Search / io.github.BenAHammond/code-auditor-mcp
protogridR0· no sign-inEnforces architectural invariants and code quality rules inside your AI agent's edit loop.
v5.0.2 · active · repository · descriptor JSON · versions
{
"mcpServers": {
"code-auditor-mcp": {
"type": "http",
"url": "https://www.codeauditormcp.com/api/mcp"
}
}
}claude mcp add --transport http code-auditor-mcp https://www.codeauditormcp.com/api/mcp[mcp_servers.code-auditor-mcp]
url = "https://www.codeauditormcp.com/api/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"code-auditor-mcp": {
"type": "remote",
"url": "https://www.codeauditormcp.com/api/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"code-auditor-mcp": {
"type": "http",
"url": "https://www.codeauditormcp.com/api/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=code-auditor-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vd3d3LmNvZGVhdWRpdG9ybWNwLmNvbS9hcGkvbWNwIn0%3D"
}{
"servers": {
"code-auditor-mcp": {
"type": "http",
"url": "https://www.codeauditormcp.com/api/mcp"
}
}
}{
"mcpServers": {
"code-auditor-mcp": {
"httpUrl": "https://www.codeauditormcp.com/api/mcp"
}
}
}extensions:
"code-auditor-mcp":
enabled: true
name: "code-auditor-mcp"
type: streamable_http
uri: "https://www.codeauditormcp.com/api/mcp"
timeout: 300
protocol.modernsupports 2026-07-28 (server/discover)protocol.statelessanswers without a sessionprotocol.transportstreamable HTTPprotocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every useauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotations4 of 4 tools declare readOnlyHint or destructiveHinttools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHinttools.token_costabout 736 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changes4 tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namerequest_ruleaddedRequest a new Code Auditor rule. Call lookup_rule or explain_symptom first to confirm no existing rule covers it. Provide a minimal example that should be flagged and a corrected example that should not. Reduce both to the smallest code that shows the difference, and remove secrets and proprietary identifiers. Returns a receipt id.
explain_symptomchangedoutput schema, annotationslookup_rulechangedoutput schema, annotationsget_install_commandschangedoutput schema, annotationsFull history: list_changes · trend: quality JSON.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +reachable +uptime-100% +updated-9d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
[email protected] npmthis version is not known to the dependency resolver
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://www.codeauditormcp.com/api/mcp streamable-http | none | yes | 100% | 340 ms | 2026-07-28 | 2026-10-19 |
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
code-auditor-mcp | npm | 5.0.2 | – |
explain_symptomread-only | Map a natural-language symptom (e.g. 'my app is slow', 'hardcoded password', 'infinite react loop') to the relevant Code Auditor rule(s) and their fixes. Call this when a user describes a problem rather than naming a rule. |
get_install_commandsread-only | Return the exact install commands for Code Auditor for a given AI agent. Call this when a user asks how to install Code Auditor, or asks for the command for a specific agent (claude, cursor, codex, gemini, agents, zcode, or all). |
lookup_ruleread-only | Return the rule kind, description, default severity, detection method, and threshold for a given Code Auditor rule or analyzer. Call this when a user asks what a specific rule does (e.g. import-ban, sql-injection, n+1). |
request_ruledestructive | Request a new Code Auditor rule. Call lookup_rule or explain_symptom first to confirm no existing rule covers it. Provide a minimal example that should be flagged and a corrected example that should not. Reduce both to the smallest code that shows the difference, and remove secrets and proprietary identifiers. Returns a receipt id. |
Schemas: list_tools.
{
"name": "io.github.BenAHammond/code-auditor-mcp",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://www.codeauditormcp.com/api/mcp",
"type": "streamable-http"
}
],
"version": "5.0.2",
"packages": [
{
"version": "5.0.2",
"transport": {
"type": "stdio"
},
"identifier": "code-auditor-mcp",
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org"
}
],
"repository": {
"url": "https://github.com/BenAHammond/code-auditor-mcp",
"source": "github"
},
"description": "Enforces architectural invariants and code quality rules inside your AI agent's edit loop."
}