Prodlint MCP Server

Production readiness for vibe-coded apps. Static analysis for vibe-coded apps. Flags the security, reliability, performance, and AI quality issues that Cursor, v0, Bolt, and Copilot create - hallucinated imports, missing auth, hardcoded secrets, unvalidated server actions, and more. Zero config, no LLM, 52 rules. It runs locally over stdio via the published package.

People connecting developer tools tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-08-09 · ★ 15 · #79 OF 139 MAINTAINED DEVELOPER TOOLS · VERIFIED 2026-08-25

MIT · TypeScript servers · how we verify → /methodology

01 · Install Prodlint

Claude Code

claude mcp add prodlint-prodlint -- npx -y prodlint-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "prodlint-prodlint": {
      "command": "npx",
      "args": [
        "-y",
        "prodlint-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package prodlint-mcp - unscoped; check the name against the project README before installing

registry namespace io.github.prodlint is GitHub-verified and matches the repo owner

03 · What Prodlint can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.9.1 · 2026-02-26

Improved Detection · Stripe key detection now catches shorter keys (8+ chars after prefix, down from 20) · env-fallback-secret: Detects connection string fallbacks (postgres://, mongodb://, redis://, etc.) regardless…

v0.9.0 · 2026-02-22

What's new · Fix hints on all 52 rules - every finding now includes an actionable fix hint with remediation code. MCP clients and CI output show exactly what to do. · CORS credentials detection - cors-config now…

v0.8.1 · 2026-02-22

Prodlint v0.8.1 · Production readiness for vibe-coded apps. 52 checks across security, reliability, performance, and AI quality. · Changes · Fix false positives in hydration-mismatch and dead-exports rules…

04 · Who maintains Prodlint

prodlint is maintained by prodlint. It's the only MCP server we track from this author; the repo dates to Feb 2026.

05 · Facts

repository: github.com/prodlint/prodlint
website: https://prodlint.com/
category: developer tools - ranked #79 of 139 actively-maintained developer tools servers as of 2026-08-25.
registry: io.github.prodlint/prodlint (active, first published 2026-06-29 · 2 versions)
packages: npm:prodlint-mcp

06 · Prodlint FAQ

What is Prodlint?

Is Prodlint still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-09. We re-verify nightly.

How do I install Prodlint?

Run `npx -y prodlint-mcp`. You can also paste the ready-made client config above.

Does Prodlint run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Prodlint

Alternatives to Prodlint

Maintained developer tools servers if Prodlint isn't the fit.

Pairs well with

Servers that cover what Prodlint doesn't - only shown when the pairing reason fits the companion.

More developer tools MCP servers · LiveCheck AI · Crashdx · Misata · Claudexor · Multi MCP

More TypeScript MCP servers · MediaWiki MCP Server · Tactus · Bexio MCP Server · Bilig WorkPaper · Mythx Engine · see all