Dvalincode MCP Server
English · 中文 · 🌐 dvalincode.dev Open security engineering for code written by humans and AI agents. It runs locally over stdio via the published package.
People connecting coding agent tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.
VERIFIED ACTIVE
LAST COMMIT 2026-08-25 · ★ 112 · #27 OF 194 MAINTAINED CODING AGENT · VERIFIED 2026-08-25
MIT · TypeScript servers · how we verify → /methodology
01 · Install Dvalincode
before you install - you'll need
Set DVALIN_CODEX_SCAN_DIR before connecting.
Claude Code
claude mcp add arthurpanhku-dvalincode -- npx -y dvalincode Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"arthurpanhku-dvalincode": {
"command": "npx",
"args": [
"-y",
"dvalincode"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
license MIT - declared in the repository
npm package dvalincode - unscoped; check the name against the project README before installing
registry namespace io.github.arthurpanhku is GitHub-verified and matches the repo owner
03 · What Dvalincode can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
Latest releases
v0.17.0 · 2026-08-09
pin formula to v0.16.1 · add run-tool --json for machine-readable results · negotiate the protocol version instead of echoing it back · record that both MCP clients were verified, and the approval gate · add tools…
v0.16.1 · 2026-08-09
keep server.json inside the registry's description limit · 0.16.1 - add the mcpName the registry requires
v0.16.0 · 2026-08-08
type-check src/gui instead of excluding it · publish to npm from the tag, with provenance · ship a Homebrew tap · show Dvalin findings in the Problems panel · expose dvalin_scan so any agent can call the scanner…
04 · Who maintains Dvalincode
dvalincode is maintained by arthurpanhku. It's the only MCP server we track from this author; the repo dates to May 2026.
05 · Facts
- repository
- github.com/arthurpanhku/dvalincode
- category
- coding agent - ranked #27 of 194 actively-maintained coding agent servers as of 2026-08-25.
- release cadence
- 10+ releases in the last 90 days (latest 2026-08-09)
- registry
- io.github.arthurpanhku/dvalincode (active, first published 2026-08-09 · 2 versions)
- packages
- npm:dvalincode
06 · Dvalincode FAQ
What is Dvalincode?
English · 中文 · 🌐 dvalincode.dev Open security engineering for code written by humans and AI agents. It runs locally over stdio via the published package.
Is Dvalincode still maintained?
Yes - as of 2026-08-25, its last commit was 2026-08-25 and it shipped 10+ releases in the last 90 days. We re-verify nightly.
How do I install Dvalincode?
Run `npx -y dvalincode`. The README documents one environment variable (DVALIN_CODEX_SCAN_DIR) to set first. Set DVALIN_CODEX_SCAN_DIR before connecting. You can also paste the ready-made client config above.
Does Dvalincode run locally?
Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to Dvalincode
Alternatives to Dvalincode
Maintained coding agent servers if Dvalincode isn't the fit.
- Serena A powerful toolkit for coding, providing semantic retrieval and editing capabilities. ★ 28,461 · 2026-08-20
- Desktop Commander MCP server for terminal commands, file operations, and process management ★ 9,387 · 2026-08-21
- Ouroboros Pins an acceptance spec; the verify command and expected output never enter the success contract. ★ 5,649 · 2026-08-25
- Socraticode MCP server for local codebase indexing, semantic search, and code dependency graphs. ★ 3,274 · 2026-08-24
- Magic Cloud Self-hosted low-code platform (Docker); its MCP endpoint runs on your own instance, not via npx. ★ 1,180 · 2026-08-24
- LLM Sandbox Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends. ★ 1,111 · 2026-08-23
Pairs well with
Servers that cover what Dvalincode doesn't - only shown when the pairing reason fits the companion.
- Context7 → documentation companion documentation · ★ 61,171
- GitLab MCP → documentation companion documentation · ★ 1,918
- Storybook MCP Addon → developer tools companion developer tools · ★ 268
- Xcode Build MCP → developer tools companion developer tools · ★ 6,274
- Server Filesystem → filesystem companion filesystem · ★ 38,704
- X402 List MCP → filesystem companion filesystem · ★ 58
More coding agent MCP servers · Agent Never Give Up · Roseline MCP · Parecode · Code Map · Callimachus
More TypeScript MCP servers · Artin0123 Gemini Image MCP Server · Bhived MCP · Comfyui MCP · Claudinho · Gmail MCP Server · see all