MCP.so
登录

Code Reason

@ph0smet

代码仓库

关于 Code Reason

MCP server that gives coding agents program-analysis primitives — data flow, call graphs, taint analysis — so they reason from ground truth instead of grep-and-guess."

基本信息

分类

开发工具

传输方式

stdio

发布者

ph0smet

提交者

sourav kumar

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "code-reason": {
      "command": "/absolute/path/to/build/install/code-reason/bin/code-reason",
      "args": [
        "--stdio"
      ]
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Code Reason?

Code Reason is an MCP server that gives coding agents real program-analysis capabilities — data-flow reachability, call-graph traversal, evidence-chain construction, and source/sink taint analysis. It is built on Fraunhofer AISEC's Code Property Graph for Java and Python codebases and is designed for any MCP-compatible coding agent.

How to use Code Reason?

Add code-reason as an MCP server to your coding agent (tested with Claude Code). First call reason_analyze_project to build the CPG, then use any of the other 9 tools — such as reason_find_entry_points, reason_query_dataflow, or reason_trace_taint_path — for unlimited in-memory queries against the same analysis.

Key features of Code Reason

  • Provides 9 MCP tools for program analysis
  • Built on Fraunhofer AISEC’s Code Property Graph for Java and Python
  • One analyze pass, unlimited subsequent queries
  • Compact JSON evidence chains with intermediate steps and code context
  • ~30–40% fewer agent tokens on multi-step security reviews
  • Works with any MCP-compatible coding agent

Use cases of Code Reason

  • Multi-step security reviews of Java or Python codebases
  • Detecting SQLi, XSS, and command injection via catalog-driven scanning
  • Tracing taint paths from input sources to sensitive sinks
  • Understanding call-graph relationships and data flow across functions
  • Replacing manual grep-based speculation with ground-truth analysis

FAQ from Code Reason

What problem does Code Reason solve?

Without a code-analysis tool, coding agents answer whole-program questions by manual grep-based tracing, which breaks silently on aliased variables, inter-procedural flow, or sanitization checks. Code Reason gives the agent ground-truth primitives instead of speculation.

What languages does Code Reason support?

Code Reason supports Java and Python codebases, using Fraunhofer AISEC’s Code Property Graph.

How many analysis tools does Code Reason provide?

Code Reason provides 9 MCP tools, including tools for analysis, entry point discovery, callers/callees, data-flow querying, taint path tracing, and catalog-driven injection scanning.

What format do analysis results use?

Results are compact structured JSON evidence chains with intermediate steps and code context, not vague textual guesses.

Does Code Reason work with any coding agent?

Yes, Code Reason is MCP-native. It has been tested with Claude Code and works with any MCP-compatible coding agent.

评论

开发工具 分类下的更多 MCP 服务器

nuxt-mcp / vite-plugin-mcp

antfu

MCP server helping models to understand your Vite/Nuxt app better.

910

MCP Unity Editor (Game Engine)

CoderGamester

Model Context Protocol (MCP) plugin to connect with Unity Editor — designed for Cursor, Claude Code, Codex, Windsurf and other IDEs

1.8K

sentry-mcp

getsentry

An MCP server for interacting with Sentry via LLMs.

754

Minecraft MCP Server

yuniko-software

A Minecraft MCP Server powered by Mineflayer API. It allows to control a Minecraft character in real-time, allowing AI assistants to build structures, explore the world, and interact with the game environment through natural language instruction

642

MCP Inspector

modelcontextprotocol

Visual testing tool for MCP servers

10.3K