OfficialVerified

Codacy MCP Server

Codacy API analysis tools for repository management, code quality, and security reporting.

Data last scanned today · Reviewed today

33 1 dangerous tool23 tools★ 62TypeScriptNOASSERTION

Overview

This MCP server provides a direct interface to the Codacy platform, enabling AI agents to retrieve insights regarding code quality, test coverage, and security vulnerabilities. Users can list organizations, fetch detailed repository analysis metrics, and audit specific files for issues directly from their development environment. Beyond basic metadata, the server facilitates deeper integration through repository setup tools and granular filtering for code quality issues. It supports branch-specific investigations and coverage reports, allowing developers to manage technical debt and compliance checks within their existing AI-driven workflows.

Our verdict

With a security score of 40/100, this server carries a high risk level. The project is community-maintained rather than official, which is reflected in its NOASSERTION license and the lack of an editorially reviewed authentication process. Users should exercise caution, as the security implications of its API interactions have not been formally audited. It is suitable for experimental environments or non-critical projects where access to Codacy insights outweighs the current lack of verified security standards.

Supports granular filtering for code quality and coverage analysis.
Includes dedicated tools for repository setup and organization management.
Small footprint with only seven direct dependencies.

High risk level due to community-maintained status and unreviewed security.
License is labeled as NOASSERTION, complicating usage compliance.
Authentication methods remain unreviewed for potential vulnerabilities.

Setup

Claude Desktop

{
  "mcpServers": {
    "codacy-mcp-server": {
      "args": [
        "-y",
        "@codacy/codacy-mcp"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

No read-only mode — running this grants full read/write access.
No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

Tool	Description	Risk
codacy_setup_repository	Add or follow a repository in Codacy if not already present.	medium
codacy_list_organizations	List organizations with pagination support.	low
codacy_list_organization_repositories	List repositories in an organization with pagination support.	low
codacy_get_repository_with_analysis	Get repository with analysis information, including metrics for Grade, Issues, Duplication, Complexity, and Coverage.	low
codacy_list_repository_issues	Lists and filters code quality issues in a repository.	low
codacy_list_files	List files in a repository with pagination support.	low
codacy_get_file_issues	Get the issue list for a file in a repository.	low
codacy_get_file_coverage	Get coverage information for a file in the head commit of a repository branch.	low
codacy_get_file_clones	Get the list of duplication clones (identical or very similar code segments) for a file in a repository.	low
codacy_get_file_with_analysis	Get detailed analysis information for a file, including metrics for Grade, Issues, Duplication, Complexity, and Coverage.	low

Compatibility

Client	Local	Docker	Remote	Read-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

›What are the system requirements for running the Codacy MCP server?

You must have git and Node.js installed on your machine, ensuring the npx command is functional.

›Do I need any additional software for local analysis?

Yes, local analysis requires the Codacy CLI. The MCP server will attempt to install it automatically if it is not already present on your system.

›Which operating systems are supported for Codacy CLI v2?

Codacy CLI v2 is supported on macOS, Linux, and Windows systems running WSL.

›What authentication is required to use this MCP server?

You need a Personal API Access Token, which can be generated through your Codacy Account access management settings.

›How do I distinguish between code quality issues and security vulnerabilities?

Use the codacy_list_repository_issues tool for general code quality concerns like style and complexity, and use the SRM items tools for security-related findings.