A
licenseB
qualityB
maintenanceA simple MCP (Multimodal Conversational Plugin) server based on Joern that provides code review and security analysis capabilities through natural language interfaces.
18
51
MIT
codebadger
by teixeira207
Enables analysis of C/C++ codebases through Joern Code Property Graphs, supporting CPGQL queries, data flow and taint tracing, program slicing, and vulnerability hunting.
Allows ingesting code from Git repositories to build Code Property Graphs for program analysis and vulnerability hunting.
Enables analysis of JavaScript codebases through Joern Code Property Graphs, supporting CPGQL queries, data flow and taint tracing, program slicing, and vulnerability hunting.
Enables analysis of Kotlin codebases through Joern Code Property Graphs, supporting CPGQL queries, data flow and taint tracing, program slicing, and vulnerability hunting.
Enables analysis of PHP codebases through Joern Code Property Graphs, supporting CPGQL queries, data flow and taint tracing, program slicing, and vulnerability hunting.
Enables analysis of Python codebases through Joern Code Property Graphs, supporting CPGQL queries, data flow and taint tracing, program slicing, and vulnerability hunting.
Enables analysis of Ruby codebases through Joern Code Property Graphs, supporting CPGQL queries, data flow and taint tracing, program slicing, and vulnerability hunting.
Enables analysis of Swift codebases through Joern Code Property Graphs, supporting CPGQL queries, data flow and taint tracing, program slicing, and vulnerability hunting.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@codebadgerbuild a CPG for this repo and run taint analysis for SQL injection"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
🦡 codebadger
codebadger is a containerized Model Context Protocol (MCP) server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through Joern Code Property Graphs (CPGs).
Point it at a Git repository, a local path, or even a pasted code snippet, and codebadger builds a CPG and exposes it over MCP — so an assistant can run CPGQL queries, trace data flow and taint, slice programs, and hunt for vulnerabilities across Java, C/C++, JavaScript, Python, Go, Kotlin, C#, Ghidra, Jimple, PHP, Ruby, and Swift.
It's a general-purpose foundation for both program analysis (understanding code structure, call graphs, and data flow) and vulnerability analysis (taint tracking, bug hunting, and PoC development) — useful for academic research as well as industry security and engineering work. It's built to scale to large analysis batches with per-CPG worker pools, memory-aware scheduling, and a Postgres/Redis backend.
News
codebadger and its paper - Bridging Code Property Graphs and Language Models for Program Analysis - were accepted at the Software Vulnerability Management Workshop @ ICSE 2026. 🎉
Related MCP server: RepoWeaver
Documentation
Everything a developer or security researcher needs lives in docs/:
Doc | What's in it |
Prerequisites and a 5-minute local setup. | |
Connecting MCP clients, the tool catalog, and a researcher workflow. | |
Recommended bounded tool sequence for agents. | |
Every MCP tool by category, with a description of what each does. | |
| |
Postgres/Redis, memory sizing, | |
System design and diagrams. | |
Threat model, trust boundaries, and production hardening. | |
Add your own detectors. | |
Dev setup, tests, and guidelines. | |
What's shipped and what's next. |
Found a vulnerability using codebadger?
We'd love to hear about it - open a PR adding it to TROPHIES.md (CVE ID, project, one-line description, date).
Citation
@inproceedings{lekssays2026bridging,
title={Bridging Code Property Graphs and Language Models for Program Analysis},
author={Lekssays, Ahmed},
booktitle={Proceedings of the 2026 IEEE/ACM 4th International Workshop on Software Vulnerability Management},
pages={33--40},
year={2026}
}This server cannot be deployed
Maintenance
ActivityActive
ResponsivenessResponsive
Related MCP Connectors
Hosted code graph over MCP: exact callers, dependencies, and cross-repo blast radius for AI agents.
Repository knowledge graph MCP server for codebase understanding and debugging.
MCP server for static security analysis of Android source code
Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.
Related MCP Servers
- AlicenseNot gradedqualityAmaintenanceMCP server that builds a local code intelligence layer, letting AI agents explore call graphs, blast radius, and source slices via a single tool without external APIs.MIT
- AlicenseNot gradedqualityCmaintenanceMCP server that builds a dependency graph of your codebase, giving AI agents structural understanding to analyze impact, find context, and make safe modifications across languages and infrastructure.MIT
- FlicenseNot gradedqualityAmaintenanceEnables AI agents and LLMs to build Joern Code Property Graphs from repositories, paths, or snippets and query them over MCP for CPGQL queries, data-flow and taint tracing, program slicing, and vulnerability hunting across many languages. It scales to large analysis batches with per-CPG worker pools, memory-aware scheduling, and a Postgres/Redis backend.-