Schema | mcp-code-analysis

mcp-code-analysis

Describes the environment variables required to run the server.

Name	Required	Description	Default
`PORT`	No	Port to listen on. Defaults to 8000 if not set; some platforms inject a different port.
`ALLOWED_HOSTS`	No	Comma-separated allow-list of Host headers to enable host/origin validation (mitigates DNS rebinding).
`ALLOW_NO_AUTH`	No	Set to '1' for local development to bypass bearer token authentication. Do not use in production.
`BEARER_TOKENS`	No	Comma-separated list of bearer tokens for authentication. Required for production; if unset and ALLOW_NO_AUTH is not set, the server returns 503 on all routes except /healthz.
`MAX_REPO_BYTES`	No	Maximum total size (in bytes) allowed for a repository scan. Default is 200MB.	200
`MAX_REPO_FILES`	No	Maximum number of files allowed in a repository scan. Default is 2000.	2000
`SEMGREP_CONFIG`	No	Optional semgrep registry configuration to use instead of the bundled offline ruleset (e.g. 'auto', 'p/ci', 'p/security-audit'). Requires outbound network access.
`CLONE_TIMEOUT_SECONDS`	No	Hard timeout (in seconds) for git clone operations. Default is 30.	30
`SUBPROCESS_TIMEOUT_SECONDS`	No	Hard timeout (in seconds) for ruff and semgrep subprocesses. Default is 30.	30

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Server capabilities have not been inspected yet.

Functions exposed to the LLM to take actions

Name	Description
No tools

Interactive templates invoked by user choice

Name	Description
No prompts

Contextual data attached and managed by the client

Name	Description
No resources

This server cannot be deployed

ActivityMaintained

ResponsivenessNo issues