Provides program analysis and vulnerability detection for C++ codebases by building Joern Code Property Graphs, enabling CPGQL queries, data flow tracing, taint tracking, and program slicing.
Enables codebadger to ingest and analyze code from Git repositories, building Code Property Graphs for CPGQL queries, data flow tracing, taint analysis, and vulnerability hunting.
Provides program analysis and vulnerability detection for JavaScript codebases by building Joern Code Property Graphs, enabling CPGQL queries, data flow tracing, taint tracking, and program slicing.
Provides program analysis and vulnerability detection for Kotlin codebases by building Joern Code Property Graphs, enabling CPGQL queries, data flow tracing, taint tracking, and program slicing.
Provides program analysis and vulnerability detection for PHP codebases by building Joern Code Property Graphs, enabling CPGQL queries, data flow tracing, taint tracking, and program slicing.
Provides program analysis and vulnerability detection for Python codebases by building Joern Code Property Graphs, enabling CPGQL queries, data flow tracing, taint tracking, and program slicing.
Provides program analysis and vulnerability detection for Ruby codebases by building Joern Code Property Graphs, enabling CPGQL queries, data flow tracing, taint tracking, and program slicing.
Provides program analysis and vulnerability detection for Swift codebases by building Joern Code Property Graphs, enabling CPGQL queries, data flow tracing, taint tracking, and program slicing.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@codebadger build a CPG for https://github.com/example/vulnapp and find taint flows from user input to SQL"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
codebadger is a containerized Model Context Protocol (MCP) server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through Joern Code Property Graphs (CPGs).
Point it at a Git repository, a local path, or even a pasted code snippet, and codebadger builds a CPG and exposes it over MCP — so an assistant can run CPGQL queries, trace data flow and taint, slice programs, and hunt for vulnerabilities across Java, C/C++, JavaScript, Python, Go, Kotlin, C#, Ghidra, Jimple, PHP, Ruby, and Swift.
It's a general-purpose foundation for both program analysis (understanding code structure, call graphs, and data flow) and vulnerability analysis (taint tracking, bug hunting, and PoC development) — useful for academic research as well as industry security and engineering work. It's built to scale to large analysis batches with per-CPG worker pools, memory-aware scheduling, and a Postgres/Redis backend.
codebadger and its paper - Bridging Code Property Graphs and Language Models for Program Analysis - were accepted at the Software Vulnerability Management Workshop @ ICSE 2026. 🎉
Related MCP server: CodeGraph
Everything a developer or security researcher needs lives in docs/:
Doc | What's in it |
Prerequisites and a 5-minute local setup. | |
Connecting MCP clients, the tool catalog, and a researcher workflow. | |
Recommended bounded tool sequence for agents. | |
Every MCP tool by category, with a description of what each does. | |
| |
Postgres/Redis, memory sizing, | |
System design and diagrams. | |
Threat model, trust boundaries, and production hardening. | |
Add your own detectors. | |
Dev setup, tests, and guidelines. | |
What's shipped and what's next. |
We'd love to hear about it - open a PR adding it to TROPHIES.md (CVE ID, project, one-line description, date).
@inproceedings{lekssays2026bridging,
title={Bridging Code Property Graphs and Language Models for Program Analysis},
author={Lekssays, Ahmed},
booktitle={Proceedings of the 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management},
pages={33--40},
year={2026}
}This server cannot be deployed
Code intelligence for coding agents: semantic, AST, graph, and full-text search. 279+ languages.
Code intelligence platform for AI agents. 20 tools for architecture, security & impact analysis.
Code intelligence for LLMs. Analyze, search, and retrieve code from any public git repository.
Codebase graphs, caller impact analysis, and recorded project context for AI coding agents.
