← Back to search Server uses network capabilities via: fetch(), http, https Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, fs/promises, open(), os, path, pathlib, tempfile Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync(), subprocess Server uses env_vars capabilities via: os.environ, process.env
octocode-mcp
Model Context Protocol (MCP) server for advanced GitHub repository analysis and code discovery. Provides AI assistants with powerful tools to search, analyze, and understand codebases across GitHub.
D
40 / 100
Versions
17.0.2latestJul 22, 2026
16.0.0Jul 9, 2026
15.0.2Jun 6, 2026
15.0.1Jun 3, 2026
15.0.0Jun 2, 2026
+ show 194 moreshow less
14.2.0May 17, 2026
14.1.2May 3, 2026
14.1.1Apr 18, 2026
14.1.0Apr 10, 2026
14.0.1Apr 9, 2026
14.0.0Apr 9, 2026
13.0.1Mar 21, 2026
13.0.0Mar 15, 2026
12.1.0Feb 23, 2026
12.0.0Jan 24, 2026
11.2.2Jan 19, 2026
11.2.1Jan 17, 2026
11.2.0Jan 17, 2026
11.1.4Jan 13, 2026
11.1.2Jan 10, 2026
11.1.1Jan 9, 2026
11.1.0Jan 9, 2026
11.0.0Jan 1, 2026
10.0.2Dec 31, 2025
10.0.1Dec 24, 2025
10.0.0Dec 24, 2025
9.2.0Dec 21, 2025
9.0.0-alpha.2Dec 7, 2025
9.0.0Dec 7, 2025
9.0.0-alpha.1Dec 7, 2025
8.1.0Nov 29, 2025
8.1.0-alpha.1Nov 29, 2025
8.0.0-alpha.1Nov 26, 2025
8.0.0Nov 26, 2025
7.0.17Nov 25, 2025
7.0.16-alpha.1Nov 22, 2025
7.0.16Nov 22, 2025
7.0.15-alpha.2Nov 22, 2025
7.0.15Nov 21, 2025
7.0.15-alpha.1Nov 21, 2025
7.0.14-alpha.1Nov 20, 2025
7.0.14Nov 20, 2025
7.0.13-alpha.1Nov 20, 2025
7.0.12-alpha.5Nov 20, 2025
7.0.13Nov 20, 2025
7.0.12-alpha.4Nov 19, 2025
7.0.12-alpha.3Nov 19, 2025
7.0.12-alpha.2Nov 19, 2025
7.0.12Nov 15, 2025
7.0.12-alpha.1Nov 15, 2025
7.0.11-alpha.5Nov 15, 2025
7.0.11-alpha.4Nov 15, 2025
7.0.11-alpha.3Nov 11, 2025
7.0.11Nov 11, 2025
7.0.11-alpha.2Nov 11, 2025
7.0.11-alpha.1Nov 11, 2025
7.0.10Nov 10, 2025
7.0.10-alpha.1Nov 10, 2025
7.0.9-alpha.2Nov 10, 2025
7.0.9-alpha.1Nov 10, 2025
7.0.9Nov 10, 2025
7.0.8-alpha.4Nov 10, 2025
7.0.8-alpha.3Nov 10, 2025
7.0.8-alpha.2Nov 6, 2025
7.0.8Nov 6, 2025
7.0.8-alpha.1Nov 6, 2025
7.0.7-alpha.3Nov 6, 2025
7.0.7-alpha.2Nov 5, 2025
7.0.7-alpha.1Nov 4, 2025
7.0.7Nov 4, 2025
7.0.6Nov 4, 2025
7.0.6-alpha.3Nov 4, 2025
7.0.6-alpha.2Nov 4, 2025
7.0.6-alpha.1Nov 3, 2025
7.0.5-alpha.1Nov 3, 2025
7.0.5Nov 3, 2025
7.0.4-alpha.4Nov 3, 2025
7.0.4-alpha.3Nov 2, 2025
7.0.4-alpha.2Nov 2, 2025
7.0.4Nov 2, 2025
7.0.4-alpha.1Nov 2, 2025
7.0.3-alpha.6Nov 2, 2025
7.0.3-alpha.5Nov 2, 2025
7.0.3-alpha.4Nov 2, 2025
7.0.3-alpha.3Nov 2, 2025
7.0.3-alpha.2Nov 1, 2025
7.0.3-alpha.1Oct 31, 2025
7.0.3Oct 31, 2025
7.0.2-alpha.7Oct 30, 2025
7.0.2-alpha.6Oct 30, 2025
7.0.2-alpha.5Oct 30, 2025
7.0.2-alpha.4Oct 29, 2025
7.0.2Oct 29, 2025
7.0.2-alpha.3Oct 29, 2025
7.0.2-alpha.2Oct 29, 2025
7.0.2-alpha.1Oct 29, 2025
7.0.1-alpha.2Oct 29, 2025
7.0.1-alpha.1Oct 28, 2025
7.0.1Oct 28, 2025
7.0.0-alpha.9Oct 15, 2025
7.0.0-alpha.8Oct 15, 2025
7.0.0-alpha.7Oct 15, 2025
7.0.0-alpha.6Oct 15, 2025
7.0.0Oct 15, 2025
7.0.0-alpha.5Oct 15, 2025
7.0.0-alpha.4Oct 14, 2025
7.0.0-alpha.3Oct 13, 2025
7.0.0-alpha.2Oct 13, 2025
7.0.0-alpha.1Oct 12, 2025
6.3.0-alpha.2Oct 4, 2025
6.3.0Oct 1, 2025
6.3.0-alpha.1Sep 30, 2025
6.2.0-alpha.3Sep 29, 2025
6.2.0-alpha.2Sep 29, 2025
6.2.0Sep 28, 2025
6.2.0-alpha.1Sep 28, 2025
6.1.1-alpha.1Sep 27, 2025
6.1.1Sep 27, 2025
6.1.0Sep 27, 2025
6.1.0-alpha.1Sep 27, 2025
