Skip to main content
Glama
athoune

prospector-mcp

by athoune

Prospector MCP Server

An MCP (Model Context Protocol) server that exposes Prospector — the Python static analysis tool — through its native Python API.

Features

  • Run Prospector on a single file or an entire directory.

  • Return structured, machine-readable results (messages with severity, location, rule code).

  • Layered TOML configuration with sensible defaults.

  • Supports both stdio and SSE transports via FastMCP.

  • Secure by default: respects .gitignore, ignores .env / .venv, validates paths, enforces timeouts.

Related MCP server: code-quality-mcp

Installation

Via uvx (recommended)

uvx run prospector-mcp

Via pip

pip install prospector-mcp
prospector-mcp

Development setup

git clone https://github.com/yourname/prospector-mcp.git
cd prospector-mcp
pip install -e ".[dev]"
pytest

Usage

Claude Desktop / OpenCode

Add the server to your MCP settings:

{
  "mcpServers": {
    "prospector": {
      "command": "uvx",
      "args": ["run", "prospector-mcp"]
    }
  }
}

SSE transport

prospector-mcp --transport sse
# or
prospector-mcp --sse

Configuration

Configuration is layered (later layers override earlier ones):

  1. Built-in defaults

  2. Global config: ~/.config/prospector-mcp/config.toml

  3. Project config: .prospector-mcp.toml in the project root

Example .prospector-mcp.toml

[prospector]
timeout = 60
strictness = "medium"
profile = "default"
ignore = [".tox", "build", "dist"]

[server]
transport = "stdio"

Tools

prospector.run

Run Prospector on a target path.

Parameters:

  • target (string, required): Path to a Python file or directory.

  • profile (string, optional): Override the Prospector profile.

  • strictness (string, optional): Override strictness (verylow to veryhigh).

Returns: Structured dict with summary, messages, and execution_time.

prospector.check_ready

Check if Prospector is installed and available.

License

MIT

Install Server
A
license - permissive license
B
quality
B
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • A
    license
    A
    quality
    D
    maintenance
    Enables static analysis of Solidity smart contracts using Slither, including contract metadata, function details, inheritance, and security detectors through MCP tools.
    23
    96
    AGPL 3.0
  • F
    license
    Not graded
    quality
    D
    maintenance
    Provides deterministic Python code quality analysis using flake8, mypy, McCabe, and vulture, enabling LLMs to access real linting and type checking results.
    1
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to scan codebases for prioritized findings (TODO, FIXME, XXX) and retrieve results in table, JSON, or SARIF format via MCP.

View all related MCP servers

Related MCP Connectors

  • Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

  • Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.

  • Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/athoune/prospector-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server