8 tagged sast, measured the same way as everything else here.
MCP server Claude CodeCodexCursor +2
Open-source, local-first static analysis and PR gates for Python, TypeScript/JavaScript, Go, Java, Kotlin, PHP, Rust, Dart, C#, C++, and Shell. Finds dead code, security issues, secrets, quality regressions, and AI-code mistakes. Runs locally from the skylos Python package. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
Python SDK for code-pathfinder static analysis for modern security teams. Runs locally from the codepathfinder Python package.
MCP server Claude CodeCodexCursor +2
The static analyzer your AI agent reads — fix-ready, machine-readable scan reports over MCP. Runs locally from the codemore npm package.
MCP server Claude CodeCodexCursor +2
MCP server "farofino-mcp" as configured in italoag/farofino-mcp. Runs locally from the farofino-mcp Python package.
MCP server Claude CodeCodexCursor +2
Webhook signature-verification audit. Stripe, GitHub, Shopify, Twilio +17. Local. Deterministic. Runs locally from the @hookwarden/mcp npm package.
MCP server Claude CodeCodexCursor +2
A deterministic policy firewall for AI agent tool calls — blocks, warns, or allows based on rules you write, not a risk score. Runs locally from the guardrail-mcp Python package.
smakarim/mcp-n8n-security-scanner
MCP server Claude CodeCodexCursor +2
MCP server "mcp-n8n-security-scanner" as configured in smakarim/mcp-n8n-security-scanner. Runs locally from the mcp-n8n-security-scanner Python package.
MCP server Claude CodeCodexCursor +2
Persistent memory hooks for Claude Code, Codex, Grok, and Cursor (/clear-safe context compression). Runs locally from the throughline npm package.