Integrations
Used for environment variable management, storing configuration information for connecting to the Joern server
Supports version control integration, used for cloning source code repositories for analysis
Provides the runtime environment for the MCP server, with utility functions and tools for code analysis
Joern MCP Server
A simple MCP Server for Joern.
Project Introduction
This project is an MCP Server based on Joern, providing a series of features to help developers with code review and security analysis.
Environment Requirements
- Python >= 3.10 (default 3.12) & uv
- Joern
Installation Steps
- Clone the project locally:Copy
- Install Python dependencies:Copy
Project Structure
Usage
- Start the Joern server:Copy
- Copy env_example.txt to .env Modify the configuration information to match the joern server startup configuration
- Run the test connection:
Modify the information in
test_mcp_client.py
to confirm the joern server is working properlyCopy - Configure MCP server
Configure the mcp server in cline, refer to
sample_cline_mcp_settings.json
. - Use MCP server
Ask questions to the large language model, refer to
prompts_en.md
Development Notes
.env
file is used to store environment variables.gitignore
file defines files to be ignored by Git version controlpyproject.toml
defines the Python configuration for the project- MCP tool development
- Implement in
server_tools.sc
, add definitions inserver_tools.py
, and add tests intest_mcp_client.py
- Implement in
Contribution Guidelines
Welcome to submit Issues and Pull Requests to help improve the project.
Welcome to add more tools.
References
This server cannot be installed
local-only server
The server can only run on the client's local machine because it depends on local resources.
A simple MCP (Multimodal Conversational Plugin) server based on Joern that provides code review and security analysis capabilities through natural language interfaces.
Related MCP Servers
- AsecurityAlicenseAqualityAn MCP server implementation that integrates Claude with Salesforce, enabling natural language interactions with Salesforce data and metadata for querying, modifying, and managing objects and records.Last updated -78715TypeScriptMIT License
- AsecurityAlicenseAqualityAn MCP server implementation that integrates Claude with Salesforce, enabling natural language interactions with Salesforce data and metadata for querying, modifying, and managing objects and records.Last updated -7184TypeScriptMIT License
- -securityAlicense-qualityA Model Context Protocol compliant server that integrates Semgrep static analysis tool with AI assistants like Anthropic Claude, enabling advanced code analysis, security vulnerability detection, and code quality improvements through a conversational interface.Last updated -4JavaScriptMIT License
- -securityFlicense-qualityA Python-based system that provides AI-powered code reviews through simulated expert personas like Martin Fowler and Robert C. Martin, using the Model Context Protocol (MCP).Last updated -Python