Code and development

Security scanning: tools for AI agents

Scan code, dependencies, URLs and files for vulnerabilities and malware. The best matches among the MCP servers, command-line tools, web APIs and Claude Code plugins AptLynx checks every night, working ones first.

MCP servers

• Contrastcyber Api: check_injection Verified publisher · Working at last check
  Scan source code for injection vulnerabilities: SQL injection, command injection, path traversal via unsafe string concatenation/unsanitized input. Supports…
• Agentaegis: sast_scan Working at last check
  Static analysis of source code or an https git repo for security flaws (Semgrep): injection, unsafe deserialization, path traversal, crypto misuse. Python,…
• Forcedream: forcedream_security_scan Verified publisher · Working at last check
  Real security review for code: OWASP Top 10, injection, secrets, and dependency risks. Cross-references imported dependencies against OSV.dev (Google's Open…
• Depscout: check_dependencies Working at last check
  Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj)…
• io.github.4hmetuyar/secret-scanner Runs on your computer
  Scans files for leaked secrets and API keys
• Data Agents: check_dependency_vulnerabilities Verified publisher · Working at last check
  Known security vulnerabilities (CVE/GHSA) for a specific package version, with fixed versions. Source: OSV.dev. Price: $0.01 USDC per call via x402 (charged…
• Nslookup: security_scan Working at last check
  Run a security scan on a domain to detect DNS misconfigurations, missing SPF/DKIM/DMARC records, cookie security issues, and other web security…
• io.github.GuardBee/secret-scanner Runs on your computer
  Scans files for leaked secrets and API keys
• io.github.thegridwork/license Runs on your computer
  Scan dependencies for license compliance — copyleft conflicts, unknown licenses, risk.
• Web Search Data Api: cve Verified publisher · Working at last check
  CVE vulnerability lookup. Returns security vulnerability records by CVE id or keyword from the NIST National Vulnerability Database and GitHub Security…
• Youraitools Hub: scan_dependencies Verified publisher · Working at last check
  Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known…
• Husk Runs on your computer
  Local-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs
• Cve Vulnerability Lookup: audit_dependencies Verified publisher · Working at last check
  Audit a whole dependency manifest for known vulnerabilities in one call. Paste a package.json (as 'manifest'), or pass a 'dependencies' array of {name,…
• Bug Detector Runs on your computer
  Analyzes code for bugs, security vulnerabilities, and code smells

Command-line tools

• dep-scan
  Security and risk audit tool for project dependencies and container images
• safety
  Checks Python dependencies for known vulnerabilities and suggests remediations
• snyk-cli
  Scans and monitors projects for security vulnerabilities security monitor vulnerabilities snyk
• bomber
  Scans Software Bill of Materials for security vulnerabilities game 游戏
• pip-audit
  Audits Python environments and dependency trees for known vulnerabilities
• trivy
  Vulnerability scanner for container images, file systems, and Git repos docker security cli golang containers infrastructure-as-code vulnerability sbom…

Web APIs

• On-Demand Scanning API
  A service to scan container images for vulnerabilities. analytics media
• Web Security Scanner API
  Scans your Compute and App Engine apps for common web vulnerabilities. analytics media
• Cisco PSIRT openVuln API
  The Cisco Product Security Incident Response Team (PSIRT) openVuln API is a RESTful API that allows customers to obtain Cisco Security Vulnerability…
• Security Center
  API spec for Microsoft.Security (Azure Security Center) resource provider cloud
• CodeScan API
  Manage your Hosted CodeScan Service developer_tools
• SqlManagementClient
  The Azure SQL Database management API provides a RESTful set of web APIs that interact with Azure SQL Database services to manage your databases. The API…

Claude Code plugins

• claude-security
  Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is…
• aws-agents-for-devsecops
  Investigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with AWS DevOps Agent and…
• sonatype-guide
  Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version…
• semgrep
  Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start. security

Search for something more specific

Related topics

• GitHub and code hosting
• Databases
• Cloud and hosting
• Docker and Kubernetes
• Errors and monitoring
• APIs and testing
• Developer documentation
• Running code
• Design tools
• Mobile apps

Listing text is written by each tool's maker; AptLynx lists tools and does not vouch for them.