10 个#sast MCP 服务器和客户端

以下 MCP 服务器和客户端均标记为 #sast——安装后即可让 Claude、Cursor、VS Code 等支持 MCP 的客户端获得 sast 相关能力。

JADX-AI-MCP (Part of Zin MCP Suite)

zinja-coder

Plugin for JADX to integrate MCP server

创建于 2年前

SonarQube

SonarSource

Official SonarQube MCP Server for code quality and security in AI agents

创建于去年

Code Pathfinder

shivasurya

Code Pathfinder's MCP Server provides AI coding assistants like Claude Code with deep semantic understanding of codebases through call graph analysis, symbol search, and dependency tracking. It enables developers to ask natural language questions like "who calls this function?" i

创建于 9个月前

Zfuzz

Zfuzz-dev

Real security scanners for AI coding agents: SAST (441 rules), secret detection (419+ patterns), dependency CVEs, MCP/skill vetting, MITRE ATT&CK. Real scanners,

创建于 4个月前

Heimdall — Mcp Security Scanner

caglarbozkurt

Security scanner for MCP servers — vet an MCP before you wire it into an agent. Detects prompt-injection, credential exfiltration (via taint analysis), RCE, and supply-chain risks, and catches cross-server exfil chains no single server reveals. Zero-dependency local CLI, SARIF ou

创建于 4个月前

Cycode

cycodehq

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning

创建于去年

Skylos

duriantaco

Dead code detection, security scanning, and code quality analysis for Python, TypeScript, and Go. 98% recall with 3x fewer false positives than Vulture. 5 tools: analyze, security_scan, quality_check, secrets_scan, remediate. AI-powered auto-fix agent.

创建于 8个月前

GuardVibe — Security MCP for Vibe Coding

goklab

Security MCP server with 300+ rules for AI-generated code. Scans Next.js, Supabase, Clerk, Stripe, Prisma, Hono, GraphQL, and 20+ modules. Zero config, runs locally.

创建于 7个月前

Twira

TwiraHQ

Coding power tools for AI agents. 18 deterministic MCP tools: code-graph search, SAST, blast radius, wire-level PII redaction, signed audit chain. Works with Claude Code, Codex, Gemini, Cursor. Free tier on install.

创建于 5个月前

Mcp Semgrep Scanner

archimedes-market

Curated by Archimedes Market. Static security analysis exposed as MCP tools. OWASP top 10, secrets detection, custom rule packs. Baseline scanning focuses on newly-introduced findings. Built for production-grade security review. → archimedes.market/assets/21c4a8ab-80dc-4a69-8444-

创建于 5个月前

常见问题

关于 #sast 标签下 MCP 服务器和客户端的常见问题

什么是 #sast MCP 服务器？

标记为 #sast 的 MCP 服务器实现了 Model Context Protocol，让 Claude、Cursor、VS Code 等 AI 助手可以访问 sast 相关的工具、数据或 API。

标记为 #sast 的 MCP 服务器和客户端有多少个？

mcp.so 目前收录了 10 个标记为 #sast 的 MCP 服务器和客户端。

如何安装 #sast MCP 服务器？

打开下方任意服务器页面，将安装配置复制到 Claude Desktop、Cursor、VS Code 或其他 MCP 客户端的配置中即可——远程服务器无需单独下载。

全部