Code Auditor Mcp

benahammond/code-auditor-mcp

This one gives Claude searchable access to your entire codebase across TypeScript, JavaScript, and Go. It indexes functions, React components, structs, and dependencies into a local LokiJS database, then exposes MCP tools for semantic search, SOLID principle checks, DRY violation detection, and security pattern analysis. You can ask "find all auth functions" or "audit UserService for issues" and get file locations with line numbers. It also maintains a persistent task queue and analyzer configs that survive index resets. The search supports operators like complexity thresholds, language filters, and dependency graphs. Install it globally or per project, point it at your code with sync_index, and suddenly your AI assistant knows your actual patterns instead of guessing.

GitHub stars: 8
tools: 4
transport: STDIO, HTTP
last updated: Oct 10, 2026

View on GitHub

Install

From registry metadata

$ npx add-mcp https://www.codeauditormcp.com/api/mcp --name code-auditor-mcp

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http code-auditor-mcp https://www.codeauditormcp.com/api/mcp

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 4 tools

Verified live against the running server on Nov 6, 2026.

get_install_commandsReturn the exact install commands for Code Auditor for a given AI agent. Call this when a user asks how to install Code Auditor, or asks for the command for a specific agent (claude, cursor, codex, gemini, agents, zcode, or all).1 params

Return the exact install commands for Code Auditor for a given AI agent. Call this when a user asks how to install Code Auditor, or asks for the command for a specific agent (claude, cursor, codex, gemini, agents, zcode, or all).

Parameters* required

agent*string

The AI agent to install for (e.g. claude, cursor, codex, all).

lookup_ruleReturn the rule kind, description, default severity, detection method, and threshold for a given Code Auditor rule or analyzer. Call this when a user asks what a specific rule does (e.g. import-ban, sql-injection, n+1).1 params

Return the rule kind, description, default severity, detection method, and threshold for a given Code Auditor rule or analyzer. Call this when a user asks what a specific rule does (e.g. import-ban, sql-injection, n+1).

Parameters* required

rule_id*string

Rule or analyzer id, e.g. import-ban, sql-injection, n+1.

explain_symptomMap a natural-language symptom (e.g. 'my app is slow', 'hardcoded password', 'infinite react loop') to the relevant Code Auditor rule(s) and their fixes. Call this when a user describes a problem rather than naming a rule.1 params

Map a natural-language symptom (e.g. 'my app is slow', 'hardcoded password', 'infinite react loop') to the relevant Code Auditor rule(s) and their fixes. Call this when a user describes a problem rather than naming a rule.

Parameters* required

symptom*string

A plain-language description of the problem.

request_ruleRequest a new Code Auditor rule. Call lookup_rule or explain_symptom first to confirm no existing rule covers it. Provide a minimal example that should be flagged and a corrected example that should not. Reduce both to the smallest code that shows the difference, and remove se...7 params

Request a new Code Auditor rule. Call lookup_rule or explain_symptom first to confirm no existing rule covers it. Provide a minimal example that should be flagged and a corrected example that should not. Reduce both to the smallest code that shows the difference, and remove se...

Parameters* required

cleanExample*array

firingExample*array

languages*array

signal*string

symptom*string

title*string

toolVersionstring

Readme

Code Auditor

Architectural invariants enforced inside your AI agent's edit loop. When the agent writes code that breaks a project rule, Code Auditor catches it and blocks the edit. The agent sees the rule's message and fixes itself.

Install

npm install -g code-auditor-mcp
code-audit install --agent all

Two commands to install everywhere. code-audit install --agent all copies the skill to every AI coding tool on your machine. Use --agent for specific tools.

What you get per tool: the skill (SKILL.md), MCP server access, and hook wiring where the tool supports it (blocking on Claude Code and Codex, advisory on Cursor).

code-audit install --list   # see the support matrix

Claude Code users can also install via plugin:

claude plugin marketplace add BenAHammond/code-auditor-mcp
claude plugin install code-auditor

The hook auto-installs the auditor on first use via npx.

Requirements

View the full README on GitHub

Details

Repository: github.com/benahammond/code-auditor-mcp
Category: AI & LLM Tools
Package: code-auditor-mcp
Transport: STDIO, HTTP
Registry: MCP registry, active
Tools verified: Nov 6, 2026

Related AI & LLM Tools MCP servers

View all

Clover Publicfourleafai/clover-publicJob search and interview prep MCP. 15 tools, OAuth 2.1, cross-LLM. four-leaf.ai.8stars

Knowledge Fabricinvarcore/knowledge-fabricMulti-tenant hybrid RAG & evidence verification MCP server enforcing PostgreSQL RLS.8stars

Open Brainbobby-cell-commits/open-brain-serverGraph-structured MCP memory server. 37.2% LongMemEval. Auto dedup, themes, decay, synthesis.0stars

Scavioscavio-ai/scavio-mcpStructured web data from 73 platforms: Google, ChatGPT, Gemini, YouTube, Amazon, Reddit, TikTok8stars

Figma To Code Mcpfelixanhalt/figma-to-code-mcpLLM-optimized Figma MCP server.7stars

Mingle — Agent-Native Connection Protocolaeoess/mingle-mcpMeet the people you're looking for. Your agent composes, you approve. Nothing scores or ranks you.7stars