Open-Source OSV-Compliant Model Context Protocol (MCP) Vulnerability Advisory Database
Find vulnerabilities and insecure patterns in code.
Open-Source OSV-Compliant Model Context Protocol (MCP) Vulnerability Advisory Database
Security scanner for MCP servers — know what a server can do before you install it.
Local runtime security scanner for MCP servers — known-CVE checks, one-click fixes
Static analysis and drift detection for the surface an MCP server exposes to an agent.
Runtime probe for MCP cross-tenant response leaking via JSON-RPC id collision (CVE-2026-111770)
Security scanner for MCP server deployments
Static readiness and security checks for MCP Apps projects
Finds what will hurt in a Django project: cascades, N+1, unsafe migrations, tenant leaks.
Code graph for AI agents: impact, call tracing in Python, TypeScript, Go; opt-in JSON and YAML keys
Django ORM static analysis MCP. Models, relations, migrations, indexes, signals, N+1.
Automated red-team checks for trading backtests: lookahead lint, Deflated Sharpe, costs. Local.
Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.
WAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI
Deterministic repository change-impact analysis for engineers and coding agents.
Static code map generator: MAP.md + map.json for any repo, plus a Claude Code /map plugin
Approved acceptance criteria served over MCP to Claude Code, Cursor, or Codex. Git-only, sealed.
Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.
Twelve tools to inspect CRAP scores, find work, and check edited functions against their ceiling.
Which Python library APIs changed after your model's training cutoff (static diff, no model calls)
Source-linked CodeGraph exploration, ranked search, and static navigation for coding agents.