@codecompa/mcp

AI code advisor for non-technical founders and indie hackers. Finds security vulnerabilities, code quality issues, and dead code — explained in plain English with business impact and fix options.

Get an API key

Email [email protected] with subject "codecompa key" to get a free API key.

Install

Claude Code (CLI)

claude mcp add codecompa \
  -e CODECOMPA_API_KEY=your-key-here \
  -- npx @codecompa/mcp

Then run /review in any Claude Code session.

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "codecompa": {
      "command": "npx",
      "args": ["@codecompa/mcp"],
      "env": {
        "CODECOMPA_API_KEY": "your-key-here"
      }
    }
  }
}

Restart Claude Desktop. The review tool will be available in your next conversation.

Usage

Once installed, use the review tool from any Claude session:

Review my project for security issues
Review ./src/auth for quality issues
Review . for everything

Or ask Claude to run it:

"Use codecompa to review this codebase"

Parameters

| Parameter | Type | Required | Description | |-----------|------|----------|-------------| | target | string | yes | Path to file, directory, or . for current project | | focus | security | quality | all | no | What to focus on (default: all) |

What it checks

Security

• Hardcoded secrets and credentials
• SQL injection, XSS, path traversal
• Insecure dependencies (npm audit, pip-audit)
• Language-specific rules (Semgrep, Bandit, Brakeman, Gosec)

Code Quality

• Copy-paste duplication (jscpd)
• Cyclomatic complexity (Lizard)
• Unused exports and dead code (Knip)
• Language linters (ESLint, RuboCop, Golangci-lint)

License

MIT