1. Conduid
  2. Science
  3. Code Security MCP
MCP server · Science

Code Security MCP

Security MCP server for AI agents — native per-language analysis: Kotlin (detekt), Java (SpotBugs), Python (Bandit), C# (Roslyn); diff review; secure patterns

34Low

Scored a month ago · breakdown

About Code Security MCP

Code Security MCP is an MCP server in the Science category: security MCP server for AI agents — native per-language analysis: Kotlin (detekt), Java (SpotBugs), Python (Bandit), C# (Roslyn); diff review; secure patterns.

Install

From source
git clone https://github.com/JasminGuberinic/code-security-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (3)

review_diff(diff)Review a unified diff and flag only the issues the change *introduces* — a pre-commit self-check.

Parameters not published.

secure_pattern(task, framework?)Get the vetted secure way to do a risky task — *before* writing it.

Parameters not published.

security_scan(path)Scan a file/directory (Kotlin, Java, Python, C#, or JS/TS) and return every security finding (rule, line, severity, CWE).

Parameters not published.

Ask AI

✦

Ask AI about Code Security MCP

Powered by Claude · Grounded in docs

I know everything about Code Security MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Code Security MCP

How do I install Code Security MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Code Security MCP safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Code Security MCP still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.