Back to search
C
69.4 /100

sourcegraph-mcp-server

Author madhukarkumar
Scanned 3d ago

A Model Context Protocol (MCP) server that connects AI assistants to Sourcegraph code search with natural language capabilities

Versions

1.4.2scored
Apr 29, 2025
1.4.1
Apr 29, 2025
1.4.0
Apr 28, 2025
1.3.0
Apr 12, 2025
1.1.0
Apr 11, 2025

Trust breakdown

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 22

echo
annotations: none low

Simple echo tool for testing that returns your message with

message string
search-commits
annotations: none low

Search for commits in Sourcegraph repositories with flexible filtering options.\n\n WHEN TO USE THIS TOOL:\n - When you need to find specific commits across repositories\n - When searching for code changes by a particular author\n - When looking for commits within a particular timeframe\n - When searching for specific commit messages or fixes\n\n PARAMETER USAGE:\n - author: The username of the commit author (e.g.,

after string author string message string
search-diffs
annotations: none low

Search for code changes (diffs) in Sourcegraph repositories with detailed filtering.\n\n WHEN TO USE THIS TOOL:\n - When looking for specific code changes or modifications\n - When you need to find added or removed code\n - When tracking changes by specific authors\n - When investigating changes made during a particular time period\n\n PARAMETER USAGE:\n - query: Terms to search for in the changed code (e.g.,

after string query string author string
search-github-repos
annotations: none low

Search for code, commits, or diffs specifically in GitHub repositories.\n\n WHEN TO USE THIS TOOL:\n - When you need to search within specific known GitHub repositories\n - When searching across multiple GitHub repos simultaneously\n - When you need targeted searches in open source projects\n - When you want to limit searches to verified repositories\n\n PARAMETER USAGE:\n - query: What to search for (e.g.,

query string repos string
natural-search
annotations: none low

Search code repositories using natural language queries instead of precise syntax.\n\n WHEN TO USE THIS TOOL:\n - When you want to search using plain English instead of specific query syntax\n - When you

query string max_results number
get-hover-documentation
annotations: none low

Get hover documentation and type information for a symbol.\n\n

line number path string character number repository string
get-document-symbols
annotations: none low

Get all symbols (functions, classes, variables, etc.) in a file.\n\n

path string repository string
get-file-content
annotations: none low

Get the raw content of a file from any repository.\n\n

path string revision string repository string
get-file-blame
annotations: none low

Get git blame information for a file.\n\n

path string endLine number startLine number repository string
lookup-cve
annotations: none low

Search for CVEs affecting repositories or packages.\n\n

cveId string package string repository string
lookup-package-vulnerability
annotations: none low

Check if specific packages have known vulnerabilities.\n\n

package string version string
search-exploits
annotations: none low

Search for exploit code for known vulnerabilities.\n\n

cveId string
find-vendor-advisory
annotations: none low

Find vendor security advisories.\n\n

vendor string product string
debug
annotations: none low

Lists all available tools and methods in the MCP server. Use this to discover capabilities.\n\n WHEN TO USE THIS TOOL:\n - When you need to see what tools are available in the server\n - When you want to check which methods are supported\n - When debugging or exploring the MCP server capabilities\n - When you

deep-code-researcher
annotations: none low

Conduct deep research on code patterns and architecture across repositories with advanced analysis capabilities.\n\n

repo string limit number query string language string
get-definition
annotations: none low

Find the definition of a symbol in code.\n\n

line number path string character number repository string
find-references
annotations: none low

Find all references to a symbol across repositories.\n\n

line number path string limit number character number repository string
find-implementations
annotations: none low

Find implementations of interfaces, classes, or methods across repositories.\n\n

line number path string limit number character number repository string
test-nl-search
annotations: none low

Test natural language search functionality with debugging information

query string
test-connection
annotations: none low

Test if the MCP server can connect to Sourcegraph API

nl-search-help
annotations: none low

Get help on using natural language search

natural-search-debug
annotations: none low

Search code repositories using natural language queries (debug version)

query string max_results number

Permissions 2

network Server uses network capabilities via: axios
medium
env_vars Server uses env_vars capabilities via: process.env
low

