Code Factory runs on your own machine — the client starts it, so there is no endpoint to ping. 2 591 installs a week from pypi. Last commit 16 Oct 2026.
Read-only audit evidence for security, tests, native coverage, runtime failures and repair status.
What the code does
We read the source, 23 h ago · rules ccca72095570
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
setup.py: выполняет код при установке пакета
completed = subprocess.run(
value = yaml.load(data.decode("utf-8-sig"), Loader=_UniqueKeyLoader)
studioProcess = childProcess.spawn(command, args, { cwd: root, shell: false });
"payload": "eyJmaWxlcyI6eyJjYW5hcmllcy9tYW5pZmVzdC5qc29uIjoiYTVhZDgwZDJlNDk0YjRhZjM0YjE5ZjZmMWFiYzQ2MDc2MmI0YWI4MmFiMWFiNzhiODhlZDk2MTUxNTMzZWY1MiIsImdlbmVyYXRvci9hZGFwdGVyLmpzb24iOiIxYzE4OTJmODQ0YWE1YmEwMGJhNDNiYmI2ZjVlYTEyY2ZiYzkzYzJkZGU4YTQyOWY4YzRlOWFmODhiNWU1MThkIiwiZ29sZG…
environment = dict(environ) if environ is not None else dict(os.environ)
r"(?:^|[._-])(secret|token|password|passwd|credential|credentials|private[-_]?key|api[-_]?key)(?:$|[._-])|(?:^|[/\\])\.env(?:\.[^/\\]*)?$|(?:^|[/\\])(?:id_rsa|id_ed25519|known_hosts|credentials\.json|service[-_]?account[^/\\]*|kubeconfig)$",
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
- name: Publish verified plugin update
env:
PUBLISH_TOKEN: ${{ secrets.JETBRAINS_MARKETPLACE_TOKEN }}
regex = '''(?:https?://)?hooks.slack.com/(?:services|workflows|triggers)/[A-Za-z0-9+/]{43,56}'''
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add code-factory -- uvx factoryline-code-factory{
"mcpServers": {
"code-factory": {
"args": [
"factoryline-code-factory"
],
"command": "uvx"
}
}
}[mcp_servers.code-factory]
command = "uvx"
args = ["factoryline-code-factory"]{
"mcpServers": {
"code-factory": {
"args": [
"factoryline-code-factory"
],
"command": "uvx"
}
}
}{
"mcpServers": {
"code-factory": {
"args": [
"factoryline-code-factory"
],
"command": "uvx"
}
}
}Alternatives to Code Factory
same job, measured the same wayGovernance runtime for AI-generated code. Enforce compliance and security standards.
Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.
Read-only guidance and report templates for reviewing application security with your own agent.
Read-only MCP server for AgentLoopKit tasks, policies, reports, handoffs, and status.
Audit GitHub repos for security, compliance, and EU AI Act exposure from Claude or Cursor.
Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.
BuildPulse CI test analytics for AI agents — flaky tests, CI failures, flakiness, and code coverage.
Repo-native task continuity for AI coding agents: a reviewed task-state ledger served over MCP.
Code Factory — questions
Answers built from our own checks of this server.