code-pathfinder MCP Server
shivasurya/code-pathfinder
[](https://agentrank-ai.com/tool/shivasurya--code-pathfinder/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) Static Code Analysis for security teams with Inter file taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
shivasurya/code-pathfinder is a Go tool licensed under Apache-2.0. Static Code Analysis for security teams with Inter file taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP Topics: sast, security, security-tools, structural-search, application-security, code-scanning, ai-agents, ai-sast, static-analysis, static-code-analysis, mcp, mcp-server.
Ranked #24713 out of 24846 indexed tools.
Ecosystem
Score Breakdown
142 stars → growing community
Last commit 4mo ago → stale
36/73 issues closed → many open issues
4 contributors → small team
No dependents → no downstream usage
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Matched Queries
From the README
<div align="center"> </div> <div align="center"> <h3>Open-source SAST engine that traces vulnerabilities across files and functions</h3> [Website](https://codepathfinder.dev/) · [Docs](https://codepathfinder.dev/docs/quickstart) · [Rule Registry](https://codepathfinder.dev/registry) · [MCP Server](https://codepathfinder.dev/mcp) · [Blog](https://codepathfinder.dev/blog) </div> --- ## Quick Start **Install:** ```bash brew install shivasurya/tap/pathfinder ``` **Scan a Python project** (rules download automatically): ```bash pathfinder scan --ruleset python/all --project . ``` **Scan Dockerfiles:** ```bash pathfinder scan --ruleset docker/all --project . ``` No config files, no API keys, no cloud accounts. Results in your terminal in seconds. --- ## What is Code Pathfinder? Code Pathfinder is an open-source static analysis engine that builds a graph of your codebase and traces how data flows through it. It parses source code into Abstract Syntax Trees, constructs callRead full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.