Static Analysis MCP

What it does

Static Analysis MCP connects your AI to a comprehensive suite of static analysis tools. It allows the AI to perform deep security vulnerability detection, code quality audits, and complexity analysis across a vast array of programming languages, transforming the LLM into a professional security auditor and code reviewer.

Tools

• analyze_file: Performs a deep dive into a single file for quality and security issues.
• analyze_security: Scans code for SQL injection, XSS, and other critical vulnerabilities.
• analyze_complexity: Measures cyclomatic and cognitive complexity to identify technical debt.
• code_review: Provides a CodeRabbit-style review with actionable AI fix suggestions.
• check_dependencies: Scans project dependencies for outdated packages and known CVEs.
• analyze_project: Generates a comprehensive project-level health score and action plan.

Installation

Add the following to your claude_desktop_config.json:

{
  "mcpServers": {
    "static-analysis": {
      "command": "npx",
      "args": ["static-analysis-mcp"]
    }
  }
}

Supported hosts

Confirmed support for Claude Desktop via npm installation.