io.github.bgauryy/octocode-mcp

← Back to search

AI code research platform. Search, analyze, and extract insights from any GitHub repository.

MCP Registry ↗ npm ↗

40 / 100

Versions

npm199

17.0.2latest

Jul 22, 2026

16.0.0

Jul 9, 2026

15.0.2

Jun 6, 2026

15.0.1

Jun 3, 2026

15.0.0

Jun 2, 2026

+ show 194 moreshow less

14.2.0

May 17, 2026

14.1.2

May 3, 2026

14.1.1

Apr 18, 2026

14.1.0

Apr 10, 2026

14.0.1

Apr 9, 2026

14.0.0

Apr 9, 2026

13.0.1

Mar 21, 2026

13.0.0

Mar 15, 2026

12.1.0

Feb 23, 2026

12.0.0

Jan 24, 2026

11.2.2

Jan 19, 2026

11.2.1

Jan 17, 2026

11.2.0

Jan 17, 2026

11.1.4

Jan 13, 2026

11.1.2

Jan 10, 2026

11.1.1

Jan 9, 2026

11.1.0

Jan 9, 2026

11.0.0

Jan 1, 2026

10.0.2

Dec 31, 2025

10.0.1

Dec 24, 2025

10.0.0

Dec 24, 2025

9.2.0

Dec 21, 2025

9.0.0-alpha.2

Dec 7, 2025

9.0.0

Dec 7, 2025

9.0.0-alpha.1

Dec 7, 2025

8.1.0

Nov 29, 2025

8.1.0-alpha.1

Nov 29, 2025

8.0.0-alpha.1

Nov 26, 2025

8.0.0

Nov 26, 2025

7.0.17

Nov 25, 2025

7.0.16-alpha.1

Nov 22, 2025

7.0.16

Nov 22, 2025

7.0.15-alpha.2

Nov 22, 2025

7.0.15

Nov 21, 2025

7.0.15-alpha.1

Nov 21, 2025

7.0.14-alpha.1

Nov 20, 2025

7.0.14

Nov 20, 2025

7.0.13-alpha.1

Nov 20, 2025

7.0.12-alpha.5

Nov 20, 2025

7.0.13

Nov 20, 2025

7.0.12-alpha.4

Nov 19, 2025

7.0.12-alpha.3

Nov 19, 2025

7.0.12-alpha.2

Nov 19, 2025

7.0.12

Nov 15, 2025

7.0.12-alpha.1

Nov 15, 2025

7.0.11-alpha.5

Nov 15, 2025

7.0.11-alpha.4

Nov 15, 2025

7.0.11-alpha.3

Nov 11, 2025

7.0.11

Nov 11, 2025

7.0.11-alpha.2

Nov 11, 2025

7.0.11-alpha.1

Nov 11, 2025

7.0.10

Nov 10, 2025

7.0.10-alpha.1

Nov 10, 2025

7.0.9-alpha.2

Nov 10, 2025

7.0.9-alpha.1

Nov 10, 2025

7.0.9

Nov 10, 2025

7.0.8-alpha.4

Nov 10, 2025

7.0.8-alpha.3

Nov 10, 2025

7.0.8-alpha.2

Nov 6, 2025

7.0.8

Nov 6, 2025

7.0.8-alpha.1

Nov 6, 2025

7.0.7-alpha.3

Nov 6, 2025

7.0.7-alpha.2

Nov 5, 2025

7.0.7-alpha.1

Nov 4, 2025

7.0.7

Nov 4, 2025

7.0.6

Nov 4, 2025

7.0.6-alpha.3

Nov 4, 2025

7.0.6-alpha.2

Nov 4, 2025

7.0.6-alpha.1

Nov 3, 2025

7.0.5-alpha.1

Nov 3, 2025

7.0.5

Nov 3, 2025

7.0.4-alpha.4

Nov 3, 2025

7.0.4-alpha.3

Nov 2, 2025

7.0.4-alpha.2

Nov 2, 2025

7.0.4

Nov 2, 2025

7.0.4-alpha.1

Nov 2, 2025

7.0.3-alpha.6

Nov 2, 2025

7.0.3-alpha.5

Nov 2, 2025

7.0.3-alpha.4

Nov 2, 2025

7.0.3-alpha.3

Nov 2, 2025

7.0.3-alpha.2

Nov 1, 2025

7.0.3-alpha.1

Oct 31, 2025

7.0.3

Oct 31, 2025

7.0.2-alpha.7

Oct 30, 2025

7.0.2-alpha.6

Oct 30, 2025

7.0.2-alpha.5

Oct 30, 2025

7.0.2-alpha.4

Oct 29, 2025

7.0.2

Oct 29, 2025

7.0.2-alpha.3

Oct 29, 2025

7.0.2-alpha.2

Oct 29, 2025

7.0.2-alpha.1

Oct 29, 2025

7.0.1-alpha.2

Oct 29, 2025

7.0.1-alpha.1

Oct 28, 2025

7.0.1

Oct 28, 2025

7.0.0-alpha.9

Oct 15, 2025

7.0.0-alpha.8

Oct 15, 2025

7.0.0-alpha.7

Oct 15, 2025

