sast mcp servers

duriantaco/skylos

MCP server Claude CodeCodexCursor +2

Open-source, local-first static analysis and PR gates for Python, TypeScript/JavaScript, Go, Java, Kotlin, PHP, Rust, Dart, C#, and Shell. Finds dead code, security issues, secrets, quality regressions, and AI-code mistakes. Runs locally from the skylos Python package. Needs 1 environment variable to run.

shivasurya/code-pathfinder

MCP server Claude CodeCodexCursor +2

Python SDK for code-pathfinder static analysis for modern security teams. Runs locally from the codepathfinder Python package.

eezz4/zzop

MCP server Claude CodeCodexCursor +2

MCP server "zzop" as configured in eezz4/zzop. Launched with https://github.com/eezz4/zzop/releases/download/v0.33.0/zzop-mcp-win32-x64-msvc..

abhinavteja123/codemore

MCP server Claude CodeCodexCursor

The static analyzer your AI agent reads — fix-ready, machine-readable scan reports over MCP. Runs locally from the codemore npm package.

italoag/farofino-mcp

MCP server Claude CodeCodexCursor

MCP server "farofino-mcp" as configured in italoag/farofino-mcp. Runs locally from the farofino-mcp Python package.

Hookwarden/hookwarden

MCP server Claude CodeCodexCursor

Webhook signature-verification audit. Stripe, GitHub, Shopify, Twilio +17. Local. Deterministic. Runs locally from the @hookwarden/mcp npm package.

smakarim/mcp-n8n-security-scanner

MCP server Claude CodeCodexCursor +2

MCP server "mcp-n8n-security-scanner" as configured in smakarim/mcp-n8n-security-scanner. Runs locally from the mcp-n8n-security-scanner Python package.

stevenmcsorley/throughline

MCP server Claude CodeCodexCursor +2

Persistent memory hooks for Claude Code, Codex, Grok, and Cursor (/clear-safe context compression). Runs locally from the throughline npm package.