Codinfy MCP

Official Model Context Protocol server for the Codinfy platform. Connect any MCP-capable AI agent (Claude Code, Codex, Cursor, Continue, Cline, Windsurf, …) to the public Codinfy APIs — validate licenses, create checkouts via Codinfy Pay (GeniusPay), list marketplace products, track analytics, integrate Login with Codinfy (OAuth 2.0 / OIDC) and manage Codinfy Ads placements.

Maintained by RAFLOX SAS (publisher of Codinfy) — Abidjan, Côte d'Ivoire. Part of the public Codinfy developer ecosystem alongside codix-build-mcp.

What is this?

Codinfy MCP exposes 16 tools that let an AI agent interact with the public Codinfy APIs on behalf of a developer, a vendor, an agency or an end customer. It is the canonical bridge between AI coding assistants and the Codinfy marketplace, licensing, payment, identity and ad ecosystem.

Available tools (v0.1.x scaffold)

Tool surface is finalized in subsequent releases. See docs.codinfy.com/mcp.

Install

npm install -g @codinfy/mcp

Or run on demand without install:

npx -y @codinfy/mcp@latest --help

Claude Code / Claude Desktop

{
  "mcpServers": {
    "codinfy": {
      "command": "npx",
      "args": ["-y", "@codinfy/mcp@latest"],
      "env": {
        "CODINFY_API_KEY": "pk_live_xxx",
        "CODINFY_API_BASE": "https://api.codinfy.com"
      }
    }
  }
}

Cursor / Continue / Cline / Windsurf

See docs.codinfy.com/mcp/clients for IDE-specific configuration snippets.

Authentication

The public MCP authenticates with a Codinfy publishable API key (pk_live_xxx for production, pk_sandbox_xxx for sandbox). Get one from your Codinfy dashboard: hub.codinfy.com/settings/api-keys.

Never put a secret key (sk_live_xxx) into an MCP config. Use the publishable key only. Secret keys belong on your server.

Local development

git clone https://github.com/bakalagoin/codinfy-mcp.git
cd codinfy-mcp
npm install
npm run build
npm test

Run the local build against Claude Code:

node dist/index.js

Architecture

src/
├── index.ts            ← MCP server entrypoint (stdio transport)
├── tools/              ← Tool registrations (16 modules)
│   ├── licenses/
│   ├── payments/
│   ├── products/
│   ├── analytics/
│   ├── identity/
│   ├── ads/
│   └── brand/
├── client/             ← Typed Codinfy API client
└── schemas/            ← Zod schemas shared by tools

The server uses the official @modelcontextprotocol/sdk and ships with TypeScript types. All tools have machine-readable JSON schemas so any MCP-compatible agent can auto-discover their capabilities.

Security

• API key is never logged.

• Network requests go to api.codinfy.com over HTTPS only.

• Webhook verification keys are NEVER exposed to the agent.

• Sensitive write actions (create_checkout, etc.) emit a confirmation prompt the agent must surface to the user.

• Rate-limited client-side per Codinfy's public limits (60 req/min by default).

See SECURITY.md (forthcoming) for the responsible disclosure policy.

Versioning

Semantic versioning (MAJOR.MINOR.PATCH). Pre-1.0 the public tool surface may change between minor versions — pin a specific version in production agents.

Related repos

License

MIT — © 2025 RAFLOX SAS. "Codinfy" and "Codix" are trademarks of RAFLOX SAS; their usage in this repo is restricted to the official integration of the platform.