Maven Decoder runs on your own machine — the client starts it, so there is no endpoint to ping. 116 installs a week from pypi. Last commit 16 Sep 2026.
Lets AI agents read the real source of any Maven dependency, decompiled from ~/.m2 or Central.
We read the source, 3 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
require('child_process').execSync(`which ${command}`, { stdio: 'ignore' });
result = subprocess.run(['java', '-jar', cfr_path, '--help'],
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add maven-decoder-mcp -- npx -y maven-decoder-mcp
{
"mcpServers": {
"maven-decoder-mcp": {
"command": "npx",
"args": [
"-y",
"maven-decoder-mcp"
]
}
}
}
[mcp_servers.maven-decoder-mcp]
command = "npx"
args = ["-y", "maven-decoder-mcp"]
{
"mcpServers": {
"maven-decoder-mcp": {
"command": "npx",
"args": [
"-y",
"maven-decoder-mcp"
]
}
}
}
{
"servers": {
"maven-decoder-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"maven-decoder-mcp"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
MAVEN_REPOSITORY (Path to the local Maven repository. Defaults to ~/.m2/repository), MAVEN_REMOTE_REPOS (Comma or whitespace separated list of remote Maven repository base URLs), MAVEN_REMOTE_USERNAME (Username for authenticating against private remote Maven repositories), MAVEN_REMOTE_PASSWORD (Password or token for authenticating against private remote Maven repositories), MAVEN_OFFLINE (Set to true to disable all network access and use only the local repository), MAVEN_AUTO_DOWNLOAD (Whether to automatically download missing artifacts from remote repositories. Defaults to true), MAVEN_DECODER_CACHE_DIR (Override directory used for decompilation and metadata caches).
Open-source licence risk checks for AI coding agents and dependency trees.
JVM dependency intelligence for AI assistants via Maven Central
Kotlin/Java library sources, public API and KDoc from the real Maven sources jar, for AI agents
Search, read and pull the source of complete coded design products from the Orvio catalog.
Structured, cited, real-world data from 300+ sources and the open web for your AI agents.
A local intelligence layer for AI coding agents. Maps your repos, matches the open-source frontier.
Source-traced evidence research for AI agents. We organise the evidence; you decide.
Word tools for AI agents: read/write, decompile to F#/C#/XML/JSON, or build from XML/JSON.
Answers built from our own checks of this server.