6.0.0-alpha.1Sep 24, 2025
6.0.0Sep 24, 2025
5.0.0-alpha.8Sep 23, 2025
5.0.0-alpha.7Sep 22, 2025
5.0.0-alpha.6Sep 1, 2025
5.0.0Aug 27, 2025
5.0.0-alpha.5Aug 27, 2025
5.0.0-alpha.4Aug 27, 2025
5.0.0-alpha.3Aug 26, 2025
5.0.0-alpha.2Aug 26, 2025
5.0.0-alpha.1Aug 25, 2025
4.1.2Aug 22, 2025
4.1.2-alpha.1Aug 22, 2025
4.1.1-alpha.3Aug 18, 2025
4.1.1-alpha.2Aug 18, 2025
4.1.1Aug 18, 2025
4.1.1-alpha.1Aug 18, 2025
4.1.0-alpha.3Aug 18, 2025
4.1.0-alpha.2Aug 16, 2025
4.1.0Aug 16, 2025
4.1.0-alpha.1Aug 16, 2025
4.0.6-alpha.4Aug 16, 2025
4.0.6-alpha.3Aug 16, 2025
4.0.6-alpha.2Aug 12, 2025
4.0.6Aug 7, 2025
4.0.6-alpha.1Aug 7, 2025
4.0.5Aug 7, 2025
4.0.5-alpha.1Aug 7, 2025
4.0.4-alpha.1Aug 7, 2025
4.0.4Aug 7, 2025
4.0.3Aug 7, 2025
4.0.3-alpha.1Aug 7, 2025
4.0.2Aug 7, 2025
4.0.2-alpha.1Aug 7, 2025
4.0.1-alpha.1Aug 7, 2025
4.0.0-alpha.2Aug 7, 2025
4.0.0Aug 6, 2025
4.0.0-alpha.1Aug 6, 2025
3.0.1Jul 30, 2025
3.0.0Jul 27, 2025
2.5.1Jul 23, 2025
2.5.0Jul 23, 2025
2.4.0Jul 23, 2025
2.3.31Jul 22, 2025
2.3.30Jul 21, 2025
2.3.29Jul 21, 2025
2.3.28Jul 21, 2025
2.3.27Jul 21, 2025
2.3.26Jul 20, 2025
2.3.25Jul 19, 2025
2.3.24Jul 16, 2025
2.3.23Jul 14, 2025
2.3.22Jul 14, 2025
2.3.21Jul 14, 2025
2.3.20Jul 13, 2025
2.3.19Jul 13, 2025
2.3.18Jul 11, 2025
2.3.17Jul 11, 2025
2.3.16Jul 10, 2025
2.3.15Jul 9, 2025
2.3.13Jul 8, 2025
2.3.12Jul 8, 2025
2.3.11Jul 7, 2025
2.3.10Jul 6, 2025
2.3.9Jul 4, 2025
2.3.8Jul 1, 2025
2.3.7Jun 30, 2025
2.3.6Jun 30, 2025
2.3.5Jun 24, 2025
2.3.4Jun 21, 2025
2.3.2Jun 21, 2025
2.3.1Jun 19, 2025
2.3.0Jun 19, 2025
2.2.0Jun 12, 2025
2.0.0Jun 11, 2025
1.1.0Jun 9, 2025
1.0.2Jun 9, 2025
1.0.1Jun 6, 2025
1.0.0Jun 6, 2025
Tools 6
localSearchCode annotations: none low
localViewStructure annotations: none low
localFindFiles annotations: none low
localGetFileContent annotations: none low
tracked_tool annotations: none low
signal_tool annotations: none low
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 58
low
Tool 'localSearchCode' has no annotations
low
Tool 'localViewStructure' has no annotations
low
Tool 'localFindFiles' has no annotations
low
Tool 'localGetFileContent' has no annotations
low
Tool 'tracked_tool' has no annotations
low
Tool 'signal_tool' has no annotations
high
Hardcoded OAuth client secret in bgauryy-octocode-af20f66/packages/octocode/tests/security/oauth-security.test.ts
high
Hardcoded OAuth client ID in bgauryy-octocode-af20f66/packages/octocode/src/features/github-oauth.ts
high
Hardcoded OAuth client ID in bgauryy-octocode-af20f66/packages/octocode-tools-core/src/shared/credentials/constants.ts
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: rollup@4.52.5 (GHSA-mw96-cpmx-2vgc)
medium
High-entropy string (6.00 bits/char) in bgauryy-octocode-af20f66/skills/octocode-chrome-devtools/scripts/sourcemap-resolver.mjs:2
medium
Buffer.from base64 in bgauryy-octocode-af20f66/skills/octocode-chrome-devtools/scripts/sourcemap-resolver.mjs:134
medium
Buffer.from base64 in bgauryy-octocode-af20f66/skills/octocode-chrome-devtools/scripts/cdp-checks/actionability-diagnostics.mjs:57
medium
Buffer.from base64 in bgauryy-octocode-af20f66/packages/octocode-tools-core/src/github/fileContentRaw/fetch.ts:129
medium
Hex string literal (>50 chars) in bgauryy-octocode-af20f66/packages/octocode-engine/src/lsp/serverManifestData.ts:20
