Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"finishkit": {
"env": {
"FINISHKIT_API_KEY": "fk_live_your_key_here"
},
"args": [
"-y",
"@finishkit/mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
MCP server for FinishKit. Production readiness scanner for AI-built apps. Enables AI agents in Claude, Cursor, Windsurf, and VS Code to check if your code is ready to ship.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@finishkit/mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked @finishkit/mcp against OSV.dev.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in devops / security
MCP server for using the GitLab API
An evil MCP server used for redteam testing
Yunxiao MCP Server provides AI assistants with the ability to interact with the Yunxiao platform. It provides a set of tools that interact with Yunxiao's API, allowing AI assistants to manage Codeup repository, Project, Pipeline, Packages etc.
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
MCP Security Weekly
Get CVE alerts and security updates for io.github.FinishKit/mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
MCP server for FinishKit. Production readiness scanner for AI-built apps. Enables AI agents in Claude, Cursor, Windsurf, and VS Code to check if your code is ready to ship.
| Tool | Description |
|---|---|
scan_repo | Check if your app is ready to ship. Triggers a production readiness scan and returns a prioritized finish plan. |
get_scan_status | Check progress of a production readiness scan. Returns current phase and progress percentage. |
get_findings | Get the production readiness report with prioritized findings blocking launch. |
get_patches | Get auto-generated code patches that fix production readiness issues. |
list_projects | List all repositories connected to FinishKit for production readiness scanning. |
create_project | Get instructions to connect a new GitHub repository to FinishKit. |
request_intelligence_pack | Request a production readiness analysis pack tailored to your technology stack. |
sync_findings | Sync production readiness findings from a local analysis back to the FinishKit dashboard. |
finishkit_setup | Set up FinishKit or check connection status. Creates a browser-based setup link if not connected. |
No API key required to get started. The server starts in setup mode and guides you through connecting your account.
npx @finishkit/mcp login
Opens your browser. Sign in with GitHub or Google. Your editor picks up the key automatically. No copy-paste, no config editing, no restart.
npx @finishkit/mcp setup
Auto-detects your editor and configures FinishKit. Or target a specific editor:
npx @finishkit/mcp setup --claude-code
npx @finishkit/mcp setup --cursor
npx @finishkit/mcp setup --windsurf
npx @finishkit/mcp setup --codex
npx @finishkit/mcp setup --vscode
Then ask your AI to scan your project. It will show a setup link if you haven't connected yet.
Add the following to your editor's MCP config file:
Claude Desktop (~/.claude/claude_desktop_config.json), Cursor (~/.cursor/mcp.json), Windsurf (~/.codeium/windsurf/mcp_config.json), VS Code Copilot (.vscode/mcp.json):
{
"mcpServers": {
"finishkit": {
"command": "npx",
"args": ["-y", "@finishkit/mcp"],
"env": {
"FINISHKIT_API_KEY": "fk_live_your_key_here"
}
}
}
}
Claude Code:
claude mcp add finishkit -- npx -y @finishkit/mcp
Get an API key at finishkit.app/activate.
The server always starts, even without an API key configured. This means FinishKit tools always appear in your IDE.
When called without a key, the finishkit_setup tool creates a browser-based activation link. Click the link, sign in, and your editor picks up the key on the next tool call. No restart needed.
Two tools always work without a key:
finishkit_setup: Creates a setup link and checks connection status.create_project: Returns instructions for connecting a repository through the FinishKit dashboard.scan_repo (Primary Tool)Check if your app is ready to ship. Triggers a production readiness scan on a GitHub repository, analyzing security, deployment, stability, tests, and UI completeness. Returns a prioritized finish plan with all findings. Typically takes 2-8 minutes.
| Parameter | Type | Required | Description |
|---|---|---|---|
repo_owner | string | Yes | GitHub org or username (e.g., myorg) |
repo_name | string | Yes | Repository |