Code Factory MCP Server
That one local command creates a disposable sandbox, proves the healthy check can pass, then proves the hollow check is caught as HOLLOW_E2E_TEST. It writes a receipt and a privacy-safe Proof Card; it never uploads your code. When you are ready to build, run factory mvp "Build an approval tracker" --root ..
People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in Python.
VERIFIED ACTIVE
LAST COMMIT 2026-08-25 · ★ 5 · #18 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25
NOASSERTION · Python servers · how we verify → /methodology
01 · Install Code Factory
Claude Code
claude mcp add zrk222-code-factory -- uvx factoryline-code-factory Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"zrk222-code-factory": {
"command": "uvx",
"args": [
"factoryline-code-factory"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
repo age created 2026-07-08 - young repo, little track record yet
license no standard license detected - usage rights unclear; check the repo before commercial use
pypi package factoryline-code-factory - check the name against the project README before installing (PyPI has no namespace ownership)
registry namespace io.github.zrk222 is GitHub-verified and matches the repo owner
03 · What Code Factory can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
Latest releases
v0.44.2 · 2026-08-25
Code Factory 0.44.2 - Intent lineage navigation · What changed · Graph Ops now shows a compact Intent trace → Forge ship line path when a · Factoryline adapter is hash-bound to a readable Forge receipt. · Inspect…
v0.44.1 · 2026-08-24
Code Factory 0.44.1 - Current visuals and transparent outcomes · This patch makes the public product surfaces match the current Code Factory · experience and adds one bounded, inspectable example of expected outcomes.…
v0.44.0 · 2026-08-22
Code Factory 0.44.0 - First Proof · Code Factory's differentiated result is now one command away: · powershell · factory first-proof --root . · What changed · A sealed local sandbox demonstrates a healthy positive…
04 · Who maintains Code Factory
code-factory is maintained by zrk222. It's the only MCP server we track from this author; the repo dates to Jul 2026.
05 · Facts
- repository
- github.com/zrk222/code-factory
- category
- security - ranked #18 of 182 actively-maintained security servers as of 2026-08-25.
- release cadence
- 10+ releases in the last 90 days (latest 2026-08-25)
- registry
- io.github.zrk222/code-factory (active, first published 2026-08-20 · 4 versions)
- packages
- pypi:factoryline-code-factory
06 · Code Factory FAQ
What is Code Factory?
That one local command creates a disposable sandbox, proves the healthy check can pass, then proves the hollow check is caught as HOLLOW_E2E_TEST. It writes a receipt and a privacy-safe Proof Card; it never uploads your code. When you are ready to build, run factory mvp "Build an approval tracker" --root ..
Is Code Factory still maintained?
Yes - as of 2026-08-25, its last commit was 2026-08-25 and it shipped 10+ releases in the last 90 days. We re-verify nightly.
How do I install Code Factory?
Run `uvx factoryline-code-factory`. You can also paste the ready-made client config above.
Does Code Factory run locally?
Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to Code Factory
Alternatives to Code Factory
Maintained security servers if Code Factory isn't the fit.
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,102 · 2026-08-24
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 632 · 2026-08-24
- Decionis MCP Server Fail-closed policy gate for AI agent actions, with local evaluation and native pre-tool hooks. ★ 533 · 2026-08-24
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 470 · 2026-08-25
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 409 · 2026-08-23
- Bradesco MCP server for Bradesco - Pix, Cobrança (boleto), Arrecadação, Extrato (OAuth2 + mTLS) ★ 269 · 2026-08-12
Pairs well with
Servers that cover what Code Factory doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · VMware NSX Security · 1Claw Vault · Cybersec Toolkit · Change This File · Keyblind
More Python MCP servers · Zscaler Zero Trust Exchange · Progi · Local Keep · VMware AIops · VMware AVI · see all