medium
Hex string literal (>50 chars) in bgauryy-octocode-af20f66/packages/octocode-engine/src/lsp/serverManifestData.ts:27
medium
Hex string literal (>50 chars) in bgauryy-octocode-af20f66/packages/octocode-engine/src/lsp/serverManifestData.ts:34
medium
Hex string literal (>50 chars) in bgauryy-octocode-af20f66/packages/octocode-engine/src/lsp/serverManifestData.ts:41
medium
Hex string literal (>50 chars) in bgauryy-octocode-af20f66/packages/octocode-engine/src/lsp/serverManifestData.ts:57
info
Tool: signal_tool
medium
Hex string literal (>50 chars) in bgauryy-octocode-af20f66/packages/octocode-engine/src/lsp/serverManifestData.ts:63
medium
Hex string literal (>50 chars) in bgauryy-octocode-af20f66/packages/octocode-engine/src/lsp/serverManifestData.ts:69
medium
Hex string literal (>50 chars) in bgauryy-octocode-af20f66/packages/octocode-engine/src/lsp/serverManifestData.ts:75
medium
Hex string literal (>50 chars) in bgauryy-octocode-af20f66/packages/octocode-engine/src/lsp/serverManifestData.ts:81
medium
Hex string literal (>50 chars) in bgauryy-octocode-af20f66/packages/octocode-engine/src/lsp/serverManifestData.ts:88
medium
Hex string literal (>50 chars) in bgauryy-octocode-af20f66/packages/octocode-engine/src/lsp/serverManifestData.ts:95
medium
Hex string literal (>50 chars) in bgauryy-octocode-af20f66/packages/octocode-mcp/tests/utils/cache.collision.test.ts:475
medium
High-entropy string (5.88 bits/char) in bgauryy-octocode-af20f66/packages/octocode-mcp/tests/security/all-tools-sanitization.test.ts:17
info
package.json metadata
info
Tool: localSearchCode
info
Tool: localViewStructure
info
Tool: localFindFiles
info
Tool: localGetFileContent
info
Tool: tracked_tool
info
Transport: stdio
info
Required env vars (111)
medium
Hardcoded OAuth client ID in bgauryy-octocode-af20f66/packages/octocode/src/features/github-oauth.ts
medium
Hardcoded OAuth client ID in bgauryy-octocode-af20f66/packages/octocode-tools-core/src/shared/credentials/constants.ts
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 41 components
critical
GitHub Personal Access Token found in bgauryy-octocode-af20f66/packages/octocode-engine/src/security/sanitizer.rs
critical
GitHub Personal Access Token found in bgauryy-octocode-af20f66/packages/octocode-engine/src/security/detector.rs
critical
RSA Private Key found in bgauryy-octocode-af20f66/packages/octocode-engine/src/security/detector.rs
high
Slack Token found in bgauryy-octocode-af20f66/packages/octocode-engine/src/security/detector.rs
critical
RSA Private Key found in bgauryy-octocode-af20f66/packages/octocode-engine/src/security/patterns.rs
critical
EC Private Key found in bgauryy-octocode-af20f66/packages/octocode-engine/src/security/patterns.rs
critical
RSA Private Key found in bgauryy-octocode-af20f66/packages/octocode-engine/src/security/regexes/auth-crypto.ts
critical
EC Private Key found in bgauryy-octocode-af20f66/packages/octocode-engine/src/security/regexes/auth-crypto.ts
critical
AWS Access Key ID found in bgauryy-octocode-af20f66/.yarn/releases/yarn-4.9.1.cjs
high
Generic API Key Assignment found in bgauryy-octocode-af20f66/.yarn/releases/yarn-4.9.1.cjs
high
Hardcoded Password found in bgauryy-octocode-af20f66/.yarn/releases/yarn-4.9.1.cjs
medium
No build provenance detected (SLSA L0)