Pmd MCP Server

PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules…

People connecting this server to Claude, Cursor, VS Code, or another MCP client. The project is written in Java.

VERIFIED ACTIVE

LAST COMMIT 2025-12-14 · ★ 2 · #678 OF 848 MAINTAINED OTHER · VERIFIED 2026-08-25

NOASSERTION · Java · how we verify → /methodology

01 · Install Pmd

Claude Code

claude mcp add roeiba-pmd -- npx -y @springsoftware/pmd-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "roeiba-pmd": {
      "command": "npx",
      "args": [
        "-y",
        "@springsoftware/pmd-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

repository a fork of another project - check the upstream repo before trusting releases

license no standard license detected - usage rights unclear; check the repo before commercial use

npm package @springsoftware/pmd-mcp - the @springsoftware scope differs from the repo owner (roeiba); confirm it's the project's official package

registry namespace io.github.roeiba is GitHub-verified and matches the repo owner

03 · What Pmd can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

mcp-v0.1.0 · 2025-12-08

@springsoftware/pmd-mcp v0.1.0 · First release! MCP server for PMD static code analysis. · pmd_check - Run PMD static analysis on source files · pmd_cpd - Detect duplicated code (Copy-Paste Detector)…

04 · Who maintains Pmd

pmd is maintained by roeiba. It's the only MCP server we track from this author; the repo dates to Dec 2025.

05 · Facts

category
other - ranked #678 of 848 actively-maintained other servers as of 2026-08-25.
registry
io.github.roeiba/pmd (active, first published 2025-12-08)
packages
npm:@springsoftware/pmd-mcp

06 · Pmd FAQ

What is Pmd?

PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules…

Is Pmd still maintained?

Yes - as of 2026-08-25, its last commit was 2025-12-14. We re-verify nightly.

How do I install Pmd?

Run `npx -y @springsoftware/pmd-mcp`. You can also paste the ready-made client config above.

Does Pmd run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Pmd

More MCP servers to compare · Cli2mcp · Rootly · x402 Discovery MCP · Rootstock (RSK) MCP Server · Orchestrator