7.0.0-alpha.6

Oct 15, 2025

7.0.0

Oct 15, 2025

7.0.0-alpha.5

Oct 15, 2025

7.0.0-alpha.4

Oct 14, 2025

7.0.0-alpha.3

Oct 13, 2025

7.0.0-alpha.2

Oct 13, 2025

7.0.0-alpha.1

Oct 12, 2025

6.3.0-alpha.2

Oct 4, 2025

6.3.0

Oct 1, 2025

6.3.0-alpha.1

Sep 30, 2025

6.2.0-alpha.3

Sep 29, 2025

6.2.0-alpha.2

Sep 29, 2025

6.2.0

Sep 28, 2025

6.2.0-alpha.1

Sep 28, 2025

6.1.1-alpha.1

Sep 27, 2025

6.1.1

Sep 27, 2025

6.1.0

Sep 27, 2025

6.1.0-alpha.1

Sep 27, 2025

6.0.0-alpha.1

Sep 24, 2025

6.0.0

Sep 24, 2025

5.0.0-alpha.8

Sep 23, 2025

5.0.0-alpha.7

Sep 22, 2025

5.0.0-alpha.6

Sep 1, 2025

5.0.0

Aug 27, 2025

5.0.0-alpha.5

Aug 27, 2025

5.0.0-alpha.4

Aug 27, 2025

5.0.0-alpha.3

Aug 26, 2025

5.0.0-alpha.2

Aug 26, 2025

5.0.0-alpha.1

Aug 25, 2025

4.1.2

Aug 22, 2025

4.1.2-alpha.1

Aug 22, 2025

4.1.1-alpha.3

Aug 18, 2025

4.1.1-alpha.2

Aug 18, 2025

4.1.1

Aug 18, 2025

4.1.1-alpha.1

Aug 18, 2025

4.1.0-alpha.3

Aug 18, 2025

4.1.0-alpha.2

Aug 16, 2025

4.1.0

Aug 16, 2025

4.1.0-alpha.1

Aug 16, 2025

4.0.6-alpha.4

Aug 16, 2025

4.0.6-alpha.3

Aug 16, 2025

4.0.6-alpha.2

Aug 12, 2025

4.0.6

Aug 7, 2025

4.0.6-alpha.1

Aug 7, 2025

4.0.5

Aug 7, 2025

4.0.5-alpha.1

Aug 7, 2025

4.0.4-alpha.1

Aug 7, 2025

4.0.4

Aug 7, 2025

4.0.3

Aug 7, 2025

4.0.3-alpha.1

Aug 7, 2025

4.0.2

Aug 7, 2025

4.0.2-alpha.1

Aug 7, 2025

4.0.1-alpha.1

Aug 7, 2025

4.0.0-alpha.2

Aug 7, 2025

4.0.0

Aug 6, 2025

4.0.0-alpha.1

Aug 6, 2025

3.0.1

Jul 30, 2025

3.0.0

Jul 27, 2025

2.5.1

Jul 23, 2025

2.5.0

Jul 23, 2025

2.4.0

Jul 23, 2025

2.3.31

Jul 22, 2025

2.3.30

Jul 21, 2025

2.3.29

Jul 21, 2025

2.3.28

Jul 21, 2025

2.3.27

Jul 21, 2025

2.3.26

Jul 20, 2025

2.3.25

Jul 19, 2025

2.3.24

Jul 16, 2025

2.3.23

Jul 14, 2025

2.3.22

Jul 14, 2025

2.3.21

Jul 14, 2025

2.3.20

Jul 13, 2025

2.3.19

Jul 13, 2025

2.3.18

Jul 11, 2025

2.3.17

Jul 11, 2025

2.3.16

Jul 10, 2025

2.3.15

Jul 9, 2025

2.3.13

Jul 8, 2025

2.3.12

Jul 8, 2025

2.3.11

Jul 7, 2025

2.3.10

Jul 6, 2025

2.3.9

Jul 4, 2025

2.3.8

Jul 1, 2025

2.3.7

Jun 30, 2025

2.3.6

Jun 30, 2025

2.3.5

Jun 24, 2025

2.3.4

Jun 21, 2025

2.3.2

Jun 21, 2025

2.3.1

Jun 19, 2025

2.3.0

Jun 19, 2025

2.2.0

Jun 12, 2025

2.0.0

Jun 11, 2025

1.1.0

Jun 9, 2025

1.0.2

Jun 9, 2025

1.0.1

Jun 6, 2025

1.0.0

Jun 6, 2025

Tools 6

localSearchCode

annotations: none low

localViewStructure

annotations: none low

localFindFiles

annotations: none low

localGetFileContent

annotations: none low

tracked_tool

annotations: none low

signal_tool

annotations: none low

Permissions 4

network medium

Server uses network capabilities via: fetch(), http, https

filesystem low

Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, fs/promises, open(), os, path, pathlib, tempfile

shell high

Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync(), subprocess

env_vars low

Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 60

low

Tool 'localSearchCode' has no annotations annotation_checker · 100%

low

Tool 'localViewStructure' has no annotations annotation_checker · 100%

low

Tool 'localFindFiles' has no annotations annotation_checker · 100%

low

Tool 'localGetFileContent' has no annotations annotation_checker · 100%

low

Tool 'tracked_tool' has no annotations annotation_checker · 100%

low

Tool 'signal_tool' has no annotations annotation_checker · 100%

high

Hardcoded OAuth client ID in bgauryy-octocode-c265e3f/packages/octocode-tools-core/src/shared/credentials/constants.ts auth_checker · 85%

high

Hardcoded OAuth client ID in bgauryy-octocode-c265e3f/packages/octocode/src/features/github-oauth.ts auth_checker · 85%

high

Hardcoded OAuth client secret in bgauryy-octocode-c265e3f/packages/octocode/tests/security/oauth-security.test.ts auth_checker · 95%

medium

OAuth implementation without PKCE auth_checker · 75%

info

Sandbox failed to start for behavioral verification behavioral_verifier · 100%

medium

Vulnerable dependency: vitest@4.1.9 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%

medium

Vulnerable dependency: vitest@4.1.0 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%

medium

Vulnerable dependency: rollup@4.52.5 (GHSA-mw96-cpmx-2vgc) dependency_analyzer · 95%

medium

Buffer.from base64 in bgauryy-octocode-c265e3f/packages/octocode-tools-core/src/github/fileContentRaw/fetch.ts:129 entropy_analyzer · 75%

medium

Hex string literal (>50 chars) in bgauryy-octocode-c265e3f/packages/octocode-engine/src/lsp/serverManifestData.ts:20 entropy_analyzer · 70%

medium

Hex string literal (>50 chars) in bgauryy-octocode-c265e3f/packages/octocode-engine/src/lsp/serverManifestData.ts:27 entropy_analyzer · 70%

medium

Hex string literal (>50 chars) in bgauryy-octocode-c265e3f/packages/octocode-engine/src/lsp/serverManifestData.ts:34 entropy_analyzer · 70%

medium

Hex string literal (>50 chars) in bgauryy-octocode-c265e3f/packages/octocode-engine/src/lsp/serverManifestData.ts:41 entropy_analyzer · 70%

medium

Hex string literal (>50 chars) in bgauryy-octocode-c265e3f/packages/octocode-engine/src/lsp/serverManifestData.ts:57 entropy_analyzer · 70%

medium

Hex string literal (>50 chars) in bgauryy-octocode-c265e3f/packages/octocode-engine/src/lsp/serverManifestData.ts:63 entropy_analyzer · 70%

info

Tool: localFindFiles manifest_parser · 85%

medium

Hex string literal (>50 chars) in bgauryy-octocode-c265e3f/packages/octocode-engine/src/lsp/serverManifestData.ts:69 entropy_analyzer · 70%

medium

Hex string literal (>50 chars) in bgauryy-octocode-c265e3f/packages/octocode-engine/src/lsp/serverManifestData.ts:75 entropy_analyzer · 70%

