Codacy MCP Server

MCP Server for the Codacy API, enabling access to repositories, files, quality, coverage, security and more.

Table of Contents

• Features / Tools
  • Repository Setup and Management
  • Organization and Repository Management
  • Code Quality and Analysis
  • File Management and Analysis
  • Security Analysis
  • Pull Request Analysis
  • Tool and Pattern Management
  • CLI Analysis
• Setup
  • Requirements
  • Personal API Access Token
  • Install
    • Cursor, Windsurf, and others
    • VS Code with Copilot
• Troubleshooting
• Contribute
• Codacy-CLI Support
• License

Features / Tools

The following tools are available through the Codacy MCP Server:

Repository Setup and Management

• codacy_setup_repository: Add or follow a repository in Codacy if not already present. This tool ensures the repository is registered with Codacy, allowing further analysis and management.

Organization and Repository Management

• codacy_list_organizations: List organizations with pagination support.
• codacy_list_organization_repositories: List repositories in an organization with pagination support.
• codacy_get_repository_with_analysis: Get repository with analysis information, including metrics for Grade, Issues, Duplication, Complexity, and Coverage.

Code Quality and Analysis

• codacy_list_repository_issues: Lists and filters code quality issues in a repository. This is the primary tool for investigating general code quality concerns (e.g. best practices, performance, complexity, style) but NOT security issues. For security-related issues, use the SRM items tool instead. Features include:

  • Pagination support for handling large result sets
  • Filtering by multiple criteria including severity, category, and language
  • Author-based filtering for accountability
  • Branch-specific analysis
  • Pattern-based searching

  Common use cases:

  • Code quality audits
  • Technical debt assessment
  • Style guide compliance checks
  • Performance issue investigation
  • Complexity analysis

File Management and Analysis

• codacy_list_files: List files in a repository with pagination support.
• codacy_get_file_issues: Get the issue list for a file in a repository.
• codacy_get_file_coverage: Get coverage information for a file in the head commit of a repository branch.
• codacy_get_file_clones: Get the list of duplication clones (identical or very similar code segments) for a file in a repository.
• codacy_get_file_with_analysis: Get detailed analysis information for a file, including metrics for Grade, Issues, Duplication, Complexity, and Coverage.

Security Analysis

• codacy_search_organization_srm_items: Primary tool to list security items/issues/vulnerabilities/findings across an organization. Results are related to the organization's security and risk management (SRM) dashboard on Codacy.
• codacy_search_repository_srm_items: List security items/issues/vulnerabilities/findings for a specific repository.

Both tools provide comprehensive security analysis including:

• SAST (Code scanning)
• Secrets (Secret scanning)
• SCA (Dependency scanning)
• IaC (Infrastructure-as-code scanning)
• CICD (CI/CD scanning)
• DAST (Dynamic Application Security Testing)
• PenTesting (Penetration testing)

... View full README on GitHub