Code Sentinel MCP Server

A comprehensive code quality analysis server for the Model Context Protocol (MCP). CodeSentinel integrates with Claude Code and other MCP-compatible clients to detect security vulnerabilities, deceptive patterns, incomplete code, and highlight good practices. Its 7 documented tools cover analyze, check, patterns. It runs locally over stdio via the published package.

People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-01-04 · ★ 3 · #130 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

TypeScript servers · how we verify → /methodology

01 · Install Code Sentinel

Claude Code

claude mcp add salrad22-code-sentinel -- npx -y code-sentinel-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "salrad22-code-sentinel": {
      "command": "npx",
      "args": [
        "-y",
        "code-sentinel-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license no standard license detected - usage rights unclear; check the repo before commercial use

npm package code-sentinel-mcp - unscoped; check the name against the project README before installing

registry namespace io.github.salrad22 is GitHub-verified and matches the repo owner

03 · What Code Sentinel can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

An agent gets 7 documented tools spanning analyze, check, patterns, including analyze_code, generate_report, check_security, check_deceptive_patterns.

Capability map

Tools grouped from the project's README - what Code Sentinel lets an agent do.

Analyze

3 tools - e.g. Full analysis returning structured JSON with all issues and strengths. Best for programmatic processing.; Analyze code for architectural, design, and implementation patterns. Detects pattern usage…

analyze_code · analyze_patterns · analyze_design_patterns

Check

3 tools - e.g. Security-focused analysis only. Use when you specifically want to audit for vulnerabilities.; Check for code patterns that hide errors or create false confidence.; Find TODOs, dummy data, and incomplete…

check_security · check_deceptive_patterns · check_placeholders

Generate

1 tool - e.g. Full analysis with a visual HTML report. Best for human review.

generate_report

04 · Who maintains Code Sentinel

code-sentinel is maintained by salrad22. It's the only MCP server we track from this author; the repo dates to Dec 2025.

05 · Facts

repository: github.com/salrad22/code-sentinel
category: security - ranked #130 of 182 actively-maintained security servers as of 2026-08-25.
registry: io.github.salrad22/code-sentinel (active, first published 2025-12-29 · 5 versions)
packages: npm:code-sentinel-mcp

06 · Code Sentinel FAQ

Is Code Sentinel still maintained?

Yes - as of 2026-08-25, its last commit was 2026-01-04. We re-verify nightly.

What can Code Sentinel do?

An agent gets 7 documented tools spanning analyze, check, patterns, including analyze_code, generate_report, check_security, check_deceptive_patterns.

How do I install Code Sentinel?

Run `npx -y code-sentinel-mcp`. You can also paste the ready-made client config above.

Does Code Sentinel run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Code Sentinel

Alternatives to Code Sentinel

Maintained security servers if Code Sentinel isn't the fit.

Pairs well with

Servers that cover what Code Sentinel doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Sapiom MCP Server · SAS Viya · Clearfront · Social GPT · Action1 MCP

More TypeScript MCP servers · AdGuard Home MCP Server · Authentik MCP Server · Proxmox VE MCP Server · Transcriptor MCP · Banco Inter · see all