広告掲載
MCP.so
ログイン

Code Reason MCP Server

@ph0smet

リポジトリ

基本情報

カテゴリ

開発者ツール

トランスポート

stdio

作者

ph0smet

投稿者

sourav kumar

Code Reason MCP Server について

MCP server that gives coding agents program-analysis primitives — data flow, call graphs, taint analysis — so they reason from ground truth instead of grep-and-guess."

Code Reason MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "code-reason": {
      "command": "/absolute/path/to/build/install/code-reason/bin/code-reason",
      "args": [
        "--stdio"
      ]
    }
  }
}

Code Reason MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Code Reason?

Code Reason is an MCP server that gives coding agents real program-analysis capabilities — data-flow reachability, call-graph traversal, evidence-chain construction, and source/sink taint analysis. It is built on Fraunhofer AISEC's Code Property Graph for Java and Python codebases and is designed for any MCP-compatible coding agent.

How to use Code Reason?

Add code-reason as an MCP server to your coding agent (tested with Claude Code). First call reason_analyze_project to build the CPG, then use any of the other 9 tools — such as reason_find_entry_points, reason_query_dataflow, or reason_trace_taint_path — for unlimited in-memory queries against the same analysis.

Key features of Code Reason

  • Provides 9 MCP tools for program analysis
  • Built on Fraunhofer AISEC’s Code Property Graph for Java and Python
  • One analyze pass, unlimited subsequent queries
  • Compact JSON evidence chains with intermediate steps and code context
  • ~30–40% fewer agent tokens on multi-step security reviews
  • Works with any MCP-compatible coding agent

Use cases of Code Reason

  • Multi-step security reviews of Java or Python codebases
  • Detecting SQLi, XSS, and command injection via catalog-driven scanning
  • Tracing taint paths from input sources to sensitive sinks
  • Understanding call-graph relationships and data flow across functions
  • Replacing manual grep-based speculation with ground-truth analysis

よくある質問

1

What problem does Code Reason solve?

Without a code-analysis tool, coding agents answer whole-program questions by manual grep-based tracing, which breaks silently on aliased variables, inter-procedural flow, or sanitization checks. Code Reason gives the agent ground-truth primitives instead of speculation.

2

What languages does Code Reason support?

Code Reason supports Java and Python codebases, using Fraunhofer AISEC’s Code Property Graph.

3

How many analysis tools does Code Reason provide?

Code Reason provides 9 MCP tools, including tools for analysis, entry point discovery, callers/callees, data-flow querying, taint path tracing, and catalog-driven injection scanning.

4

What format do analysis results use?

Results are compact structured JSON evidence chains with intermediate steps and code context, not vague textual guesses.

5

Does Code Reason work with any coding agent?

Yes, Code Reason is MCP-native. It has been tested with Claude Code and works with any MCP-compatible coding agent.

コメント

「開発者ツール」の他のコンテンツ

Official Porkbun MCP Server

Porkbun LLC

Official Porkbun MCP server, maintained by Porkbun. Check domain availability and pricing, register, renew and transfer domains, and manage DNS records, nameservers, URL forwarding, glue records, DNSSEC and domain contac

32

FARPY

mangomunchr

Verified distributed compute for humans, applications, and agents. Submit Blender, Octane, and video workloads, route them across qualified GPUs, track asynchronous execution, download finished artifacts, and verify FARP

1

Cronwatch

cronwatchdev

CronWatch records every run of your scheduled jobs in your own database, and speaks up when one is missed, fails, gets stuck, runs slow or costs too much. CronWatch is free and open-source.

31

discoverGPT

Joe Monastiero

discoverGPT is visualAI's MCP gateway for AI commerce: one connection gives Claude 40 tools spanning product search, data-quality review, AI-discovery feeds, and virtual try-on, all backed by a single canonical product c

qrp-mcp

StanimirTenev

Find quantum-vulnerable cryptography in your codebase — secp256k1, Ed25519, BLS, Schnorr, RSA. Local, offline MCP server for AI agents.

広告掲載