Enables analysis of C/C++ codebases through Joern CPGs, supporting CPGQL queries, data-flow and taint tracing, slicing, and vulnerability detection.
Allows codebadger to analyze Git repositories by building Code Property Graphs from repository code for CPGQL queries, data-flow and taint tracking, slicing, and vulnerability hunting.
Enables analysis of JavaScript codebases through Joern CPGs, supporting CPGQL queries, data-flow and taint tracing, slicing, and vulnerability detection.
Enables analysis of Kotlin codebases through Joern CPGs, supporting CPGQL queries, data-flow and taint tracing, slicing, and vulnerability detection.
Enables analysis of PHP codebases through Joern CPGs, supporting CPGQL queries, data-flow and taint tracing, slicing, and vulnerability detection.
Enables analysis of Python codebases through Joern CPGs, supporting CPGQL queries, data-flow and taint tracing, slicing, and vulnerability detection.
Enables analysis of Ruby codebases through Joern CPGs, supporting CPGQL queries, data-flow and taint tracing, slicing, and vulnerability detection.
Enables analysis of Swift codebases through Joern CPGs, supporting CPGQL queries, data-flow and taint tracing, slicing, and vulnerability detection.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@codebadger build a CPG for this repo and trace tainted input to SQL queries"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
codebadger is a containerized Model Context Protocol (MCP) server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through Joern Code Property Graphs (CPGs).
Point it at a Git repository, a local path, or even a pasted code snippet, and codebadger builds a CPG and exposes it over MCP — so an assistant can run CPGQL queries, trace data flow and taint, slice programs, and hunt for vulnerabilities across Java, C/C++, JavaScript, Python, Go, Kotlin, C#, Ghidra, Jimple, PHP, Ruby, and Swift.
It's a general-purpose foundation for both program analysis (understanding code structure, call graphs, and data flow) and vulnerability analysis (taint tracking, bug hunting, and PoC development) — useful for academic research as well as industry security and engineering work. It's built to scale to large analysis batches with per-CPG worker pools, memory-aware scheduling, and a Postgres/Redis backend.
codebadger and its paper - Bridging Code Property Graphs and Language Models for Program Analysis - were accepted at the Software Vulnerability Management Workshop @ ICSE 2026. 🎉
Related MCP server: codebadger
Everything a developer or security researcher needs lives in docs/:
Doc | What's in it |
Prerequisites and a 5-minute local setup. | |
Connecting MCP clients, the tool catalog, and a researcher workflow. | |
Recommended bounded tool sequence for agents. | |
Every MCP tool by category, with a description of what each does. | |
| |
Postgres/Redis, memory sizing, | |
System design and diagrams. | |
Threat model, trust boundaries, and production hardening. | |
Add your own detectors. | |
Dev setup, tests, and guidelines. | |
What's shipped and what's next. |
We'd love to hear about it - open a PR adding it to TROPHIES.md (CVE ID, project, one-line description, date).
@inproceedings{lekssays2026bridging,
title={Bridging Code Property Graphs and Language Models for Program Analysis},
author={Lekssays, Ahmed},
booktitle={Proceedings of the 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management},
pages={33--40},
year={2026}
}This server cannot be deployed
Code intelligence platform for AI agents. 20 tools for architecture, security & impact analysis.
Code intelligence for coding agents: semantic, AST, graph, and full-text search. 279+ languages.
AI-powered codebase analysis — call graphs, security, dead code, complexity. 150+ tools.
Code intelligence for LLMs. Analyze, search, and retrieve code from any public git repository.
