Atlas / MCP servers / marcelroozekrans / roslyn-codelens-mcp

roslyn-codelens-mcpCAUTION

mcp/marcelroozekrans/roslyn-codelens-mcp

Roslyn-based MCP server giving AI agents deep semantic understanding of .NET/C# codebases — 67 tools for navigation, call graphs, diagnostics & code fixes, safe refactoring, code-quality auditing, test intelligence, DI graphs, and IL/external-assembly inspection.

Verdict
CAUTION
Grade
B
Trust score
89 /100
Exposed tools
—
Transport
stdio
License
MIT
Stars
61
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://mcptoplist.com/server/io.github.MarcelRoozekrans%2Froslyn-codelens)

[](https://www.nuget.org/packages/RoslynCodeLens.Mcp) [](https://www.nuget.org/packages/RoslynCodeLens.Mcp) [](https://www.npmjs.com/package/roslyn-codelens-mcp) [](https://github.com/MarcelRoozekrans/roslyn-codelens-mcp/actions) [](https://github.com/MarcelRoozekrans/roslyn-codelens-mcp/blob/main/LICENSE) [](https://marcelroozekrans.github.io/roslyn-codelens-mcp/) [](https://github.com/sponsors/MarcelRoozekrans)

A Roslyn-based MCP server that gives AI agents deep semantic understanding of .NET codebases — type hierarchies, call graphs, DI registrations, diagnostics, refactoring, and more.

Hosted deployment

A hosted deployment is available on [Fronteir AI](https://fronteir.ai/mcp/marcelroozekrans-roslyn-codelens-

Read from source at commit a4393a26a42aOBSERVED · 2026-10-13
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code (npm)
claude mcp add roslyn-codelens-mcp -- npx -y [email protected]
03

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)WARN
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (7)

MEDIUMPrompt injection · review.instruction_override · CWE-94, CWE-1427
plugins/roslyn-codelens/skills/roslyn-codelens/SKILL.md
If the user asked for *a grep* specifically, ask if they actually want semantic results. If they asked for *information about the code* and suggested grep, use the semantic tool and tell them why.
Why it matters. The skill instructs the agent to override the user's explicit request for a grep and substitute a different tool.
Fix. rewrite it so the instruction says plainly what it does, and asks the user before it acts
LOWInventory / provenance · inv.hidden_file · CWE-1104
.release-please-manifest.json
.release-please-manifest.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
docs/site/static/.nojekyll
.nojekyll
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
README.md:275
roslyn-codelens-mcp /path/to/MySolution.sln --http            # http://127.0.0.1:3001
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
README.md:284
"url": "http://127.0.0.1:3001"
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
docs/site/package.json
@mdx-js/react, clsx, prism-react-renderer, react, react-dom, @types/react, typescript
Why it matters. 7 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-10-13 · audit v0.4.1 · source sha a4393a26a42afull audit observations/trust-audit/mcp-server/marcelroozekrans__roslyn-codelens-mcp.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-13a4393a26a42aCAUTIONB89first audit
05

Questions

What is the roslyn-codelens-mcp MCP server?

Roslyn-based MCP server giving AI agents deep semantic understanding of .NET/C# codebases — 67 tools for navigation, call graphs, diagnostics & code fixes, safe refactoring, code-quality auditing, test intelligence, DI graphs, and IL/external-assembly inspection.

Is roslyn-codelens-mcp safe to connect to an agent?

With care. The audit graded it B (89/100) and found 7 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does roslyn-codelens-mcp need?

No credential environment variables were found in its source, so it appears to need none.

How does roslyn-codelens-mcp run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as roslyn-codelens-mcp at 2.18.2.

How current is this page?

The grade is for one exact copy of the source (a4393a26a42a), read on 2026-10-13. The repository is watched and re-audited when it changes.

Advertisement