Atlas / MCP servers / dedeveloper23 / Codebase

CodebaseBLOCK

Name: Codebase
Author: dedeveloper23

mcp/dedeveloper23/codebase

MCP server by dedeveloper23 · Audited 2026-10-07

⚑ Report / re-scan Source ↗

Model Context Protocol implementation for retrieving codebases using RepoMix

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

3 2r · 1w · 0d

Transport

sse · stdio

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

A Model Context Protocol (MCP) server implementation that provides tools to retrieve and analyze entire codebases using RepoMix.

This MCP allows AI Agents like Cursor's Composer Agent to automatically read and understand entire codebases at once, making it easier for developers to work with large codebases and for AI assistants to have comprehensive context of a project.

Features

📚 Codebase Retrieval: Retrieve the entire codebase as a single text output in different formats (XML, Markdown, Plain)
🌐 Remote Repository Support: Process remote GitHub repositories directly
💾 File Saving: Save the processed codebase to a file
🔧 Customizable Options: Control how the codebase is processed with various options (comments, line numbers, file summaries, etc.)

Installation

From NPM (Recommended)

# Install the package globally
npm install -g codebase-mcp

# Install RepoMix (required dependency)
codebase-mcp install

From GitHub

# Clone the repository
git clone https://github.com/DeDeveloper23/codebase-mcp.git

# Navigate to the project directory
cd codebase-mcp

# Install dependencies
npm install

# Build the project
npm run build

# Install globally
npm install -g .

# Install RepoMix (required dependency)
codebase-mcp install

Integration with Cursor

To use this MCP with Cursor's Composer Agent:

Open Cursor IDE
Click the Composer icon in the sidebar
Click the "MCP Servers" button at the top
Click "Add new MCP server"
Fill in the details:
Name: Codebase MCP (or any name you prefer)
Type: command
Command: codebase-mcp start
Click "Add" to save

Once added, the MCP will provide three powerful tools to the Composer Agent:

Available Tools

getCodebase
Purpose: Analyzes your current workspace/project
Use when: You want the AI to understand your entire codebase
Example pro

Read from source at commit b5b7cda4980eOBSERVED · 2026-10-07

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add codebase-mcp -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "codebase-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Exposed tools (3)

2 read · 1 write · 0 destructive.

Tool	Risk	Description
`getCodebase`	read	Retrieve the entire codebase as a single text output using RepoMix
`getRemoteCodebase`	read	Retrieve a remote repository
`saveCodebase`	write	Save the codebase to a file using RepoMix

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (3 observation(s))
Network: declared (5 observation(s))
Shell: declared (5 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (13)

HIGHPrivilege escalation / persistence · priv.escalate · CWE-269, CWE-250

src/client/stdio.ts:59

: /* list inspired by the default env inheritance of sudo */

Why it matters. asks for elevated privileges

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/server/auth/clients.ts:1

import { OAuthClientInformationFull } from "../../shared/auth.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/server/auth/errors.ts:1

import { OAuthErrorResponse } from "../../shared/auth.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/server/auth/handlers/authorize.test.ts:4

import { OAuthClientInformationFull, OAuthTokens } from '../../../shared/auth.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/server/auth/handlers/metadata.test.ts:2

import { OAuthMetadata } from '../../../shared/auth.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/server/auth/handlers/metadata.ts:2

import { OAuthMetadata } from "../../../shared/auth.js";