
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@corbat-tech/coding-standards-mcp
Advanced tools
AI coding standards that apply themselves - MCP server for Claude
Your architecture rules, TDD workflow, and SOLID principles — injected automatically into every AI response.
Every time you ask AI to write code, you repeat the same instructions:
"Create a payment service. Use hexagonal architecture. Follow TDD.
Apply SOLID. Use our naming conventions. Ensure 80% coverage..."
This is tedious, error-prone, and inconsistent.
Define your standards once. Corbat injects them automatically.
You: "Create a payment service"
Corbat: ✓ Detected Java/Spring project
✓ Applied hexagonal architecture
✓ Enforced TDD workflow
✓ Injected SOLID principles
✓ Set 80%+ coverage requirement
One prompt. Full compliance.
| Feature | Corbat | Linters (ESLint, etc.) | Manual prompts |
|---|---|---|---|
| Enforces before code is written | ✅ | ❌ | ❌ |
| Architecture patterns (hexagonal, DDD) | ✅ | ❌ | ⚠️ |
| TDD workflow enforcement | ✅ | ❌ | ⚠️ |
| Task-specific guardrails | ✅ | ❌ | ❌ |
| Auto-detects your stack | ✅ | ❌ | ❌ |
| Zero repetition | ✅ | ✅ | ❌ |
Linters catch errors after the fact. Corbat prevents them.
Step 1 — Clone and build:
git clone https://github.com/corbat-tech/corbat-mcp.git
cd corbat-mcp && npm install && npm run build
Step 2 — Connect to Claude:
| Claude Code |
|
| Claude Desktop |
Edit
|
Step 3 — Use it:
"Create a user service"
Corbat auto-detects your stack and applies all standards. That's it.
When you ask Claude to create code, Corbat injects this context automatically:
# Task: Create payment service
## Detected
- Stack: Java 21 · Spring Boot 3 · Maven
- Task type: FEATURE
- Profile: java-spring-backend
## Guardrails
### MUST
✓ Write tests BEFORE implementation (TDD)
✓ Use hexagonal architecture (domain/application/infrastructure)
✓ Apply SOLID principles
✓ Ensure 80%+ test coverage
✓ Validate all inputs
✓ Document public APIs
### AVOID
✗ God classes (>200 lines) or god methods (>20 lines)
✗ Hard-coded configuration values
✗ Mixing business logic with infrastructure
✗ Circular dependencies between layers
## Workflow
1. CLARIFY → Confirm requirements
2. PLAN → Create task checklist
3. BUILD → TDD cycle: Red → Green → Refactor
4. VERIFY → Tests pass, linter clean
5. REVIEW → Self-check against standards
## Naming Conventions
- Classes: PascalCase (PaymentService)
- Methods: camelCase (processPayment)
- Constants: SCREAMING_SNAKE_CASE
- Packages: lowercase (com.example.payment)
Claude now generates code that follows ALL your standards.
Corbat adapts its rules based on what you're doing:
| Task | MUST | AVOID |
|---|---|---|
| Feature | TDD, 80%+ coverage, SOLID, hexagonal | God classes, coupled layers |
| Bugfix | Failing test first, minimal changes | Refactoring, adding features |
| Refactor | Tests pass before AND after, incremental | Behavior changes, big bang |
| Test | AAA pattern, one assertion, descriptive names | Implementation details, flaky tests |
| Client | Status |
|---|---|
| Claude Code (CLI) | ✅ Tested |
| Claude Desktop | ✅ Tested |
| Cursor | ⚠️ Experimental |
| Windsurf | ⚠️ Experimental |
| Other MCP clients | ✅ Standard protocol |
| Profile | Best for | Architecture |
|---|---|---|
java-spring-backend | Enterprise Java | Hexagonal + DDD |
nodejs | Node.js/TypeScript APIs | Clean Architecture |
python | Python/FastAPI | Clean Architecture |
react | React applications | Feature-based |
angular | Angular 19+ applications | Feature-based + Signals |
vue | Vue 3.5+ applications | Feature-based + Composition |
minimal | MVPs, prototypes | Basic standards |
Auto-detection: Corbat reads pom.xml, package.json, requirements.txt, etc. to select the right profile.
npx /path/to/corbat-mcp/dist/cli/init.js
Create .corbat.json in your project root:
{
"profile": "nodejs",
"rules": {
"always": [
"Use TypeScript strict mode",
"Prefer functional programming"
],
"never": [
"Use any type"
]
}
}
| Tool | Purpose |
|---|---|
get_context | Primary — Returns all standards for your task |
validate | Check code against standards |
search | Search standards documentation |
profiles | List available profiles |
health | Server status check |
| Prompt | Purpose |
|---|---|
implement | Guided implementation with TDD workflow |
review | Expert code review (architecture, SOLID, security) |
┌─────────────────┐ ┌─────────────────┐ ┌─────────────────┐
│ Your Prompt │────▶│ Corbat │────▶│ Claude + Rules │
│ │ │ │ │ │
│ "Create user │ │ 1. Detect stack │ │ Generates code │
│ service" │ │ 2. Classify task│ │ following ALL │
│ │ │ 3. Load profile │ │ your standards │
│ │ │ 4. Inject rules │ │ │
└─────────────────┘ └─────────────────┘ └─────────────────┘
Corbat comes with 15 standards documents you can search:
Use search tool: "search kafka" → Returns event-driven architecture guidelines.
ls /your/path/to/corbat-mcp/dist/index.jsnode is in PATH: which nodeOverride with .corbat.json:
{ "profile": "nodejs" }
Or specify in prompt: "...using profile nodejs"
.corbat.json exists in project rootprofiles/templates/chmod +x /path/to/corbat-mcp/dist/index.js
which node # Use this absolute path in config
| Metric | Value |
|---|---|
| Test coverage | 80%+ |
| Tests passing | 78 |
| TypeScript | Strict mode |
| Linting | Biome |
| Architecture validation | dependency-cruiser |
Define once. Apply everywhere. Ship faster.
FAQs
AI coding standards that apply themselves - MCP server that enforces production-grade code
The npm package @corbat-tech/coding-standards-mcp receives a total of 52 weekly downloads. As such, @corbat-tech/coding-standards-mcp popularity was classified as not popular.
We found that @corbat-tech/coding-standards-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.