Collection
Best MCP servers for code and repositories
MCP servers that read source code, repositories, or pull requests. They typically hold a token with write access to the thing that builds your software. Ranked by OWASP MCP Top 10 score.
Ranked — all 9
- 1com.thenextgennexus/github-mcp-serverGitHub repo analytics: stars, trending, code search, contributor maps for project research.VOUCH81·B
- 2io.github.MasonChow/source-map-parser-mcpParse JavaScript error stack traces back to original source code using source mapsVOUCH79·B
- 3com.searchcode/mcpCode intelligence for LLMs. Analyze, search, and retrieve code from any public git repository.VOUCH73·C
- 4io.github.ako2345/android-security-analyzerMCP server for static security analysis of Android source codeVOUCH73·C
- 5io.github.NitroRCr/greadAn MCP server that gives your AI access to the source code and docs of all public github reposVOUCH73·C
- 6io.github.instagitai/instagitMCP server for Instagit — AI-powered Git repository analysis for coding agentsVOUCH71·C
- 7io.github.AndyAnh174/vibe-hnindexIndex source code into a local knowledge base, search with keyword + semantic + hybrid modes.VOUCH68·C
- 8io.github.bgauryy/octocode-mcpAI code research platform. Search, analyze, and extract insights from any GitHub repository.VOUCH63·C
- 9octocode-mcpModel Context Protocol (MCP) server for advanced GitHub repository analysis and code discovery. Provides AI assistants with power…VOUCH63·C
How we rank
Every server here is ordered by its trust score — points earned across the OWASP MCP Top 10 checks that apply to it, scaled to 100. Nothing on this page is editorial or paid. The rubric, the ten checks and the band boundaries are all written out on how we score MCP server trust.
Servers with no score are not listed here at all. Most MCP servers are credential-gated and have never been scanned — unknown is not unsafe, and we will not rank a number we did not measure.