广告合作
MCP.so
登录

Code Reason MCP Server

@ph0smet

代码仓库

基本信息

分类

开发工具

传输方式

stdio

作者

ph0smet

提交者

sourav kumar

关于 Code Reason MCP Server

MCP server that gives coding agents program-analysis primitives — data flow, call graphs, taint analysis — so they reason from ground truth instead of grep-and-guess."

Code Reason MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "code-reason": {
      "command": "/absolute/path/to/build/install/code-reason/bin/code-reason",
      "args": [
        "--stdio"
      ]
    }
  }
}

Code Reason MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Code Reason?

Code Reason is an MCP server that gives coding agents real program-analysis capabilities — data-flow reachability, call-graph traversal, evidence-chain construction, and source/sink taint analysis. It is built on Fraunhofer AISEC's Code Property Graph for Java and Python codebases and is designed for any MCP-compatible coding agent.

How to use Code Reason?

Add code-reason as an MCP server to your coding agent (tested with Claude Code). First call reason_analyze_project to build the CPG, then use any of the other 9 tools — such as reason_find_entry_points, reason_query_dataflow, or reason_trace_taint_path — for unlimited in-memory queries against the same analysis.

Key features of Code Reason

  • Provides 9 MCP tools for program analysis
  • Built on Fraunhofer AISEC’s Code Property Graph for Java and Python
  • One analyze pass, unlimited subsequent queries
  • Compact JSON evidence chains with intermediate steps and code context
  • ~30–40% fewer agent tokens on multi-step security reviews
  • Works with any MCP-compatible coding agent

Use cases of Code Reason

  • Multi-step security reviews of Java or Python codebases
  • Detecting SQLi, XSS, and command injection via catalog-driven scanning
  • Tracing taint paths from input sources to sensitive sinks
  • Understanding call-graph relationships and data flow across functions
  • Replacing manual grep-based speculation with ground-truth analysis

常见问题

1

What problem does Code Reason solve?

Without a code-analysis tool, coding agents answer whole-program questions by manual grep-based tracing, which breaks silently on aliased variables, inter-procedural flow, or sanitization checks. Code Reason gives the agent ground-truth primitives instead of speculation.

2

What languages does Code Reason support?

Code Reason supports Java and Python codebases, using Fraunhofer AISEC’s Code Property Graph.

3

How many analysis tools does Code Reason provide?

Code Reason provides 9 MCP tools, including tools for analysis, entry point discovery, callers/callees, data-flow querying, taint path tracing, and catalog-driven injection scanning.

4

What format do analysis results use?

Results are compact structured JSON evidence chains with intermediate steps and code context, not vague textual guesses.

5

Does Code Reason work with any coding agent?

Yes, Code Reason is MCP-native. It has been tested with Claude Code and works with any MCP-compatible coding agent.

评论

开发工具 分类下的更多 MCP 服务器

ArtiBot Cloud MCP - Zhijiangyun 智匠云

bofob

ArtiBot Cloud MCP (Zhijiangyun 智匠云) — cloud MCP server for robot manipulation data & GPU workloads. 15 tools: robot fleet management, data collection & video recording, post-processing pipelines, and benchmark evaluation

1

qrp-mcp

StanimirTenev

Find quantum-vulnerable cryptography in your codebase — secp256k1, Ed25519, BLS, Schnorr, RSA. Local, offline MCP server for AI agents.

Rams

HSLA0001 Inc.

Design review for UI code, inside your agent. quick_review checks the files you just changed in about ten seconds. review_files returns a 0-100 score and patches. verify_fixes confirms the fixes landed, free. review_url

Layro

Layro

Layro connects your AI coding tool (Cursor, Claude Code, VS Code, Windsurf, Codex, Gemini CLI) to 112 production React, TypeScript and Tailwind CSS components. Your agent can search the library, read each component's pro

PubShip

pubship

Open-source MCP server for Google Play developer workflows. Runs locally with your own credentials.

广告合作