Code Scalpel – AST analyzer and security scanner (MCP server)

Show HN: Code Scalpel – AST analyzer and security scanner (MCP server)

Code Scalpel – AST analyzer and security scanner (MCP server) is a business in show hn launch.

Profile

I built Code Scalpel as an MCP server for code analysis. It parses Python, JavaScript, TypeScript, and Java - builds control flow graphs and catches security bugs using taint analysis and symbolic execution.Security detection: - 16+ vulnerability types (SQL/NoSQL/LDAP injection, XSS, command injection, SSRF, CSRF, SSTI, prototype pollution, weak crypto, etc.) - Taint tracking across files - <10% false positive rate - Z3 symbolic execution for path analysisThe MCP part exposes 23 tools that let AI agents analyze code: - security_scan, cross_file_security_scan - symbolic_execute (Z3-based path exploration) - generate_unit_tests (test gen from symbolic paths) - simulate_refactor (behavior prese

Its activity falls under show hn launch; the profile below is assembled from public directory data.

The company is listed at the Show HN launch stage of development.

Website: codescalpel.dev