Every listed MCP server and skill. Filter by where it runs, what it needs, and how it is licensed.
1–12 of 16 tools for “static-analysis”
Clear allGhidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker
python/Apache-2.0/★ 5.6k/no key
All-in-One malware analysis tool.
skill/GPL-3.0/★ 2.1k/no key
Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 commands, 246 MCP tools, change-safety gates, audit evidence, zero API keys.
python/Apache-2.0/★ 517/no key
SonarSource's MCP server for issues, quality gates, security hotspots and coverage on SonarQube Cloud or Server.
official/docker/Source-available/★ 664/needs sonarqube
Deterministic, local-first memory and guardrails for AI coding agents with no LLM in the hot path.
node.js/MIT/★ 320/no key
AI-powered spec generation and review using multi-repo code graph intelligence for backend teams that ship to production.
python/Apache-2.0/★ 630/no key
Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS, runs offline.
python/MIT/★ 136/no key
Local-only Go static analysis engine with a built-in MCP server. Gives AI coding agents deterministic structural awareness: call graphs, impact analysis, symbol search, and more.
go/MIT/★ 229/no key
Offline MCP server for Basecoat UI (shadcn/ui look, no React): templates, macro layouts, theming/dark-mode contract, static validation.
node.js/MIT/★ 46/no key
🦡 codebadger is a containerized Model Context Protocol (MCP) server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through Joern Code Property Graphs (CP
skill/GPL-3.0/★ 173/no key
MCP server for golang projects development: Expand AI Code Agent ability boundary to have a semantic understanding and determinisic information for golang projects.
go/BSD-3-Clause/★ 59/no key
Local-first static analysis that turns source code into deterministic, source-grounded workflow maps for coding agents via MCP.
python/Apache-2.0/★ 42/no key
Who stands behind it
Who stands behind it