Scan Findings 92

low
Tool 'echo' has no annotations annotation_checker · 100%
low
Tool 'search-commits' has no annotations annotation_checker · 100%
low
Tool 'search-diffs' has no annotations annotation_checker · 100%
low
Tool 'search-github-repos' has no annotations annotation_checker · 100%
low
Tool 'natural-search' has no annotations annotation_checker · 100%
low
Tool 'get-hover-documentation' has no annotations annotation_checker · 100%
low
Tool 'get-document-symbols' has no annotations annotation_checker · 100%
low
Tool 'get-file-content' has no annotations annotation_checker · 100%
low
Tool 'get-file-blame' has no annotations annotation_checker · 100%
low
Tool 'lookup-cve' has no annotations annotation_checker · 100%
low
Tool 'lookup-package-vulnerability' has no annotations annotation_checker · 100%
low
Tool 'search-exploits' has no annotations annotation_checker · 100%
low
Tool 'find-vendor-advisory' has no annotations annotation_checker · 100%
low
Tool 'debug' has no annotations annotation_checker · 100%
low
Tool 'deep-code-researcher' has no annotations annotation_checker · 100%
low
Tool 'get-definition' has no annotations annotation_checker · 100%
low
Tool 'find-references' has no annotations annotation_checker · 100%
low
Tool 'find-implementations' has no annotations annotation_checker · 100%
low
Tool 'test-nl-search' has no annotations annotation_checker · 100%
low
Tool 'test-connection' has no annotations annotation_checker · 100%
low
Tool 'nl-search-help' has no annotations annotation_checker · 100%
low
Tool 'natural-search-debug' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.9.0 (GHSA-46jr-4wx8-v453) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.9.0 (GHSA-6prh-2h8m-c8cw) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.9.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.9.0 (GHSA-rvq5-wwqv-78pq) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.9.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-35jp-ww65-95wh) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-3g43-6gmg-66jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-3p68-rc4w-qgx5) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-3w6x-2g7m-8v23) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-42h9-826w-cgv3) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-43fc-jf86-j433) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-445q-vr5w-6q77) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-4hjh-wcwx-xvwj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-5c9x-8gcm-mpgx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-62hf-57xw-28j9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-6chq-wfr3-2hj9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-7q8q-rj6j-mhjq) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-898c-q2cr-xwhg) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-9fr6-4gfg-395g) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-fvcv-3m26-pcqx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-hfxv-24rg-xrqf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-j5f8-grm9-p9fc) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-j8rh-479h-cp32) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-jr5f-v2jv-69x6) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-m7pr-hjqh-92cm) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-mmx7-hfxf-jppx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-p92q-9vqr-4j8v) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-pf86-5x62-jrwf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-pmv8-rq9r-6j72) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-pmwg-cvhr-8vh7) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-q8qp-cvcw-x6jj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-vf2m-468p-8v99) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-w9j2-pvgh-6h63) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-wf5p-g6vw-rhxx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-xhjh-pmcv-23jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.3.0 (GHSA-xx6v-rp6x-q39c) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.2 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.2 (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@3.22.4 (GHSA-mrhx-c7xc-m3w5) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: echo manifest_parser · 70%
info
Tool: search-commits manifest_parser · 70%
info
Tool: search-diffs manifest_parser · 70%
info
Tool: search-github-repos manifest_parser · 70%
info
Tool: natural-search manifest_parser · 70%
info
Tool: get-hover-documentation manifest_parser · 70%
info
Tool: get-document-symbols manifest_parser · 70%
info
Tool: get-file-content manifest_parser · 70%
info
Tool: get-file-blame manifest_parser · 70%
info
Tool: lookup-cve manifest_parser · 70%
info
Tool: lookup-package-vulnerability manifest_parser · 70%
info
Tool: search-exploits manifest_parser · 70%
info
Tool: find-vendor-advisory manifest_parser · 70%
info
Tool: debug manifest_parser · 70%
info
Tool: deep-code-researcher manifest_parser · 70%
info
Tool: get-definition manifest_parser · 70%
info
Tool: find-references manifest_parser · 70%
info
Tool: find-implementations manifest_parser · 70%
info
Tool: test-nl-search manifest_parser · 70%
info
Tool: test-connection manifest_parser · 70%
info
Tool: nl-search-help manifest_parser · 70%
info
Tool: natural-search-debug manifest_parser · 70%
info
Transport: sse manifest_parser · 90%
info
Required env vars (11) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 8 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%