Coderegistry

the-code-registry/mcp-server

Connects Claude to The Code Registry's hosted analysis platform for programmatic codebase audits. Exposes account creation, project setup, vault management, and result polling via JSON-RPC tools. You'd reach for this during M&A due diligence or security audits when you need formatted reports without leaving the conversation. The LOCAL_AGENT mode keeps code on your machine and only uploads anonymized metrics. Free tier gives you 200k tokens and summary-level results. Agents walk through create account, create project, spin up a vault with Docker commands, then poll for completion. PDF reports get emailed automatically, or you can fetch them via the results API. Re-analysis generates comparison reports against previous snapshots.

tools: 23
transport: HTTP
last updated: Feb 5, 2026

View on GitHub

Install

From registry metadata

$ npx add-mcp https://integrator.app.thecoderegistry.com/api/ai/router --name coderegistry

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http coderegistry https://integrator.app.thecoderegistry.com/api/ai/router

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 23 tools

Verified live against the running server on Nov 6, 2026.

create_accountCreates a new Code Registry account and returns API credentials. Required fields: email (account owner's email), name (account owner's full name), team_name (team or company name). All three must be provided or the call will fail. Cold starts can cause the first request to tim...5 params

Creates a new Code Registry account and returns API credentials. Required fields: email (account owner's email), name (account owner's full name), team_name (team or company name). All three must be provided or the call will fail. Cold starts can cause the first request to tim...

Parameters* required

email*string

Account owner's email.

integrator_idstring

Optional integrator identifier (used for API key scoping).

integrator_namestring

Optional integrator display name.

name*string

Account owner's name.

team_name*string

Team or company name.

list_projectsLists all projects for the authenticated team. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.1 params

Lists all projects for the authenticated team. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

get_projectReturns a specific project by id. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.2 params

Returns a specific project by id. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

project_id*string

Project id.

create_projectCreates a project for a team user. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.4 params

Creates a project for a team user. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

descriptionstring

Optional project description.

name*string

Project name.

user_id*string

User id (from create_account or get_account).

delete_projectDeletes a project and its vaults. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.2 params

Deletes a project and its vaults. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

project_id*string

Project id.

list_vaultsLists vaults within a project. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.2 params

Lists vaults within a project. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

project_id*string

Project id.

get_vaultReturns a specific vault by id. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.2 params

Returns a specific vault by id. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

vault_id*string

Vault id.

create-code-vaultCreates a code vault and queues the initial analysis. Choose source_type based on what is available in your environment: (1) LOCAL_AGENT — preferred when Docker is available; runs a local container, source code never leaves the machine. The response includes next_steps.command...10 params

Creates a code vault and queues the initial analysis. Choose source_type based on what is available in your environment: (1) LOCAL_AGENT — preferred when Docker is available; runs a local container, source code never leaves the machine. The response includes next_steps.command...

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

branchstring

Optional source branch name (GIT only).

descriptionstring

Optional vault description.

namestring

Vault name.

passwordstring

Source password or personal access token (required for private GIT repos; must have read access).

project_idstring

Project id (from create_project).

source_typestring

Code source type. Use LOCAL_AGENT when Docker is available (preferred — source code stays local). Use FILE_ARCHIVE when Docker is NOT available: zip the project, upload to a temporary public URL (f...one of GIT · FILE_ARCHIVE · LOCAL_AGENT · AGENTdefault: LOCAL_AGENT

source_urlstring

Repository or archive URL (required for GIT/FILE_ARCHIVE; ignored for LOCAL_AGENT/AGENT). For FILE_ARCHIVE: zip the project and upload to file.io, gofile.io, tmpfiles.org, or any service that retur...

user_idstring

User id (from create_account or get_account).

usernamestring

Source username (required for private GIT repos; must have read access).

reanalyze-code-vaultCreates a new analysis version for an existing code vault using its existing source settings. For LOCAL_AGENT, the response includes next_steps.commands and the local agent must be run again. For GIT/FILE_ARCHIVE, the re-analysis of the original code source is queued automatic...5 params

Creates a new analysis version for an existing code vault using its existing source settings. For LOCAL_AGENT, the response includes next_steps.commands and the local agent must be run again. For GIT/FILE_ARCHIVE, the re-analysis of the original code source is queued automatic...

