Codna — repository intelligence runs on your own machine — the client starts it, so there is no endpoint to ping. 11 271 installs a week from pypi. Last commit 6 Nov 2026.
Repo intelligence: triage, fix PRs, SARIF reachability, recall. Free codna login to execute.
We read the source, 4 h ago · rules 995398eba69f
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
root = subprocess.run(
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
setup.py: выполняет код при установке пакета
этот файл ставится пользователю, но в репозитории его нет
result = subprocess.run(
path = os.path.join(root, rel)
child = spawn(command, childArgs, { cwd: DIR, env: childEnv(), stdio: "inherit" });
base_env=dict(os.environ),
size = sum(os.path.getsize(os.path.join(r, f)) for r, _, fs in os.walk(out) for f in fs)
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Codna — repository intelligence and you get told the day something new turns up.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add codna -- uvx codna
{
"mcpServers": {
"codna": {
"command": "uvx",
"args": [
"codna"
]
}
}
}
[mcp_servers.codna]
command = "uvx"
args = ["codna"]
{
"mcpServers": {
"codna": {
"command": "uvx",
"args": [
"codna"
]
}
}
}
{
"servers": {
"codna": {
"type": "stdio",
"command": "uvx",
"args": [
"codna"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
ANTHROPIC_API_KEY (Provider key for codna_fix's planner — any one of ANTHROPIC_API_KEY (Anthropic), OPENAI_API_KEY (OpenAI/ChatGPT), or GEMINI_API_KEY (Gemini) works (or store one with `codna key set <provider>`). Every tool also requires the one-time free `codna login` device authorization before executing; introspection (initialize/tools/list) needs no credentials), OPENAI_API_KEY (Alternative provider key (OpenAI/ChatGPT) for codna_fix's planner — see ANTHROPIC_API_KEY), GEMINI_API_KEY (Alternative provider key (Gemini) for codna_fix's planner — see ANTHROPIC_API_KEY), GITHUB_TOKEN (Write token, only for codna_fix with open_pr=true (opens a pull request) and codna_report_bug (files an issue)), CODNA_API_KEY (Codna key from the one-time free `codna login` (device authorization, free community license). Required to execute any of the five tools; introspection (initialize/tools/list) needs none).
Linux package, file, command, vulnerability, lifecycle, migration, and repository intelligence.
Local-first MCP server for code search, repository intelligence, comparison, and safe file edits.
Cross-repository semantic code intelligence for AI coding agents, from a local code graph.
Repo intel for AI coding agents: overview, PRs, contributors, hot files, CI, deps. Remote MCP.
Code intelligence for LLMs. Analyze, search, and retrieve code from any public git repository.
PageRank-curated code intelligence for coding agents over an indexed source repository.
Analyze repos of any size - security scanning code analysis monorepo support
Repository-owned engineering pattern intelligence - 19 MCP tools over stdio.
Answers built from our own checks of this server.