Skip to content

Add CodeSafer — AI code security scanner MCP server#3906

Closed
goldmembrane wants to merge 1 commit intomodelcontextprotocol:mainfrom
goldmembrane:add-codesafer
Closed

Add CodeSafer — AI code security scanner MCP server#3906
goldmembrane wants to merge 1 commit intomodelcontextprotocol:mainfrom
goldmembrane:add-codesafer

Conversation

@goldmembrane
Copy link
Copy Markdown

What

Add CodeSafer to the Community Servers list.

Entry

- **[CodeSafer](https://github.com/goldmembrane/cleaner-code)** - AI code security scanner MCP server. Detects 9 categories of threats in AI-generated code (invisible Unicode, Trojan Source, homoglyphs, Glassworm steganography, rules file backdoors, dependency typosquatting, obfuscation) using static analysis plus CodeBERT deep learning. Runs locally, free tier.

About CodeSafer

CodeSafer is a Model Context Protocol server that scans AI-generated code for hidden security threats. It pairs 8 deterministic static analysis scanners with a CodeBERT deep learning classifier, all running locally.

6 MCP tools:

  • scan_file — scan a single file
  • scan_directory — recursively scan a directory
  • scan_rules_file — scan AI config files (.cursorrules, CLAUDE.md) for prompt injection and backdoors
  • check_dependencies — scan package.json for typosquatting and risky install scripts
  • ai_analyze — CodeBERT deep analysis with confidence scores
  • explain_finding — detailed explanation of threat categories

Detection categories (9 total): invisible Unicode, BiDi/Trojan Source, homoglyphs, Glassworm steganography, rules file backdoors, dependency typosquatting, obfuscation patterns, static analysis findings, AI deep analysis.

Website: https://codesafer.org/
Repository: https://github.com/goldmembrane/cleaner-code
License: ISC
Runtime: Node.js >= 18

Checklist

  • Entry added alphabetically to the Community Servers list
  • Format matches existing entries: - **[Name](URL)** - description
  • Server is a real, working MCP server built on @modelcontextprotocol/sdk
  • Repository includes README, license, and clear description

@goldmembrane
Copy link
Copy Markdown
Author

Closing this PR — I noticed the CI check-readme-only workflow indicated that this repo no longer accepts new-server README PRs, and that submissions should go to modelcontextprotocol/registry instead. Will publish CodeSafer to the MCP Registry via the mcp-publisher CLI. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant