dev.codepathfinder/pathfinderdev-tools

Code Pathfinder

Verified · yesterday

Code intelligence MCP server: call graphs, type inference, and symbol search for Python/Go.

Install

claude mcp add pathfinder -- uvx codepathfinder

Our take

An MCP interface to Code Pathfinder, an open-source SAST engine whose v2.0 performs cross-file taint analysis — tracing user input from an HTTP handler in one file to a SQL sink in another, the kind of finding single-file pattern matchers miss. No API keys or cloud accounts; rules download automatically. The star count belongs to the parent CLI project, in development since 2023, and the MCP surface is a smaller, newer piece of it. For security teams that want real vulnerability tracing available inside agent workflows rather than another grep wrapper.

reviewed by hand · 2026-07-05

Something wrong or dead here? Report it

Verification record

last verified: yesterday
github stars: 138
last commit: 3 days ago
archived: no
license: Apache-2.0
in registry since: 2026-04-26

github.com/shivasurya/code-pathfinder