medium

Hex string literal (>50 chars) in bgauryy-octocode-c265e3f/packages/octocode-engine/src/lsp/serverManifestData.ts:81 entropy_analyzer · 70%

medium

Hex string literal (>50 chars) in bgauryy-octocode-c265e3f/packages/octocode-engine/src/lsp/serverManifestData.ts:88 entropy_analyzer · 70%

medium

Hex string literal (>50 chars) in bgauryy-octocode-c265e3f/packages/octocode-engine/src/lsp/serverManifestData.ts:95 entropy_analyzer · 70%

medium

High-entropy string (5.88 bits/char) in bgauryy-octocode-c265e3f/packages/octocode-mcp/tests/security/all-tools-sanitization.test.ts:17 entropy_analyzer · 53%

medium

Hex string literal (>50 chars) in bgauryy-octocode-c265e3f/packages/octocode-mcp/tests/utils/cache.collision.test.ts:475 entropy_analyzer · 70%

medium

High-entropy string (6.00 bits/char) in bgauryy-octocode-c265e3f/skills/octocode-chrome-devtools/scripts/sourcemap-resolver.mjs:2 entropy_analyzer · 54%

medium

Buffer.from base64 in bgauryy-octocode-c265e3f/skills/octocode-chrome-devtools/scripts/sourcemap-resolver.mjs:134 entropy_analyzer · 75%

medium

Buffer.from base64 in bgauryy-octocode-c265e3f/skills/octocode-chrome-devtools/scripts/cdp-checks/actionability-diagnostics.mjs:57 entropy_analyzer · 75%

info

package.json metadata manifest_parser · 100%

info

Tool: localSearchCode manifest_parser · 85%

info

Tool: localViewStructure manifest_parser · 85%

info

Tool: localGetFileContent manifest_parser · 85%

info

Tool: tracked_tool manifest_parser · 85%

info

Tool: signal_tool manifest_parser · 85%

info

Transport: stdio manifest_parser · 90%

info

Required env vars (111) manifest_parser · 80%

medium

Hardcoded OAuth client ID in bgauryy-octocode-c265e3f/packages/octocode-tools-core/src/shared/credentials/constants.ts oauth_scope_analyzer · 80%

medium

Hardcoded OAuth client ID in bgauryy-octocode-c265e3f/packages/octocode/src/features/github-oauth.ts oauth_scope_analyzer · 80%

info

Sandbox failed to start for output poisoning scan output_poisoning · 100%

medium

Permission: network access detected permission_analyzer · 80%

low

Permission: filesystem access detected permission_analyzer · 90%

high

Permission: shell access detected permission_analyzer · 95%

critical

RSA Private Key found in bgauryy-octocode-c265e3f/packages/octocode-engine/src/security/patterns.rs secret_scanner · 95%

low

Permission: env_vars access detected permission_analyzer · 90%

info

SBOM generated: 47 components sbom_generator · 100%

critical

AWS Access Key ID found in bgauryy-octocode-c265e3f/.yarn/releases/yarn-4.9.1.cjs secret_scanner · 95%

high

Generic API Key Assignment found in bgauryy-octocode-c265e3f/.yarn/releases/yarn-4.9.1.cjs secret_scanner · 75%

high

Hardcoded Password found in bgauryy-octocode-c265e3f/.yarn/releases/yarn-4.9.1.cjs secret_scanner · 65%

critical

GitHub Personal Access Token found in bgauryy-octocode-c265e3f/packages/octocode-engine/src/security/sanitizer.rs secret_scanner · 95%

critical

GitHub Personal Access Token found in bgauryy-octocode-c265e3f/packages/octocode-engine/src/security/detector.rs secret_scanner · 95%

critical

RSA Private Key found in bgauryy-octocode-c265e3f/packages/octocode-engine/src/security/detector.rs secret_scanner · 95%

high

Slack Token found in bgauryy-octocode-c265e3f/packages/octocode-engine/src/security/detector.rs secret_scanner · 90%

critical

EC Private Key found in bgauryy-octocode-c265e3f/packages/octocode-engine/src/security/patterns.rs secret_scanner · 95%

critical

RSA Private Key found in bgauryy-octocode-c265e3f/packages/octocode-engine/src/security/regexes/auth-crypto.ts secret_scanner · 95%

critical

EC Private Key found in bgauryy-octocode-c265e3f/packages/octocode-engine/src/security/regexes/auth-crypto.ts secret_scanner · 95%

medium

No build provenance detected (SLSA L0) slsa_assessor · 90%