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

authorstring

Optional author name override.

commentstring

Optional version comment.

user_idstring

Optional user id for attribution (from create_account or get_account).

vault_id*string

Vault id (from create-code-vault or list_vaults).

delete-code-vaultDeletes a code vault and related analysis data. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.2 params

Deletes a code vault and related analysis data. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

vault_id*string

Vault id (from create-code-vault or list_vaults).

get-code-vault-summaryReturns the latest version/status info for a vault. Analysis is async; if status is 'processing', poll with exponential backoff (5s, 10s, 20s, 40s, max 60s). Analysis can be as quick as 20-30 minutes for under 500,000 lines of code. Larger codebases can take much longer, espec...2 params

Returns the latest version/status info for a vault. Analysis is async; if status is 'processing', poll with exponential backoff (5s, 10s, 20s, 40s, max 60s). Analysis can be as quick as 20-30 minutes for under 500,000 lines of code. Larger codebases can take much longer, espec...

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

vault_id*string

Vault id (from create-code-vault or list_vaults).

get-code-vault-resultsReturns analysis results for a vault. Free-tier teams receive summary-only results; paid teams receive full facet data and AI insights. Analysis is async; if status is 'processing', poll with exponential backoff (5s, 10s, 20s, 40s, max 60s). Analysis can be as quick as 20-30 m...2 params

Returns analysis results for a vault. Free-tier teams receive summary-only results; paid teams receive full facet data and AI insights. Analysis is async; if status is 'processing', poll with exponential backoff (5s, 10s, 20s, 40s, max 60s). Analysis can be as quick as 20-30 m...

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

vault_id*string

Vault id (from create-code-vault or list_vaults).

get-code-vault-reportsReturns report URLs (snapshot/comparison) for a vault. Completion rules: if version is 1.0.0, snapshot indicates completion and comparison is null; for versions above 1.0.0, comparison indicates completion. If not ready, retry with exponential backoff (5s, 10s, 20s, 40s, max 6...2 params

Returns report URLs (snapshot/comparison) for a vault. Completion rules: if version is 1.0.0, snapshot indicates completion and comparison is null; for versions above 1.0.0, comparison indicates completion. If not ready, retry with exponential backoff (5s, 10s, 20s, 40s, max 6...

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

vault_id*string

Vault id (from create-code-vault or list_vaults).

get_accountReturns the team owner account information. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.1 params

Returns the team owner account information. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

delete_accountDeletes the team account plus all projects and vaults. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.2 params

Deletes the team account plus all projects and vaults. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

confirm*boolean

Set true to confirm deletion.one of true

rotate_api_keyIssues a fresh integrator API key. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.3 params

Issues a fresh integrator API key. Requires X-API-Key (existing users can generate an API key in the web app). If headers aren't supported, pass api_key in arguments.

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

integrator_idstring

Optional integrator identifier (defaults to existing integrator or 'default').

integrator_namestring

Optional integrator display name.

get-security-issuesReturns deduplicated security findings for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires X-API-Key (existing users can generate an API key in...11 params

Returns deduplicated security findings for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires X-API-Key (existing users can generate an API key in...

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

check_idstring

Filter: exact match on the security check id.

filestring

Filter: substring match on file path.

issue_idstring

Return only this specific issue id.

limitinteger

Max results to return (default 50, max 200).default: 50

offsetinteger

Number of results to skip, for pagination.default: 0

project_idstring

Project id (from create_project). Returns data aggregated across all vaults in the project.

severityarray

Filter to one or more severities (e.g. ERROR, WARNING, INFO).

statusstring

Filter: triage status (e.g. open, resolved, ignored).

tagstring

Filter: triage tag name.

vault_idstring

Vault id (from create-code-vault or list_vaults). Returns data for this vault only.

get-code-smellsReturns code smell findings for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires X-API-Key (existing users can generate an API key in the web app...8 params

Returns code smell findings for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires X-API-Key (existing users can generate an API key in the web app...

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

filestring

Filter: substring match on file path.

issue_idstring

Return only this specific code smell id.

issue_typestring

Filter: exact match on issue type.

limitinteger

Max results to return (default 50, max 200).default: 50

offsetinteger

Number of results to skip, for pagination.default: 0

project_idstring

Project id (from create_project). Returns data aggregated across all vaults in the project.

vault_idstring

Vault id (from create-code-vault or list_vaults). Returns data for this vault only.

get-git-historyReturns git commit history for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires X-API-Key (existing users can generate an API key in the web app)...9 params

Returns git commit history for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires X-API-Key (existing users can generate an API key in the web app)...

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

authorstring

Filter: exact match on commit author (case-insensitive).

branchstring

Filter: exact match on branch name.

date_fromstring

Filter: commits on or after this date (YYYY-MM-DD).

date_tostring

Filter: commits on or before this date (YYYY-MM-DD).

limitinteger

Max results to return (default 50, max 200).default: 50

offsetinteger

Number of results to skip, for pagination.default: 0

project_idstring

Project id (from create_project). Returns data aggregated across all vaults in the project.

vault_idstring

Vault id (from create-code-vault or list_vaults). Returns data for this vault only.

get-contributorsReturns aggregated contributor stats (commit count, lines added/deleted, first/last commit) for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires...9 params

Returns aggregated contributor stats (commit count, lines added/deleted, first/last commit) for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires...

