 | vaspera-hardeningMCP Enterprise certification for codebases with multi-agent security, reliability, and quality audits | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 629 | Hated WoW MCPMCP MCP server for WoW addons: Lua API, Blizzard UI source, CVars, art lookup, linting, scaffolding. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 630 | git-mcp-serverMCP MCP server for GitLab and GitHub | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 631 | reposcoutMCP Discover, enrich, and rank GitHub repos for an objective with weighted, evidence-based scoring. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 632 | JMeter DocsMCP Apache JMeter community documentation, conversion tools, linters, and calculators for AI agents. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 633 | PageLens AIMCP AI website audit: security, SEO, performance, UX and accessibility checks with actionable fixes. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 634 | Tenpace Review RouterMCP Human-authenticated setup for routing GitHub pull requests into the right Slack channel. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 635 | notebooklm-mcp-secureMCP Security-hardened NotebookLM MCP with post-quantum encryption | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 636 | URL Safety Validator MCPMCP AI URL safety validator: SAFE/SUSPICIOUS/DANGEROUS verdict, trust score, threat intel. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 637 | Domain SecurityMCP Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 638 | Service Public FranceMCP French public services: tax, property, admin, education, healthcare, security, risks, legal texts | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 639 | agentlockMCP Security gateway for AI agents: policy, approval, and audited execution, no secrets shared. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 640 | EverThreadMCP Plain-English website security check for agents: certificate, headers, scripts, forms, spam. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 641 | InsAIts - AI Communication Security MonitorMCP Runtime AI-to-AI security monitor. 23 anomaly types, OWASP MCP Top 10 coverage. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 642 | Grok BuildMCP Run the Grok Build CLI as MCP tools: agent runs with live progress, code review, web research. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 643 | Bright SecurityMCP AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 644 | flutter_structure_mcpMCP Audit architecture, security, memory, and code quality in Flutter, Laravel, Node, Python, & Vue. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 645 | greadMCP An MCP server that gives your AI access to the source code and docs of all public github repos | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 646 | update-hijack-pocMCP PoC benign MCP server for update-hijack security research | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 647 | nel-veilMCP Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 648 | open-registry-pocMCP PoC: Open Registry supply chain — unvetted server listing (security research) | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 649 | Nekzus-npm-sentinel-mcpMCP Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend… | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 650 | Signal OracleMCP Pay-per-call change-intelligence feeds for AI agents over x402 (deps, security, regs, tariffs) | 50% | REMOTELOCAL | DECLARED | 5d ago |
Coverage = share of this task's required capabilities that an agent or tool documents. For AI agents, capabilities are those stated on the vendor's website; for tools, they are matched automatically from the publisher's description (keyword method, low confidence).