Task · Coding
Best AI agents to scan code for vulnerabilities
This task needs 2 capabilities. 19 tools cover all of them; 917 cover at least one.
| # | Tool | Coverage | Access | Trust | Seen |
|---|---|---|---|---|---|
| 251 | Feedback Synthesis MCPMCP Synthesize GitHub Issues, HN and App Store reviews into ranked pain clusters. Pay-per-call x402. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 252 | Project ContextMCP Safely manage repository-scoped issues across Linear, GitHub Issues, and Jira Cloud. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 253 | Data-grounded sprint retroMCP Data-grounded sprint retrospectives from your Jira, GitHub, and Slack activity. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 254 | NPMScanMCP Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 255 | code-sentinelMCP Code quality analysis MCP server - detects security issues, deceptive patterns, and placeholders | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 256 | mcp-oss-onrampMCP MCP server to scout beginner-friendly OSS issues with high precision using GitHub GraphQL | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 257 | SheriffMCP MCP server for fixing static analysis issues from SARIF reports with AI agents | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 258 | mcp-guardianMCP Security, cost, and health governance proxy for MCP infrastructure | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 259 | 4da-mcp-serverMCP Dependency intelligence for AI agents. CVE scanning, health checks, upgrade planning. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 260 | mcpMCP RunSec MCP server for workspace security scanning and remediation workflows. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 261 | Askew x402MCP DeFi yields, staking routing, semantic research & security intel via x402 micro-payments on Base | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 262 | vuln-intelMCP Hosted CVE + bug-bounty-mechanic MCP: exploitation-first ranking, CVE fact-check, mechanic transfer | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 263 | githubMCP GitHub analytics - repos, PRs, issues, releases, contributors | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 264 | arcwall-securityMCP Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 265 | depMCP License check, outdated deps, security for AI agents | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 266 | ZettelForgeMCP Agentic memory for cyber threat intelligence. STIX graphs, actor aliasing, offline RAG, Sigma/YARA. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 267 | MCP OpenClaw ExtensionsMCP 138-tool MCP server for AI agent firms: security, A2A, Hebbian memory, fleet mgmt | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 268 | Wolfpack IntelligenceMCP On-chain security and market intelligence for trading agents on Base. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 269 | qualys-mcpMCP Full Qualys portal management over MCP: VMDR, PC, WAS, Cloud Agent, Container Security & more | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 270 | sophos-central-mcpMCP MCP server for Sophos Central — endpoint security, XDR/MDR, and MSSP multi-tenant ops | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 271 | standupbotMCP Turns your GitHub activity into a daily standup — commits, PRs, reviews & issues. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 272 | Llama AI MCPMCP Use Llama AI Chat to test Meta Llama 4 Maverick on code review, long PDFs, and screenshots. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 273 | pyresec-agentMCP SAST and SCA security auditing via x402 USDC on Base. Quick scans, deep audits, remediation. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 274 | promptrejectormcpMCP Security gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 275 | Multi-MCPMCP Multi-model AI orchestration MCP server with code review, compare, and debate tools. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 276 | cve-triageMCP x402 CVE triage MCP: EPSS + CISA KEV -> exploit priority, $0.01 per query. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 277 | tech-riskMCP x402 MCP for agents: crypto prices, funding, DeFi yields, Polymarket, Base RPC + MCP security. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 278 | PolarityMCP Real-time threat intelligence lookups and IOC parsing from your self-hosted Polarity instance. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 279 | IMPOCOR-AI NexusMCP Agent-native security, trust, reliability, data and procurement tools for AI workflows. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 280 | prodlintMCP Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 281 | AgentSecurityLens MCP Security Trust CheckMCP MCP security trust-check for agents before installing MCPs, Skills or tools. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 282 | UkhsaMCP UK Health Security Agency (UKHSA) data dashboard MCP — keyless. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 283 | UrlhausMCP URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth) | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 284 | W3cMCP W3C MCP — web-standards lookup over w3c/browser-specs (GitHub, CF-reachable). | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 285 | SuperheroMCP Superhero MCP — wraps akabab.github.io/superhero-api (free, no auth) | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 286 | Tldr PagesMCP tldr-pages MCP — fetched from the canonical github repo. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 287 | Tn DmvMCP Tennessee DMV MCP — Department of Safety and Homeland Security: the 186 driver service | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 288 | Sec 13fMCP SEC 13F — institutional ownership, asked security-first. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 289 | Sec NportMCP SEC Form N-PORT — fund and ETF holdings, asked security-first. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 290 | Security FeedsMCP Security Feeds MCP. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 291 | Osv DevMCP OSV.dev — Google's open-source vulnerability database | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 292 | OsvMCP OSV.dev (Open Source Vulnerabilities) MCP. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 293 | OwaspMCP OWASP MCP — keyless. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 294 | NvdMCP NVD MCP — wraps the NIST National Vulnerability Database API. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 295 | Mozilla ObservatoryMCP MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from… | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 296 | Mitre AttckMCP MITRE ATT&CK MCP — STIX bundles from github.com/mitre/cti. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 297 | MalwarebazaarMCP MalwareBazaar MCP — abuse.ch malware sample database (free, key required) | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 298 | GithubMCP GitHub MCP — wraps the GitHub public REST API (no auth required for public endpoints) | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 299 | Gitlab PublicMCP GitLab Public MCP — wraps the GitLab REST API v4 (public endpoints, no auth) | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 300 | GitlabMCP GitLab MCP — wraps the GitLab REST API v4 (BYO API key) | 50% | REMOTELOCAL | DECLARED | 5d ago |
Coverage = share of this task's required capabilities that an agent or tool documents. For AI agents, capabilities are those stated on the vendor's website; for tools, they are matched automatically from the publisher's description (keyword method, low confidence).