mcpbeat Sign in

Sphior Code MCP Server

local only

Sphior Code MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 169 installs a week from npm. Last commit 26 Oct 2026.

Deterministic SAST/SCA findings + fix guidance for your AI agent. Runs locally, no account needed.

Installs per day peak 9 · avg 3 · -8% w/w
a month agotoday
169
Installs / week
npm · sphior-code-mcp
1
Stars
0 open issues
26 Oct 2026
Last commit
10 releases in 90 days
MIT
License
TypeScript

What the code does

We read the source, 6 d ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Package points at a different repository toraastrta/sphior-code
пакет sphior-code-mcp ссылается на toraastrta/sphior

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add sphior-code-mcp -- npx -y sphior-code-mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.sphior-code-mcp]
command = "npx"
args = ["-y", "sphior-code-mcp"]
.cursor/mcp.json
{
  "mcpServers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "sphior-code-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: SPHIOR_API_KEY (Optional. Without it the server runs in local mode: it scans your workspace with the bundled deterministic engine and returns fix guidance. Set it to also get tamper-evident evidence, history and GRC integrations. Create one at https://sphior.com/account/code), SPHIOR_WORKSPACE (Optional. Directory to scan in local mode. Defaults to the directory your client launches the server in), SPHIOR_API_BASE (Override the API base URL for self-hosted / regional deployments. Default: https://sphior.com/api/v1).

Alternatives to Sphior Code MCP

same job, measured the same way
Agent Release Auditor
by veyndrasystems

Deterministic release gate for AI-written code and coding agents.

82 installs/wk local only
Agent Readiness
by alipajand

Deterministic, read-only audits of repo readiness for AI coding agents and of agent context files.

72 installs/wk local only
mendapi
by mendapi

Detect API breaking changes, scan your codebase for impact, and draft the fix. Runs locally.

135 installs/wk local only
Osnova
by getdomovoi

Deterministic code map for AI coding agents: a tree-sitter call graph with exact file:line over MCP.

85 installs/wk local only
Solumbe
by bashbop

Deterministic local repository context, impact analysis, and merge-readiness evidence for AI agents.

718 installs/wk local only
StaleDocs
by mr-min-max

Finds documentation that no longer matches your code. Deterministic AST check; no API key.

274 installs/wk local only
Hexadata Tools
by 4robot

15 deterministic validation tools for AI agents: tax IDs (15 countries), VAT, IBAN, LEI, HS codes.

answering
AsDecided
by asdecided

Read-only access to deterministic engineering decisions stored in a local repository.

local only

Sphior Code MCP — questions

Answers built from our own checks of this server.

Why is there no uptime for Sphior Code MCP?
Sphior Code MCP runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package sphior-code-mcp was installed 169 times last week.
How do I connect Sphior Code MCP?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls sphior-code-mcp straight from npm; nothing to host, nothing to sign up for.
How many people use Sphior Code MCP?
The npm package sphior-code-mcp was installed 169 times in the last week. Week over week that is -8%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Sphior Code MCP open source?
Yes — it is published under the MIT licence, written in TypeScript and 1 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.