Sheriff-MCP

Sheriff is an MCP server that helps AI agents efficiently fix static analysis issues from SARIF reports.

Documentation | Installation | Tool Reference

Why Sheriff?

AI agents struggle with large static analysis reports:

• Context overload - 100+ issues overwhelm context windows
• Lost progress - Work is lost on context compaction or session restart
• Inefficient navigation - No batching means jumping between files repeatedly

Sheriff solves this by acting as a work queue manager:

• Intelligent batching - Issues grouped by file for efficient fixing
• Persistent progress - State survives compaction, restarts, and agent switches
• Scope filtering - Focus on specific rules, severities, or file patterns
• Compact responses - Minimal context usage with abbreviated field names

Supported Static Analysis Tools

Sheriff works with any tool that produces SARIF output:

Quick Start

1. Install

docker pull ghcr.io/ryansmith4/sheriff-mcp:latest

See the Installation Guide for full details.

2. Configure Your MCP Client

Add Sheriff to your MCP client (Claude Code, Cursor, ChatGPT Desktop, etc.):

{
  "mcpServers": {
    "sheriff": {
      "command": "java",
      "args": ["-jar", "/path/to/sheriff-mcp-1.0.2-all.jar", "start"]
    }
  }
}

Or with Docker:

{
  "mcpServers": {
    "sheriff": {
      "command": "docker",
      "args": ["run", "-i", "--rm", "-v", ".:/data", "ghcr.io/ryansmith4/sheriff-mcp:latest"]
    }
  }
}

See the Agent Setup Guide for client-specific instructions and recommended agent instructions.

3. Use It

1. Run static analysis     →  qodana scan
2. Load i

... [View full README on GitHub](https://github.com/ryansmith4/sheriff-mcp#readme)