Which integrations are available for this server?

Integrates with CrewAI to enable code auditing as part of multi-agent workflows. Can be used as a tool within LangGraph for orchestrating code review and analysis.

How do I use CodeAudit Agent?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@CodeAudit Agent audit this Python code for security issues" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

🔍 CodeAudit Agent

AI-Powered Code Security, Quality & Performance Review

Paste any code → Get security vulnerabilities, quality issues, performance bottlenecks, auto-fix, and a graded report.

Works as a Streamlit web app AND as an MCP server for VS Code.

What it detects

Category	Checks
🔒 Security	OWASP Top 10 · SQL injection · XSS · hardcoded secrets · eval() · weak crypto · debug mode
✨ Quality	SOLID violations · cyclomatic complexity · naming · DRY · magic numbers · error handling
⚡ Performance	O(n²) loops · N+1 queries · memory leaks · blocking I/O · string concat in loops

Related MCP server: Secure Code Review MCP Server

Languages supported

Python · JavaScript · TypeScript · Java · C++ · C · C# · Go · Rust · PHP · Ruby · Swift · Kotlin · SQL · Bash

Architecture

Code input (Streamlit UI or VS Code via MCP)
    ↓
LangGraph orchestrator
    ↓ (parallel)
┌──────────────┬──────────────┬──────────────┐
│ Security     │ Quality      │ Performance  │
│ Agent        │ Agent        │ Agent        │
│ OWASP Top 10 │ SOLID/Clean  │ Big-O/leaks  │
└──────────────┴──────────────┴──────────────┘
    ↓
Fix Agent (auto-generates fixed code)
    ↓
Scorer (computes grade A+ → F)
    ↓
Report (.md + .json export)

Quick Start

git clone https://github.com/nimra-pixel/codeaudit.git
cd codeaudit
pip install -r requirements.txt
cp .env.example .env    # add GROQ_API_KEY
streamlit run app.py

MCP Server (for VS Code)

python mcp/server.py

Then install the VS Code extension from vscode/ folder.

Right-click any code → CodeAudit: Audit This File

MCP Tools exposed

Tool	Description
`audit_code`	Full security + quality + performance audit
`quick_security_scan`	Security only (faster)
`detect_code_language`	Detect programming language

Works with LangGraph, CrewAI, Claude Desktop, and any MCP client.

Built by

Nimra Tariq — AI Engineer & Assistant Professor, Superior University Lahore, Pakistan

Also built: MedAgent · DeepResearch · VEMA

MIT License

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityInactive

ResponsivenessNo issues

Resources

GitHub Repository

Need Help?

Related Servers

Related MCP Connectors

Frogeye Security Scanner A
io.github.frogeye-ai
Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.
Security Penetration Testing
2
Compuute MCP Security Scanner A
io.github.Compuute
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
Security Code Analysis Version Control
12
mcpcheck B
io.github.joeyough
Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.
Penetration Testing Security
21
secureflows-mcp A
io.github.michal-lefler
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
Code Analysis Developer Tools Security
181

Related MCP Servers

Heliosofficial
Code Analysis Penetration Testing Security
alibaba
A
license
Not graded
quality
D
maintenance
MCP server that securely reviews AI-generated code for vulnerabilities such as SQL injection, command injection, and hardcoded credentials.
Updated 10 months ago (2025-11-03 07:11 UTC)
11
Apache 2.0
Secure Code Review MCP Server
Code Analysis Security
Balakonda-reddy
F
license
Not graded
quality
D
maintenance
Local MCP server that scans code for security issues (secrets, dependencies, configurations, risky patterns) and integrates with GitHub Copilot in VS Code for automated pre-commit reviews.
Updated 3 months ago (2026-06-18 18:10 UTC)
-
mcp-rules-server
Code Analysis Developer Tools
camoran89
F
license
Not graded
quality
D
maintenance
MCP server that provides code validation rules and analysis for various stacks/frameworks, enabling automated code reviews and reporting directly from VS Code and other editors.
Updated 3 months ago (2026-06-19 15:30 UTC)
-
code-review-automation
Testing & QA Tools Code Analysis
KennyWayn3
A
license
Not graded
quality
B
maintenance
MCP server for automated code review using AI agents. It analyzes code diffs or file paths for bugs, security issues, and style violations.
Updated 2 months ago (2026-07-11 07:32 UTC)
MIT