Dvalincode MCP Server

English · 中文 · 🌐 dvalincode.dev Open security engineering for code written by humans and AI agents. It runs locally over stdio via the published package.

People connecting coding agent tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-08-25 · ★ 112 · #27 OF 194 MAINTAINED CODING AGENT · VERIFIED 2026-08-25

MIT · TypeScript servers · how we verify → /methodology

01 · Install Dvalincode

before you install - you'll need

Set DVALIN_CODEX_SCAN_DIR before connecting.

Claude Code

claude mcp add arthurpanhku-dvalincode -- npx -y dvalincode

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "arthurpanhku-dvalincode": {
      "command": "npx",
      "args": [
        "-y",
        "dvalincode"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package dvalincode - unscoped; check the name against the project README before installing

registry namespace io.github.arthurpanhku is GitHub-verified and matches the repo owner

03 · What Dvalincode can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.17.0 · 2026-08-09

pin formula to v0.16.1 · add run-tool --json for machine-readable results · negotiate the protocol version instead of echoing it back · record that both MCP clients were verified, and the approval gate · add tools…

v0.16.1 · 2026-08-09

keep server.json inside the registry's description limit · 0.16.1 - add the mcpName the registry requires

v0.16.0 · 2026-08-08

type-check src/gui instead of excluding it · publish to npm from the tag, with provenance · ship a Homebrew tap · show Dvalin findings in the Problems panel · expose dvalin_scan so any agent can call the scanner…

04 · Who maintains Dvalincode

dvalincode is maintained by arthurpanhku. It's the only MCP server we track from this author; the repo dates to May 2026.

05 · Facts

category
coding agent - ranked #27 of 194 actively-maintained coding agent servers as of 2026-08-25.
release cadence
10+ releases in the last 90 days (latest 2026-08-09)
registry
io.github.arthurpanhku/dvalincode (active, first published 2026-08-09 · 2 versions)
packages
npm:dvalincode

06 · Dvalincode FAQ

What is Dvalincode?

English · 中文 · 🌐 dvalincode.dev Open security engineering for code written by humans and AI agents. It runs locally over stdio via the published package.

Is Dvalincode still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-25 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Dvalincode?

Run `npx -y dvalincode`. The README documents one environment variable (DVALIN_CODEX_SCAN_DIR) to set first. Set DVALIN_CODEX_SCAN_DIR before connecting. You can also paste the ready-made client config above.

Does Dvalincode run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Dvalincode

More coding agent MCP servers · Agent Never Give Up · Roseline MCP · Parecode · Code Map · Callimachus

More TypeScript MCP servers · Artin0123 Gemini Image MCP Server · Bhived MCP · Comfyui MCP · Claudinho · Gmail MCP Server · see all