Is Jscpd safe to use?

Jscpd has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install Jscpd?

Jscpd supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

Jscpd provides 1 tool: run_jscpd_detection. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Jscpd?

Jscpd is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is Jscpd actively maintained?

Jscpd is actively maintained — last commit was 0 days ago. It has 5,816 GitHub stars.

Jscpd

Name: Jscpd
Author: kucherenko

jscpd · by kucherenko

Copy/paste detector for programming source code, supports 223 formats. AI-ready with token-efficient reporter, skill and MCP server.

5.8k 1.2M/wk 1 tool GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 0d ago

Works with most clients

Transport: stdio, sse

1 tool · ~245 tok

Grade A · 0.1% of 200K ctx

Edit this pageView history

Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "jscpd": {
      "args": [
        "-y",
        "jscpd"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/jscpd)](https://mcppedia.org/s/jscpd)

Read me

What Jscpd does

Copy/paste detector for programming source code. Supports 224+ formats. AI-ready with MCP server and token-efficient reporter. Now with a Rust-powered engine — 24-37x faster.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

97/100across 5 weighted dimensions

How we score →

0255075100

−3

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked jscpd against OSV.dev.

Inventory

Tools (1)

Click any tool to inspect its schema.

~245 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Jscpd safe to use?: Jscpd has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Jscpd?: Jscpd supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Jscpd do?: Jscpd provides 1 tool: run_jscpd_detection. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Jscpd?: Jscpd is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is Jscpd actively maintained?: Jscpd is actively maintained — last commit was 0 days ago. It has 5,816 GitHub stars.

Similar servers

Others in developer-tools

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

6.0k 2

Context797

Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors

58.3k 2

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.0k 1

Figma Console Mcp96

MCP server for accessing Figma plugin console logs and screenshots via Cloudflare Workers or local mode

1.9k 2

MCP Security Weekly

Get CVE alerts and security updates for Jscpd and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "jscpd": {
      "args": [
        "-y",
        "jscpd"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/jscpd)](https://mcppedia.org/s/jscpd)

Read me

What Jscpd does

Copy/paste detector for programming source code. Supports 224+ formats. AI-ready with MCP server and token-efficient reporter. Now with a Rust-powered engine — 24-37x faster.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

README

jscpd

Copy/paste detector for programming source code. Supports 224+ formats. AI-ready with MCP server and token-efficient reporter. Now with a Rust-powered engine — 24-37x faster.

jscpd implements the Rabin-Karp algorithm to find duplicated code blocks across files.

Quick Start

# Install (all platforms — installs the jscpd command)
curl -fsSL https://jscpd.dev/install.sh | bash

# TypeScript engine (Node.js, v4.x)
npm install -g jscpd@4
jscpd /path/to/code
# or use without installing
npx jscpd@4 /path/to/code

# Rust engine (v5.x, 24-37x faster) — installs the jscpd command
npm install -g jscpd@5
jscpd /path/to/code

# Rust engine — cpd command only
npm install -g cpd
cpd /path/to/code

# Rust-native install (exposes both jscpd and cpd)
cargo install jscpd

# Nix (installs both jscpd and cpd)
nix run github:kucherenko/jscpd -- /path/to/code
# or install permanently
nix profile install github:kucherenko/jscpd

# Homebrew (macOS/Linux)
brew install jscpd

Documentation

Document	Description
TypeScript (v4.x)	Node.js engine — CLI, reporters, config, detection modes
Rust (v5.x)	Rust engine — installation, CLI, reporters, blame, Rust API
AI-Ready	AI reporter, agent skills, MCP server
Programming API	TypeScript and Rust programmatic APIs
CI & Pre-Commit Hooks	GitHub Action, pre-commit hooks
Packages	Monorepo package and crate overview

Two Engines

	TypeScript (v4)	Rust (v5)
npm package	`jscpd@4`	`jscpd@5` or `cpd`
CLI command	`jscpd`	`jscpd` (from `jscpd@5`) or `cpd` (from `cpd`)
Speed	Baseline	24-37x faster
Formats	224	223
Node.js required	Yes	No (self-contained binary)
Programming API	TypeScript (`jscpd()`, `detectClones()`)	Rust (`cpd-finder` crate)
LevelDB store	Yes	No
Reporters	13	13

jscpd@5 installs the jscpd command. The cpd npm package installs the cpd command. Both contain the same Rust binary. For both command names from a single install, use crates.io: cargo install jscpd.

What's New

v5.0.x — Rust Engine

jscpd v5 is a ground-up Rust rewrite that ships as jscpd@5 (installs the jscpd command) or cpd (installs the cpd command). Self-contained binary — no Node.js runtime required.

Same interface, 24-37x faster:

All CLI options from v4 are preserved — drop-in replacement: jscpd → jscpd@5
Same .jscpd.json config file, same detection algorithm, same reporters
223 language formats with cross-format detection (Vue SFC, Svelte, Astro, Markdown)

New in v5:

24-37x faster detection on real projects (see benchmark)
- Small codebases (548 files): 34x faster
- Medium codebases (9K files): 37x faster
- Large codebases (17K files, 900 MB): 24x faster
Git blame with side-by-side author comparison (--blame --reporters console-full)
--workers — control parallelism for file tokenization and detection (default: auto, uses all CPU cores; not available in v4)
13 reporters: console, `con

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

97/100across 5 weighted dimensions

How we score →

0255075100

−3

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked jscpd against OSV.dev.

Inventory

Tools (1)

Click any tool to inspect its schema.

~245 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Jscpd safe to use?: Jscpd has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Jscpd?: Jscpd supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Jscpd do?: Jscpd provides 1 tool: run_jscpd_detection. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Jscpd?: Jscpd is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is Jscpd actively maintained?: Jscpd is actively maintained — last commit was 0 days ago. It has 5,816 GitHub stars.