Skip to main content
Glama
drewrukin

llm-code-security-review-mcp

by drewrukin

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault

No arguments

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Features and capabilities supported by this server

Protocol revision2025-11-25

CapabilityDetails
tools
{
  "listChanged": false
}

Tools

Functions exposed to the LLM to take actions

NameDescription
load_planA

Load the supplied security-review plan before execution.

get_taskA

Issue or repeat the one current security-review task. Obey its execution_instruction: read source serially in one-file or <=300-line calls, submit report_done for mechanical coverage verification, then immediately call get_task {} again.

statusA

Return read-only authoritative review progress and diagnostics. After the server reports COMPLETE, call status {} and use only its diagnostics for final totals.

report_doneA

Submit the structured result. This call mechanically verifies source coverage and returns the exact missing read when incomplete. For NO FINDINGS, finding_ids, evidence, and artifacts must all be empty. For FINDING or CORROBORATION, include only concise source ranges needed to prove the security effect. After an accepted result, immediately call get_task {} and continue until COMPLETE; after COMPLETE, call status {} and use only its diagnostics for final totals.

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources