#static-analysis

R

Reverse engineer anything with agents, from app behavior down to native binaries.

C

Local-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on…

R

Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.

J

Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.

G

Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server…

F

Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused…

S

Real-time architectural sensor that helps AI agents close the feedback loop, enabling recursive self-improvement of code quality. Pure Rust.

R

The ripgrep of AI context: a zero-dependency C++23 CLI + MCP server for coding agents. Find what you want without reading the repo, then check you built what you meant — blast…

Q

All-in-One malware analysis tool.

B

AI code reviews grounded in 12 classic engineering books — decay risk diagnostics with book citations, severity labels, and 6 analysis modes including full-sweep auto-fix

M

AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an always-on AI attack-signature…

S

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed,…

A

Graph-powered code intelligence engine — indexes codebases into a knowledge graph, exposed via MCP tools for AI agents and a CLI for developers.

C

Local code intelligence MCP server and CLI for AI coding agents

O

Open source code review that runs in your coding agent before you push. Scanners plus a separate AI reviewer, on your own login, no key.

S

Official SonarQube MCP Server for code quality and security in AI agents

H

Your AI coding agent is only as reliable as the harness around it. Measure that harness in seconds with harness-score.

R

Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 commands, 246 MCP tools, change-safety gates, audit evidence, zero API keys.

O

Deterministic, local-first memory and guardrails for AI coding agents with no LLM in the hot path.

C

Repo dependency analyzer with **blast-radius impact scoring** for AI-assisted development.

A

Evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.

G

Local-only Go static analysis engine with a built-in MCP server. Gives AI coding agents deterministic structural awareness: call graphs, impact analysis, symbol search, and more.

P

Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call unfinished work done, and a lessons…

R

Offline security scanner for AI-agent repos, skills, plugins, and MCP servers.

T

Framework-aware code intelligence MCP server — 88 framework integrations, 81 languages, 72.7% fewer input tokens to review a pull request, comprehension at parity

C

Codebadger is a containerized Model Context Protocol (MCP) server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through Joern…

A

MCP server that orchestrates language servers into agent-native workflows. 65 tools, 30 CI-verified languages.

A

Graph-native code intelligence that replaces embedding-based RAG with deterministic program understanding.

B

Compiler-backed coding agent that compiles your codebase into a resolved, queryable map of calls, data flow, control flow, and class hierarchy first; then it reads, explains,…

D

Static decompiler, deobfuscator, and unpacker for reverse engineering and malware analysis: Python decompiler (3.8-3.15), PyInstaller extractor, PyArmor unpacker, JavaScript…