Task · Coding
Best AI agents to scan code for vulnerabilities
This task needs 2 capabilities. 19 tools cover all of them; 916 cover at least one.
| # | Tool | Coverage | Access | Trust | Seen |
|---|---|---|---|---|---|
| 201 | SiteVitalsMCP Monitor website health, uptime, SEO, security and performance via your AI assistant. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 202 | arcstone-mcp-sidecarMCP Deterministic execution boundary and reference MCP sidecar for Arcstone Security Stack | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 203 | AgentSec MCPMCP Security intelligence via x402 on Base. CVE lookup, IP reputation, secret scanning. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 204 | RazielMCP MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 205 | tiger-skillsMCP Provider agnostic skills implementation, with skills sourced from local paths or GitHub repositories | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 206 | raven-nest-mcpMCP AI-driven penetration testing - 22 security tools behind safety-hardened MCP endpoints | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 207 | intelthreadlinqs-mcpMCP Threadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 208 | changelog-hqMCP Auto-generate changelogs from GitHub PRs with AI-powered categorization and rewriting. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 209 | Writing Style CheckerMCP Prose linter + AI-slop detector: weasel words, passive voice, hedging, and research-cited AI tells | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 210 | GitHubInsightsMCP GitHub repo analytics, trending repos, contributor stats, and language breakdowns. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 211 | theabbieMCP Live info about theabbie (Abhishek Chaudhary) from theabbie.github.io/about.json | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 212 | github-repo-mcpMCP MCP server for GitHub repo health, commit summaries, issue triage, and RAG Q&A. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 213 | DEPRECATEDMCP DEPRECATED: Please use io.github.tencent-lexiang/lexiang-mcp-server instead. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 214 | Tenpace Review RouterMCP Human-authenticated setup for routing GitHub pull requests into the right Slack channel. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 215 | LatchkeyMCP Triage failing GitHub Actions jobs and see what self-heal repaired, in natural language. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 216 | TesterArmyMCP Agents that test your web and mobile app like real users, on every pull request. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 217 | wass-mcpMCP MCP server for web application security scanning | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 218 | spendtronMCP Finds the GitHub Actions workflow eating your CI bill and suggests fix diffs, verified against runs. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 219 | Security RecipesMCP Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 220 | Advanced GitLab MCP serverMCP 58 CQRS tools exposing 230 GitLab operations across 26 entity types | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 221 | mcp-tenant-isolationMCP Static analysis scanner for MCP server code and multi-tenant SaaS applications. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 222 | create-starterMCP Scaffold Starter Series projects and check release, deployment, security, and agent instructions. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 223 | starlogMCP Vet a package (CVEs, license, maintenance) before your AI agent uses it, plus capability discovery. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 224 | GuardianShieldMCP AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 225 | PerceptdotMCP B2A2H platform — tracks GA4, Vercel deployments, GitHub workflows with AI-powered ROI analytics. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 226 | MCP ShieldMCP Security scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 227 | n0s1-mcpMCP Secret scanner for Slack, Jira, Confluence, Asana, Wrike, Linear, Zendesk, GitHub and GitLab | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 228 | mceptionMCP Audits other MCP servers for security risks. Returns safe / caution / unsafe / inconclusive. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 229 | Snyk API & Web MCP ServerMCP MCP server for Snyk API & Web — DAST scanning, findings management, and vulnerability triage | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 230 | MCPProxyMCP Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 231 | DBeast PostgreSQL MCPMCP PostgreSQL MCP server for schema, query, health, security, and performance analysis. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 232 | Reversecore MCPMCP Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 233 | agent-security-scanner-mcpMCP Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 234 | mcpMCP AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 235 | github-project-infoMCP Read public GitHub Projects v2 boards without auth — items, fields, story points, priority. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 236 | AgentGuard — security checks for AI agentsMCP Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev). | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 237 | Symfony Agent MCPMCP Read-only Symfony introspection: routes, services, entities, Doctrine, security, Twig and more. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 238 | GhostFreeMCP MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 239 | CyberLensMCP Security scanning for websites, public repositories, and Open CLAW skills. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 240 | alphakey-mcp-serverMCP AlphaKey IDaaS MCP Server — Manage SSO, MFA, users, apps, and security policies through AI IDE | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 241 | sentrysurfaceMCP Cybersecurity MCP server for URL scanning, threat intelligence, and domain reputation. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 242 | selvageMCP An LLM-based code review MCP server with AST-powered smart context extraction | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 243 | weavatrix-onlineMCP Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 244 | Security Intel MCPMCP CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 245 | securityscanMCP Security for AI agents: MCP audits, secret redaction, skill vetting, network scans, agent checkout. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 246 | Promptlint MCPMCP Static linter for AI prompts: contradictions, redundancy, ambiguity, and fluff. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 247 | MooringMCP Git and GitHub operations — repo status, diffs, branches, PRs, issues, and Actions. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 248 | Feedback Synthesis MCPMCP Synthesize GitHub Issues, HN and App Store reviews into ranked pain clusters. Pay-per-call x402. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 249 | Data-grounded sprint retroMCP Data-grounded sprint retrospectives from your Jira, GitHub, and Slack activity. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 250 | Standup from your activityMCP Generate your daily standup from real GitHub, Jira, Linear, and Slack activity. | 50% | REMOTELOCAL | DECLARED | 5d ago |
Coverage = share of this task's required capabilities that an agent or tool documents. For AI agents, capabilities are those stated on the vendor's website; for tools, they are matched automatically from the publisher's description (keyword method, low confidence).