SonarSource/sonarqube-mcp-server

SonarQube Plugin for AI Agents

Catch and fix the code-quality issues AI coding agents leave behind - dead code, unsafe casts, swallowed errors, duplication, security risks, and more. 50+ deterministic rules across 10 language targets, with CLI, CI, and GitHub Actions. No LLM at runtime. MIT.

Local-first MCP plugin for continuous software-quality review by AI coding agents, powered by Jev.

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.

MCP Server Semgrep is a [Model Context Protocol](https://modelcontextprotocol.io) compliant server that integrates the powerful Semgrep static analysis tool with AI assistants like Anthropic Claude. It enables advanced code analysis, security vulnerability detection, and code quality improvements directly through a conversational interface.

Pragmatic AI Labs MCP Agent Toolkit - An MCP Server designed to make code with agents more deterministic

60-rule static security scanner, MCP server & skill poisoning auditor for AI-generated codebases (Claude Code, Codex, Cursor).

Local-first MCP security scanner for AI-generated apps: four open-source engines plus the Synvoya engine. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.