stale · -0.6 marketcapability domainschema

Static Analysis

Score 16.4 / 100 26 providers +4 via APIs 9 APIs Search apis.io →

Providers using this tag (26)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Developing 4 Usable, with meaningful gaps to close
SonarSourceCompanyCode QualityCode Security33 APIs48.9SonarCI/CDCode QualityDeveloper ToolsDevOps1 API47.3PixeeCompanySecurityApplication SecurityAppSec5 APIs46.7RosenticDeveloper ToolsCI/CDVersion Control3 APIs43.8
Thin 10 Limited public surface area
TrunkDeveloper ToolsCI/CDCode QualityFlaky Tests1 API37.8DeepSourceCode QualityCode ReviewSecurity1 API28.1SemgrepSASTApplication SecuritySupply Chain6 APIs26.3ModerneCompanyDeveloper ToolsCode TransformationAutomated Refactoring1 API36.7CorridorCompanySecurityApplication SecurityAI Coding1 API35.9SonarQubeCode QualityDeveloper ToolsDevOpsSecurity1 API34.6SynopsysSoftware SecurityApplication Security TestingSoftware Composition Analysis2 APIs32.2Sourcery.AICompanyCode ReviewDeveloper Tools31.6HaneruToAgentsMCPA2ACode Review2 APIs30.1CodacyCode QualitySecurityCode Coverage1 API28.6
Emerging 9 Early or largely undocumented
BridgecrewCompanySecurityCloud SecurityInfrastructure as Code25.6Code ClimateCode QualityTest CoverageEngineering Analytics1 API26.0BearerCompanyInfrastructure SaasApplication Security21.7KodemCompanyCybersecurityApplication SecurityRuntime Security1 API21.7QltyCode QualityCode CoverageLinting1 API21.7PrivadoCompanyDevOpsPrivacySecurity20.7AdaCoreCompanySparkRustCompilers19.1RecurseCompanyAI Code ReviewCode ReviewDeveloper Tools17.0BrokkCompanyArtificial IntelligenceDeveloper ToolsCode Analysis11.7
Minimal 3 Almost no public developer surface
CodeSecureCompanyApplication SecuritySAST9.7SemmleCompanyEnterpriseCode AnalysisApplication Security3.4Rogue Wave SoftwareCompanyDeveloper ToolsHigh Performance Computing2.6

APIs with this tag (9)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 1 Complete, well-documented, and agent-ready
Datadog Static Analysis APIThe Static Analysis API provides access to static analysis and dependency scanning results. It supports que...79.2
Developing 1 Usable, with meaningful gaps to close
SonarQube Web APIREST API for interacting with SonarQube Server, enabling management of projects, quality gates, issues, rul...47.3
Thin 5 Limited public surface area
Trunk Code Quality CLIMeta-linter and static analysis manager exposed through the trunk CLI and a local daemon (no public REST AP...37.8Promptfoo Code ScanningPromptfoo Code Scanning analyzes source code in IDEs and CI pipelines to find LLM-related vulnerabilities i...36.3Synopsys Coverity REST APIThe Coverity Platform REST API provides programmatic access to Coverity static analysis results, project an...32.242Crunch API Security AuditThe 42Crunch API Security Audit performs automated static analysis of API definitions (OpenAPI 2, 3.0, 3.1 ...27.6Semgrep CLIOpen-source command-line static analysis engine. Runs locally and in CI to scan code with community and cus...26.3
Emerging 2 Early or largely undocumented
Qlty CLIThe free Qlty CLI is a polyglot, Rust-based command-line tool for universal linting, auto-formatting, secur...21.7ShellCheck APIA static analysis tool for shell scripts that provides API access for linting and validation.14.1

Companies reaching this through an API (4)

These companies publish an API, specification or operation carrying “Static Analysis” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

42Crunch Datadog Promptfoo Shell Scripting

Score breakdown

Frequency
40.1
log-scaled weighted occurrences
Breadth
0.4
spread across providers
Quality lift
28.6
mean composite of providers using it
Cohesion
3.4
strength of nearest seed neighbor

Where this tag sits

Developer Tools broader

Related tags

Code Quality 13 co-occurrences SAST 5 co-occurrences Code Review 5 co-occurrences Application Security 9 co-occurrences DevSecOps 7 co-occurrences Issues 5 co-occurrences CI/CD 6 co-occurrences DevOps 10 co-occurrences

Where this tag comes from

Api tag9
Provider tag26

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/static-analysis"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/static-analysis"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/static-analysis/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.