Task · Coding
Best AI agents to scan code for vulnerabilities
This task needs 2 capabilities. 19 tools cover all of them; 919 cover at least one.
| # | Tool | Coverage | Access | Trust | Seen |
|---|---|---|---|---|---|
| 351 | github-intel-mcpMCP GitHub repository intelligence: search repos, read repo details, and list user repos. No key... | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 352 | github-status-mcpMCP GitHub status from GitHub Status. No key required. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 353 | gitlab-mcpMCP Public GitLab projects and users. No key required. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 354 | dnstwister-mcpMCP DNS twister domain threat intelligence: fuzz domains for typosquatting, check whois. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 355 | cisa-kev-mcpMCP Use this MCP server to CISA Known Exploited Vulnerabilities catalog search. Tools include search... | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 356 | bitbucket-mcpMCP Bitbucket repositories and users. No key required. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 357 | detectzestack-mcpMCP Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 358 | idea-reality-mcpMCP Pre-build reality check. Scans GitHub, HN, npm, PyPI, Product Hunt — returns 0-100 signal. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 359 | gitcontributeMCP Local-first GitHub contribution research workbench | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 360 | VantaMCP Vanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 361 | oracle42-intelligenceMCP AI-powered threat intelligence, smart contract auditing, and cybersecurity OSINT. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 362 | package-guard-mcpMCP Supply-chain guard for AI coding agents: verify packages, check vulns/malware, detect typosquats. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 363 | code-guard-mcpMCP Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 364 | fde-agentMCP Diagnose AI workflows for failure, security, and handoff risks — RED/AMBER/GREEN per node. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 365 | VeriduMCP Multi-reviewer AI code review: surfaces findings the reviewers agree on, disputes flagged. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 366 | secure-flowsMCP MCP server for secureFlows (secure-flows.com). Alias of io.github.michal-lefler/secureflows-mcp. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 367 | secureflows-mcpMCP MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 368 | mcp-serverMCP Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 369 | microquery-mcpMCP SQL over real-world data — FDA, SEC, blockchain, genomics, CVEs, and more. No config. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 370 | PostgreSQL CVE & Release IntelligenceMCP PostgreSQL security for AI agents: CVEs, yanked releases, exploits, and upgrade paths | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 371 | sectoraMCP Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 372 | MCP FortressMCP Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 373 | node-runtimeMCP This package is intended for demonstration only. Maintained by JFrog Security. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 374 | MCP CustomsMCP Inspect an MCP server for common security risks before you install it. Offline, zero telemetry. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 375 | SBOMApp - SBOM Generator & Vulnerability ScannerMCP Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 376 | agent-securityMCP Security scanning and threat detection for AI agents | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 377 | Sanções ONU (Conselho de Segurança)MCP Checks whether a name is on the UN Security Council consolidated sanctions list, for compliance and | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 378 | DNS MCP ServerMCP Real-time DNS security analysis — DNSSEC, email auth, and RDAP. Built for SOC investigations. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 379 | dotrepoMCP Trust-aware repository facts for agents: build, test, docs, license, and security, no scraping. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 380 | apimeshMCP 74 paid web-analysis APIs (SEO, security, TLS, DNS, email) as MCP tools. USDC via x402. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 381 | SentrikMCP Governance runtime for AI-generated code. Enforce compliance and security standards. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 382 | Cordon for MCPMCP Cordon for MCP. Security gateway with policy enforcement, audit log, and HITL approvals. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 383 | mastyf.aiMCP Runtime proxy for MCP security, cost governance & audit | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 384 | Slack ↔ WxO MCP GatewayMCP Lifts WxO Slack limits: every-message wake-up, multi-channel MCP. https://markusvankempen.github.io/ | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 385 | contract-security-scannerMCP MCP smart contract scanner with NEAR-focused security context. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 386 | Outage.MeMCP Live cloud/SaaS outages, provider reliability and exploited CVEs from official status pages and CISA | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 387 | hn-tech-signal-mcpMCP MCP server for tech & AI signal intelligence: HackerNews, arXiv, Lobste.rs and GitHub | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 388 | feedmyagentMCP Technology intelligence feed for AI agents: tech stack, compliance, security. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 389 | Bug DetectorMCP Analyzes code for bugs, security vulnerabilities, and code smells | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 390 | Passiv Web ToolsMCP Free web tools for AI agents: HTML to Markdown, compliance scan, page profile, security headers. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 391 | Nullcone Threat IntelligenceMCP Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 392 | contract-scannerMCP Smart contract security scanner — vulnerabilities, risk scores, and calldata decoding | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 393 | base-security-scanner-mcpMCP MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 394 | AIShield Security ScannerMCP Scans MCP servers for tool poisoning, prompt injection and supply chain risks. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 395 | loaditoutMCP Search and install 20,000+ security-graded MCP servers and agent skills. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 396 | VeragentMCP Check the trust/security score of MCP servers, agents, skills & CLIs before you install them. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 397 | x402-repohealth-mcpMCP Free MCP server: compute a GitHub repo maintenance/abandonment health score from live data. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 398 | gha-doctorMCP Diagnose GitHub Actions CI: lint, flaky tests, wasted minutes, health score. Read-only MCP tools. | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 399 | mcp-graphql-enhancedMCP GraphQL gateway for LLMs. Handles huge GitHub GraphQL & @neo4j/graphql schemas without crashing | 50% | REMOTELOCAL | DECLARED | 5d ago |
| 400 | mcpwatchMCP Audit MCP servers from inside Claude Code. 10 OWASP checks, A-F grade, live leaderboard. | 50% | REMOTELOCAL | DECLARED | 5d ago |
Coverage = share of this task's required capabilities that an agent or tool documents. For AI agents, capabilities are those stated on the vendor's website; for tools, they are matched automatically from the publisher's description (keyword method, low confidence).