Code Guardian MCP
A deterministic static analysis tool that evaluates repository safety, functionality, and completeness without executing code. It provides scores out of 100 and an A-F grade based on fixed weights, identifying orphan code and verifying AI-assisted changes through a verify loop. It uses AST parsing for Python and lexers for JS/TS, making no network calls.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Verify if a cloned repository is safe to run
- Check if AI-generated code changes are functional
- Identify orphan code and missing dependencies
- Generate SARIF reports for CI/CD integration
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
code-guardian-mcp 0.3.4
{
"version": "0.3.4",
"transport": "stdio",
"identifier": "code-guardian-mcp",
"runtimeHint": "uvx",
"registryType": "pypi",
"registryBaseUrl": "https://pypi.org",
"packageArguments": [
{
"type": "positional",
"value": "mcp"
}
],
"environmentVariables": [
{
"name": "CODE_GUARDIAN_LLM_URL",
"format": "string",
"description": "Optional: local model for the explain tool (Ollama /api/chat or an OpenAI-compatible /v1/chat/completions URL)"
},
{
"name": "CODE_GUARDIAN_LLM_MODEL",
"format": "string",
"description": "Optional: model name for the explain tool"
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"code-guardian-mcp": {
"command": "uvx",
"args": [
"code-guardian-mcp==0.3.4",
"mcp"
],
"env": {
"CODE_GUARDIAN_LLM_URL": "<YOUR_CODE_GUARDIAN_LLM_URL>",
"CODE_GUARDIAN_LLM_MODEL": "<YOUR_CODE_GUARDIAN_LLM_MODEL>"
}
}
}
}Cline
{
"mcpServers": {
"code-guardian-mcp": {
"command": "uvx",
"args": [
"code-guardian-mcp==0.3.4",
"mcp"
],
"env": {
"CODE_GUARDIAN_LLM_URL": "<YOUR_CODE_GUARDIAN_LLM_URL>",
"CODE_GUARDIAN_LLM_MODEL": "<YOUR_CODE_GUARDIAN_LLM_MODEL>"
}
}
}
}VS Code
{
"servers": {
"code-guardian-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"code-guardian-mcp==0.3.4",
"mcp"
],
"env": {
"CODE_GUARDIAN_LLM_URL": "<YOUR_CODE_GUARDIAN_LLM_URL>",
"CODE_GUARDIAN_LLM_MODEL": "<YOUR_CODE_GUARDIAN_LLM_MODEL>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"code-guardian-mcp": {
"command": "uvx",
"args": [
"code-guardian-mcp==0.3.4",
"mcp"
],
"env": {
"CODE_GUARDIAN_LLM_URL": "<YOUR_CODE_GUARDIAN_LLM_URL>",
"CODE_GUARDIAN_LLM_MODEL": "<YOUR_CODE_GUARDIAN_LLM_MODEL>"
}
}
}
}Let your agent find its tools
Find servers like Code Guardian MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.