Coverity MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| PORT | No | HTTP server port (only with TRANSPORT=http) | 3000 |
| TRANSPORT | No | Transport mode: stdio or http | stdio |
| COVERITY_SSL | No | Use HTTPS | true |
| COVERITY_HOST | Yes | Coverity Connect server hostname | |
| COVERITY_PORT | No | Server port | 8443 |
| COVERITY_USER | Yes | Username | |
| COVERITY_AUTH_KEY | Yes | Authentication key |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| resources | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_projectsA | List all Coverity projects the authenticated user can access |
| list_streamsA | List Coverity streams for the configured project. |
| get_issue_detailsA | Get full details for a Coverity defect by CID, including the event trace (code path that leads to the defect), triage information, and file/line details useful for resolving the issue. |
| search_issuesA | Search for static analysis defects in the configured Coverity project. Returns CID, checker, file, function, impact, and status for each issue. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| server-info | Coverity server connection info |
TDQS
Scored across 4 tools
Each tool targets a distinctly different resource or level of detail: projects vs streams vs issue summaries vs full issue detail. There is no meaningful overlap between the tools.
All tool names use a consistent lowercase snake_case verb_noun pattern: list_projects, list_streams, get_issue_details, search_issues. The verbs map predictably to the action being performed.
Four tools is a reasonable, focused set for a read-only Coverity query server. Each tool serves a necessary step in navigating from projects and streams down to specific defect details.
The tool set covers the core read-only workflow: identify project, identify stream, search defects, and view full issue details. Minor gaps exist, such as no triage update or project/stream detail endpoints, but they do not block the primary use case.