configdoc
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
configdoc
Every config option in the code, with its default, in one document. You pass configdoc the source files as text, and it scans them for direct environment reads — the config surface most code bases actually use — and returns a single inventory:
Both read forms —
process.env.NAMEandimport.meta.env.NAMEare extracted, where NAME follows the uppercase env convention ([A-Z_][A-Z0-9_]*). Lowercase or mixed-case names are not matched, and destructured reads (const { X } = process.env) and non-env config objects are out of scope by design.Defaults — when a read is immediately followed by
??or||and a literal, that literal is the read's default: a string literal contributes the raw text between its quotes (escapes are not interpreted), a number literal contributes itself as written. A fallback that is an identifier, a call, or anything else captures no default.One entry per option — each distinct name appears once, sorted ascending, with the default captured by the first read of that name (in scan order: files in input order, lines top to bottom, matches left to right) that captures one —
nullwhen no read does — plus the total number of reads of that name across all files and the distinct files it is read in, sorted ascending.
Input is validated strictly: a missing or empty file set, a
file missing path or content, an empty, non-string, or
duplicate path, or a non-string content is an error naming
the offending path (for example files[0].content must be a string), and no partial inventory is produced. The scan is
pure and local: no network, no configuration, no files read
beyond the input you pass in.
CLI
npx @reneturcios/configdoc extract --input args.json
npx @reneturcios/configdoc --versionargs.json contains the full arguments object:
{
"files": [
{
"path": "src/config.ts",
"content": "const port = process.env.PORT ?? 8080;\nconst host = process.env.HOST ?? \"localhost\";"
},
{
"path": "web/env.ts",
"content": "export const api = import.meta.env.API_URL;"
}
]
}The inventory is printed as JSON:
{
"options": [
{ "name": "API_URL", "default": null, "reads": 1, "files": ["web/env.ts"] },
{ "name": "HOST", "default": "localhost", "reads": 1, "files": ["src/config.ts"] },
{ "name": "PORT", "default": "8080", "reads": 1, "files": ["src/config.ts"] }
],
"total_options": 3,
"files_scanned": 2
}Exit codes: 0 on success, 1 on a runtime error
(including an unreadable or invalid input file, or invalid
input), 2 on a usage error.
Related MCP server: web3_auth_scan
MCP server
npx -y @reneturcios/configdoc mcpMCP client config:
{
"mcpServers": {
"configdoc": {
"command": "npx",
"args": ["-y", "@reneturcios/configdoc", "mcp"]
}
}
}Tools
extract_config_options— Extract every configuration option read in the code, with the default each read falls back to, in one inventory.files(array, required, at least one) — source files as{path, content}objects;pathis unique across the set andcontentis the full source text (it may be empty)
Returns
{options, total_options, files_scanned}, where each option is{name, default, reads, files}.
Docker
docker run -i ghcr.io/cloudcorprecords/configdoc
docker run --rm -v "$PWD:/w" ghcr.io/cloudcorprecords/configdoc extract --input /w/args.jsonDevelopment
npm install
npm run build # tsc -> dist/
npm test # tsx --test test/*.test.ts (pure local, no network)
npm run dev # run the CLI from sourceLicense
MIT — Copyright (c) 2026 Rene Turcios
This server cannot be deployed
Maintenance
Related MCP Connectors
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.
Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.
Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceEnables coding agents to scan their work mid-session for dead seams — files reachable only by tests — returning the same JSON as the CLI.1 npmMIT
- AlicenseNot gradedqualityBmaintenanceEnables agents to run static heuristic scans over a repository path via stdio, surfacing review candidates with file:line evidence for web3 auth and payment vulnerability patterns. Results can be used as CI-style gates or triage input without any dataflow analysis or external dependencies.MIT
- AlicenseNot gradedqualityAmaintenanceEnables MCP clients to run deterministic, read-only local repository audits for risky GitHub workflows, undocumented environment variables, possible credentials, and conflicting dependency configuration, returning structured findings without sending source code to a service.63 npmMIT
- AlicenseBqualityCmaintenanceEnables AI coding agents to perform evidence-based, read-only audits of supported software projects by exposing bounded project inventory and static-analysis findings for discovery, code review, integration tracing, security, and tests. Reports are returned as Markdown or JSON directly in the tool response, with no code executed or files written.838 npmMIT