Explore
Every listed MCP server and skill. Filter by where it runs, what it needs, and how it is licensed.
Every listed MCP server and skill. Filter by where it runs, what it needs, and how it is licensed.
Reverse engineer anything with agents, from app behavior down to native binaries.
node.js/MIT/★ 217k/no key
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI
skill/MIT/★ 5.1k/no key
Writes custom Semgrep rules that detect security vulnerabilities, bug patterns and code patterns.
skill/CC-BY-SA-4.0/★ 7.5k/no key
The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.
node.js/MIT/★ 858/no key
SonarSource's MCP server for issues, quality gates, security hotspots and coverage on SonarQube Cloud or Server.
official/docker/Source-available/★ 664/needs sonarqube
Real-time architectural sensor that helps AI agents close the feedback loop, enabling recursive self-improvement of code quality. Pure Rust.
skill/MIT/★ 3.3k/no key
AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an always-on AI attack-signature scanner and native Rust
python/AGPL-3.0/★ 1.0k/no key
AI-powered spec generation and review using multi-repo code graph intelligence for backend teams that ship to production.
python/Apache-2.0/★ 630/no key
Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 commands, 246 MCP tools, change-safety gates, audit evidence, zero API keys.
python/Apache-2.0/★ 517/no key
Static analysis for AI agent configs, tool descriptions, and system prompts — catches vague tool descriptions, missing stop conditions, and schema gaps before they reach runtime. Zero-LLM, determinist
skill/Apache-2.0/★ 140/no key
Local-only Go static analysis engine with a built-in MCP server. Gives AI coding agents deterministic structural awareness: call graphs, impact analysis, symbol search, and more.
go/MIT/★ 229/no key
Who stands behind it
Who stands behind it
