DotNetDevMCPSAFE
DotNetDevMCP is an open-source MCP server that gives AI coding agents Roslyn's compiler view of a .NET solution.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
An MCP server that gives AI coding agents real .NET tooling: Roslyn code intelligence, dotnet build/test, affected-test selection, and an orchestrator that runs those tools concurrently as a dependency graph.
[](https://github.com/csa7mdm/DotNetDevMCP/actions/workflows/build.yml) [](https://www.nuget.org/packages/DotNetDevMCP) [](https://www.nuget.org/packages/DotNetDevMCP) [](https://github.com/csa7mdm/DotNetDevMCP/blob/main/LICENSE) [](https://dotnet.microsoft.com/download/dotnet/10.0)
Agents working on .NET code usually get by with grep and shelling out to dotnet. That means they read files instead of symbols, edit text instead of syntax trees, and run one command at a time. DotNetDevMCP replaces that with 37 tools by default (53 with the optional groups below enabled) that use the compiler's view of your solution and can run builds, tests and analysis in parallel.
New here? The wiki has a first-session tutorial, setup for every MCP client, and troubleshooting.
Install
Requires the .NET 10 SDK.
Claude Code
claude mcp add dotnetdevmcp -- dnx DotNetDevMCP --yes
VS Code / Visual Studio (.mcp.json or .vscode/mcp.json)
``
64d94c898a66OBSERVED · 2026-10-11Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (6)
$"http://127.0.0.1:{port}",c2-rescored.json
`http://127.0.0.1:<port>` and `http://[::1]:<port>` (the server's own port) are accepted, plus any exact value passed via
`http://localhost:<port>`, `http://127.0.0.1:<port>` and `http://[::1]:<port>` (the server's own port), plus any exact
- Elevated permissions may be required on some systems
Gates applied: no_behavioural_pass.
64d94c898a66full audit observations/trust-audit/mcp-server/csa7mdm__dotnetdevmcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 64d94c898a66 | SAFE | B | 89 | first audit |
Questions
What is the DotNetDevMCP MCP server?
DotNetDevMCP is an open-source MCP server that gives AI coding agents Roslyn's compiler view of a .NET solution.
Is DotNetDevMCP safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does DotNetDevMCP need?
No credential environment variables were found in its source, so it appears to need none.
How does DotNetDevMCP run?
It speaks stdio, so it runs as a local process your client starts.
How current is this page?
The grade is for one exact copy of the source (64d94c898a66), read on 2026-10-11. The repository is watched and re-audited when it changes.