Advertise
MCP.so
Sign In

Code Reason MCP Server

@ph0smet

Repository

Basic information

Category

Developer Tools

Transports

stdio

Author

ph0smet

Submitted by

sourav kumar

About Code Reason MCP Server

MCP server that gives coding agents program-analysis primitives — data flow, call graphs, taint analysis — so they reason from ground truth instead of grep-and-guess."

Code Reason MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "code-reason": {
      "command": "/absolute/path/to/build/install/code-reason/bin/code-reason",
      "args": [
        "--stdio"
      ]
    }
  }
}

Code Reason MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Code Reason?

Code Reason is an MCP server that gives coding agents real program-analysis capabilities — data-flow reachability, call-graph traversal, evidence-chain construction, and source/sink taint analysis. It is built on Fraunhofer AISEC's Code Property Graph for Java and Python codebases and is designed for any MCP-compatible coding agent.

How to use Code Reason?

Add code-reason as an MCP server to your coding agent (tested with Claude Code). First call reason_analyze_project to build the CPG, then use any of the other 9 tools — such as reason_find_entry_points, reason_query_dataflow, or reason_trace_taint_path — for unlimited in-memory queries against the same analysis.

Key features of Code Reason

  • Provides 9 MCP tools for program analysis
  • Built on Fraunhofer AISEC’s Code Property Graph for Java and Python
  • One analyze pass, unlimited subsequent queries
  • Compact JSON evidence chains with intermediate steps and code context
  • ~30–40% fewer agent tokens on multi-step security reviews
  • Works with any MCP-compatible coding agent

Use cases of Code Reason

  • Multi-step security reviews of Java or Python codebases
  • Detecting SQLi, XSS, and command injection via catalog-driven scanning
  • Tracing taint paths from input sources to sensitive sinks
  • Understanding call-graph relationships and data flow across functions
  • Replacing manual grep-based speculation with ground-truth analysis

Frequently asked questions

1

What problem does Code Reason solve?

Without a code-analysis tool, coding agents answer whole-program questions by manual grep-based tracing, which breaks silently on aliased variables, inter-procedural flow, or sanitization checks. Code Reason gives the agent ground-truth primitives instead of speculation.

2

What languages does Code Reason support?

Code Reason supports Java and Python codebases, using Fraunhofer AISEC’s Code Property Graph.

3

How many analysis tools does Code Reason provide?

Code Reason provides 9 MCP tools, including tools for analysis, entry point discovery, callers/callees, data-flow querying, taint path tracing, and catalog-driven injection scanning.

4

What format do analysis results use?

Results are compact structured JSON evidence chains with intermediate steps and code context, not vague textual guesses.

5

Does Code Reason work with any coding agent?

Yes, Code Reason is MCP-native. It has been tested with Claude Code and works with any MCP-compatible coding agent.

Comments

More Developer Tools MCP servers

Cronwatch

cronwatchdev

CronWatch records every run of your scheduled jobs in your own database, and speaks up when one is missed, fails, gets stuck, runs slow or costs too much. CronWatch is free and open-source.

31

Mcp-Warden

ermoluk

Local-first credential broker for MCP. AI coding agents (Claude Code, Cursor, Codex…) call APIs, SSH and databases through scoped presets; secrets stay in your OS keychain and never enter the agent's context.

4

qrp-mcp

StanimirTenev

Find quantum-vulnerable cryptography in your codebase — secp256k1, Ed25519, BLS, Schnorr, RSA. Local, offline MCP server for AI agents.

SSH MCP Server

hypnosis

SSH MCP server for AI agents: remote commands, file transfer, log search and server audits through OpenSSH.

1

discoverGPT

Joe Monastiero

discoverGPT is visualAI's MCP gateway for AI commerce: one connection gives Claude 40 tools spanning product search, data-quality review, AI-discovery feeds, and virtual try-on, all backed by a single canonical product c

Advertise