Codeql MCP
C

Codeql MCP

This project is a tool for running a Model Context Protocol (MCP) server. It encapsulates the functions of the CodeQL query server and supports interaction with CodeQL through structured commands and document search.
2.5 points
7.6K

What is the CodeQL MCP Server?

This is a middleware service based on the Model Context Protocol (MCP). It encapsulates the functions of the CodeQL query server, enabling AI tools (such as Cursor) or automated agents to interact with CodeQL through standardized commands.

How to use the CodeQL MCP Server?

After installing the service, configure your AI tool to connect to the MCP server endpoint, and then you can execute CodeQL queries and analyze code through natural language commands.

Use cases

Suitable for developers to quickly conduct code security analysis in the IDE, AI-assisted vulnerability detection, and automated code audit workflows.

Main features

CodeQL database registration
Can register and manage multiple CodeQL analysis databases
Query execution
Supports executing full queries or quickly evaluating specific code symbols
Result decoding
Convert CodeQL's .bqrs binary result files into a readable JSON format
Symbol location
Quickly locate the position of a class or predicate in the source code
Advantages
Provide a standardized AI-friendly interface
Support integration with multiple editors/IDEs
Simplify the parsing process of CodeQL results
Limitations
Requires pre-installation of the CodeQL CLI tool
Performance depends on the capabilities of the underlying CodeQL server
Currently mainly supports security analysis scenarios

How to use

Install dependencies
Use uv or pip to install the required Python dependency packages
Start the server
Run the MCP server and specify the SSE transmission protocol
Configure the editor
Configure the server endpoint in tools that support MCP, such as Cursor

Usage examples

Find security vulnerabilities
Find potential XSS vulnerabilities in JavaScript code
Code understanding
Get the call graph of a specific function

Frequently Asked Questions

Why is the CodeQL CLI tool required?
Which editors/IDEs are supported?
How is the query performance?

Related resources

CodeQL official documentation
Official usage documentation and technical reference for CodeQL
Cursor editor
An AI-enhanced code editor that supports the MCP protocol
MCP protocol specification
Technical specification document for the Model Context Protocol

Installation

Copy the following command to your Client for configuration
Note: Your key is sensitive information, do not share it with anyone.

Alternatives

C
Claude Context
Claude Context is an MCP plugin that provides in - depth context of the entire codebase for AI programming assistants through semantic code search. It supports multiple embedding models and vector databases to achieve efficient code retrieval.
TypeScript
6.1K
5 points
A
Acemcp
Acemcp is an MCP server for codebase indexing and semantic search, supporting automatic incremental indexing, multi-encoding file processing, .gitignore integration, and a Web management interface, helping developers quickly search for and understand code context.
Python
10.4K
5 points
B
Blueprint MCP
Blueprint MCP is a chart generation tool based on the Arcade ecosystem. It uses technologies such as Nano Banana Pro to automatically generate visual charts such as architecture diagrams and flowcharts by analyzing codebases and system architectures, helping developers understand complex systems.
Python
7.4K
4 points
M
MCP Agent Mail
MCP Agent Mail is a mail - based coordination layer designed for AI programming agents, providing identity management, message sending and receiving, file reservation, and search functions, supporting asynchronous collaboration and conflict avoidance among multiple agents.
Python
9.7K
5 points
M
MCP
The Microsoft official MCP server provides search and access functions for the latest Microsoft technical documentation for AI assistants
13.3K
5 points
A
Aderyn
Aderyn is an open - source Solidity smart contract static analysis tool written in Rust, which helps developers and security researchers discover vulnerabilities in Solidity code. It supports Foundry and Hardhat projects, can generate reports in multiple formats, and provides a VSCode extension.
Rust
8.8K
5 points
D
Devtools Debugger MCP
The Node.js Debugger MCP server provides complete debugging capabilities based on the Chrome DevTools protocol, including breakpoint setting, stepping execution, variable inspection, and expression evaluation.
TypeScript
10.1K
4 points
S
Scrapling
Scrapling is an adaptive web scraping library that can automatically learn website changes and re - locate elements. It supports multiple scraping methods and AI integration, providing high - performance parsing and a developer - friendly experience.
Python
12.1K
5 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
17.7K
4.5 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
17.7K
4.3 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
55.0K
4.3 points
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
28.8K
5 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
24.7K
5 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
51.8K
4.5 points
G
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
17.5K
4.5 points
C
Context7
Context7 MCP is a service that provides real-time, version-specific documentation and code examples for AI programming assistants. It is directly integrated into prompts through the Model Context Protocol to solve the problem of LLMs using outdated information.
TypeScript
76.9K
4.7 points
AIBase
Zhiqi Future, Your AI Solution Think Tank
© 2025AIBase