codebadger MCP Server
qcri/codebadger
[](https://agentrank-ai.com/tool/qcri--codebadger/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) 🦡 codebadger is a containerized Model Context Protocol (MCP) server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through Joern Code Property Graphs (CPGs).
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
qcri/codebadger is a Python MCP server licensed under GPL-3.0. 🦡 codebadger is a containerized Model Context Protocol (MCP) server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through Joern Code Property Graphs (CPGs). Topics: joern, mcp-server, program-analysis, static-analysis, taint-analysis, agent-skills, agentic-workflow, agents.
Ranked #3260 out of 24846 indexed tools.
Ecosystem
Score Breakdown
173 stars → growing community
Last commit 2mo ago → moderate activity
18/18 issues closed → responsive maintainer
3 contributors → small team
No dependents → no downstream usage
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Badge all embed codes →
[](https://agentrank-ai.com/tool/qcri--codebadger/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) <a href="https://agentrank-ai.com/tool/qcri--codebadger/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge"><img src="https://agentrank-ai.com/api/v1/badge/qcri--codebadger" alt="AgentRank"></a> Matched Queries
From the README
# 🦡 codebadger **codebadger** is a containerized **Model Context Protocol (MCP)** server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through [Joern](https://joern.io/) Code Property Graphs (CPGs). Point it at a Git repository, a local path, or even a pasted code snippet, and codebadger builds a CPG and exposes it over MCP — so an assistant can run CPGQL queries, trace data flow and taint, slice programs, and hunt for vulnerabilities across Java, C/C++, JavaScript, Python, Go, Kotlin, C#, Ghidra, Jimple, PHP, Ruby, and Swift. It's a general-purpose foundation for both **program analysis** (understanding code structure, call graphs, and data flow) and **vulnerability analysis** (taint tracking, bug hunting, and PoC development) — useful for **academic research** as well as **industry** security and engineering work. It's built to scale to large analysis batches with per-CPG worker pools, memory-aware scheduling, and a Postgres/Redis baRead full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.