AI capabilities
What is an MCP server?
Exposing the tool's capabilities over Model Context Protocol so AI agents can call it directly.
MCP is an open protocol that lets an AI agent discover and invoke external tools. A vendor shipping an MCP server means an agent can request a scan, read findings and act on them as part of its own loop, without a bespoke integration.
In practice this is how a scanner becomes part of an agentic workflow rather than only a downstream gate, since the agent can check its work before proposing it. It supplements a CI gate rather than replacing one: the check only happens if the agent is set up to call it, and the agent's token becomes another credential with access to your findings.
Not the same as AI Agent Guardrails: AI agent guardrails are about checking an agent's code while it works, which some tools do through hooks or a plugin instead of MCP. An MCP server can also simply let an agent read findings or start a scan.
What to look for
- Which operations the server exposes, from read-only findings to scanning and remediation
- Which agent clients are known to work with it
- Authentication model and what scope the agent's token carries
- Whether MCP access is included in your plan tier
Best 18 code quality, security and code review tools with an MCP server
Every tool in the directory whose documentation covers this, 13 fully and 5 partially. Full support is shown first. Shown in a random order that changes on every visit, so no tool gets an advantage from its position.
Support is not the same as parity, since some implementations are narrower in scope, gated to a higher plan tier, or maintained only for existing customers. The note under each tool is what its own documentation describes.
Code Security Platform
AikidoAikido MCP Plugin exposes its own MCP server (scan, list/ignore issues, login tools) for AI agents
Code Security Platform
Checkmarx OneCheckmarx Developer Assist is delivered as an agentic MCP server for IDE-based AI assistants.
Code Quality Platform
CodacyMCP integration for Copilot, Cursor, Windsurf, Claude Code and Claude.ai; included free.
PR Review Tool
CodeAnt AIMCP Server integration listed for AI-assisted workflows; no tool list or transport documented
Code Quality Platform
CodeSceneCodeHealth MCP server executes locally on-machine, exposes code_health_review and a review-plan-refactor-remeasure loop
Code Security Platform
CorgeaCorgea exposes its own MCP server: 9 read-only tools for scans, issues, dependencies, blocking rules
Code Quality Platform
DeepSourcemcp.deepsource.com with 30 tools, OAuth and PAT auth; optional admin toggle on Enterprise Server v5.1.0+.
Code Security Platform
GitHub Advanced SecurityOfficial GitHub-maintained MCP server exposes code_security, secret_protection, dependabot toolsets; code scanning needs GHAS
PR Review Tool
GreptileHosted MCP server at api.greptile.com/mcp, API-key authenticated, exposing 11 tools
PR Review Tool
QodoContext Engine MCP exposes deep_research, context_ask, get_context; local and remote MCPs in IDE
Code Security Platform
SemgrepGuardian MCP server; Claude Code uses Semgrep's hosted remote server via OAuth with a fixed ruleset.
Code Security Platform
SnykLocal MCP server runs the Snyk CLI with scan tools; no hosted or remote MCP server offered.
Code Quality Platform
SonarQubeSonarQube MCP Server for agent context; Vortex MCP integration tied to Sonar Agent Essentials.
AI Coding Agent
ChatGPT / CodexPartialCodex consumes MCP servers (e.g. Linear); no MCP server exposing review or scan findings documented.
AI Coding Agent
Claude CodePartialConsumes MCP servers with first-use trust verification; no MCP server exposing review findings documented.
PR Review Tool
CodeRabbitPartialActs as MCP client consuming external servers (Pro 5, Pro+ 15, Enterprise 20); exposes none
PR Review Tool
Cursor (Bugbot)PartialBugbot consumes configured MCP servers; no MCP server exposing findings. Team and Enterprise only.
AI Coding Agent
Gemini Code AssistPartialAgent Mode and Gemini CLI consume local and remote MCP servers; no MCP server exposing review findings.
Related terms
FAQ
What is an MCP server?
Exposing the tool's capabilities over Model Context Protocol so AI agents can call it directly.
How many tools in the directory offer an MCP server?
18 of the 20 tools in this directory offer an MCP server, 13 fully and 5 partially:
Support is not the same as parity, since some implementations are narrower in scope, gated to a higher plan tier, or maintained only for existing customers. The note under each tool is what its own documentation describes.
What should you check when comparing tools with an MCP server?
Four things:
- Which operations the server exposes, from read-only findings to scanning and remediation
- Which agent clients are known to work with it
- Authentication model and what scope the agent's token carries
- Whether MCP access is included in your plan tier