What is a #sast MCP server?
An MCP server tagged #sast implements the Model Context Protocol so AI assistants like Claude, Cursor, and VS Code can access sast-related tools, data, or APIs.
10 #sast MCP Servers & Clients
Every MCP server and client below is tagged #sast — install one to give Claude, Cursor, VS Code, or any other MCP-compatible client access to sast tools.
All
JADX-AI-MCP (Part of Zin MCP Suite)
zinja-coder
Plugin for JADX to integrate MCP server
Added last year
SonarQube
SonarSource
Official SonarQube MCP Server for code quality and security in AI agents
Added last year
Skylos
duriantaco
Dead code detection, security scanning, and code quality analysis for Python, TypeScript, and Go. 98% recall with 3x fewer false positives than Vulture. 5 tools: analyze, security_scan, quality_check, secrets_scan, remediate. AI-powered auto-fix agent.
Added 5 months ago
Zfuzz
Zfuzz-dev
Real security scanners for AI coding agents: SAST (441 rules), secret detection (419+ patterns), dependency CVEs, MCP/skill vetting, MITRE ATT&CK. Real scanners,
Added 27 days ago
Mcp Semgrep Scanner
archimedes-market
Curated by Archimedes Market. Static security analysis exposed as MCP tools. OWASP top 10, secrets detection, custom rule packs. Baseline scanning focuses on newly-introduced findings. Built for production-grade security review. → archimedes.market/assets/21c4a8ab-80dc-4a69-8444-
Added 2 months ago
Heimdall — Mcp Security Scanner
caglarbozkurt
Security scanner for MCP servers — vet an MCP before you wire it into an agent. Detects prompt-injection, credential exfiltration (via taint analysis), RCE, and supply-chain risks, and catches cross-server exfil chains no single server reveals. Zero-dependency local CLI, SARIF ou
Added 21 days ago
Code Pathfinder
shivasurya
Code Pathfinder's MCP Server provides AI coding assistants like Claude Code with deep semantic understanding of codebases through call graph analysis, symbol search, and dependency tracking. It enables developers to ask natural language questions like "who calls this function?" i
Added 6 months ago
Twira
TwiraHQ
Coding power tools for AI agents. 18 deterministic MCP tools: code-graph search, SAST, blast radius, wire-level PII redaction, signed audit chain. Works with Claude Code, Codex, Gemini, Cursor. Free tier on install.
Added 2 months ago
GuardVibe — Security MCP for Vibe Coding
goklab
Security MCP server with 300+ rules for AI-generated code. Scans Next.js, Supabase, Clerk, Stripe, Prisma, Hono, GraphQL, and 20+ modules. Zero config, runs locally.
Added 4 months ago
Cycode
cycodehq
Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning
Added last year
Frequently asked questions
Common questions about MCP servers and clients tagged #sast
How many #sast MCP servers and clients are there?
mcp.so currently lists 10 MCP servers and clients tagged #sast.
How do I install a #sast MCP server?
Open any server below and copy its install snippet into Claude Desktop, Cursor, VS Code, or another MCP client's configuration — remote servers need no separate download.