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

authorstring

Filter: exact match on commit author (case-insensitive).

branchstring

Filter: exact match on branch name.

date_fromstring

Filter: commits on or after this date (YYYY-MM-DD).

date_tostring

Filter: commits on or before this date (YYYY-MM-DD).

limitinteger

Max results to return (default 50, max 200).default: 50

offsetinteger

Number of results to skip, for pagination.default: 0

project_idstring

Project id (from create_project). Returns data aggregated across all vaults in the project.

vault_idstring

Vault id (from create-code-vault or list_vaults). Returns data for this vault only.

get-componentsReturns detected open-source/CMS components for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires X-API-Key (existing users can generate an API ke...10 params

Returns detected open-source/CMS components for a project (all vaults) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). Requires X-API-Key (existing users can generate an API ke...

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

limitinteger

Max results to return (default 50, max 200).default: 50

namestring

Filter: substring match on component name.

offsetinteger

Number of results to skip, for pagination.default: 0

only_outdatedboolean

Only return components where current_version != latest_version.

project_idstring

Project id (from create_project). Returns data aggregated across all vaults in the project.

sort_by_sizeboolean

Sort by total_lines_of_code descending instead of by name.

urlstring

Filter: substring match on component URL.

vault_idstring

Vault id (from create-code-vault or list_vaults). Returns data for this vault only.

vendorstring

Filter: substring match on vendor.

get-code-iq-automated-queriesReturns trimmed Code IQ automated analyses (architecture, scalability, EOL, AI functionality, etc.) for a project (aggregated) or a single vault. Excludes The Code Score — use get-the-code-score for that, and do not pass analysis_key=code_score here (404). Only cached results...4 params

Returns trimmed Code IQ automated analyses (architecture, scalability, EOL, AI functionality, etc.) for a project (aggregated) or a single vault. Excludes The Code Score — use get-the-code-score for that, and do not pass analysis_key=code_score here (404). Only cached results...

Parameters* required

analysis_keystring

Optional: return only this analysis (e.g. project_architecture). Omit for all.

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

project_idstring

Project id (from create_project). Returns data aggregated across all vaults in the project.

vault_idstring

Vault id (from create-code-vault or list_vaults). Returns data for this vault only.

get-the-code-scoreReturns The Code Score (security/code-quality/dependencies, 1000 points) for a project (aggregated) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). If the plan doesn't include...3 params

Returns The Code Score (security/code-quality/dependencies, 1000 points) for a project (aggregated) or a single vault. Provide exactly one of project_id or vault_id. Requires full data access (a paid plan; verification-only plans are not included). If the plan doesn't include...

Parameters* required

api_keystring

Optional API key for clients that cannot set X-API-Key headers.

project_idstring

Project id (from create_project). Returns data aggregated across all vaults in the project.

vault_idstring

Vault id (from create-code-vault or list_vaults). Returns data for this vault only.

Readme

The Code Registry

The Code Registry MCP Server

Enterprise-grade code intelligence for AI assistants

Quick Start • Features • Use Cases • Documentation • Website

Enterprise-grade code intelligence for business leaders by The Code Registry. Now with a native, fully-featured MCP server for AI agents. Analyze codebases for due diligence, tech debt, security vulnerabilities, code quality and more - directly from Claude Desktop, Claude API, and other MCP-compatible clients.

View the full README on GitHub

Details

Repository: github.com/the-code-registry/mcp-server
Category: Security & Pentesting
Transport: HTTP
Registry: MCP registry, active
Resources: 36
Prompts: 4
Tools verified: Nov 6, 2026

Related Security & Pentesting MCP servers

View all

Agentguardmukundakatta/agentguard-mcpNetwork-egress firewall for agent tools: check URLs against a declarative policy.1stars

Visus Mcpvisus-mcp/visus-mcpSecurity-first web access. Sanitizes pages, blocks injection, redacts PII. Now with PDF/JSON/SVG.1stars

Chain Signerkevthetech143/chain-signerSecurity suite for AI agents: flag drains, permit-phishing & risky actions before signing.1stars

Netintel Mcpkjgueye/netintel-mcpMCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments1stars

DNS MCP Servermclose/dns-mcpReal-time DNS security analysis — DNSSEC, email auth, and RDAP. Built for SOC investigations.1stars

PageLens AIpagelens-ai/pagelensai-mcp-serverAI website audit: security, SEO, performance, UX and accessibility checks with actionable fixes.1stars