
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@corbat-tech/coding-standards-mcp
Advanced tools
AI coding standards that apply themselves - MCP server that enforces production-grade code
AI-generated code that passes code review on the first try.
Works with GitHub Copilot, Continue, Cline, Tabnine, Amazon Q, and 25+ more tools
AI-generated code works, but rarely passes code review:
| Without Corbat | With Corbat |
|---|---|
| No dependency injection | Proper DI with interfaces |
| Missing error handling | Custom error types with context |
| Basic tests (if any) | 80%+ coverage with TDD |
| God classes, long methods | SOLID, max 20 lines/method |
| Fails SonarQube | Passes quality gates |
Result: Production-ready code that passes code review.
1. Add to your MCP config:
{
"mcpServers": {
"corbat": {
"command": "npx",
"args": ["-y", "@corbat-tech/coding-standards-mcp"]
}
}
}
2. Config file location:
| Tool | Location |
|---|---|
| Cursor | .cursor/mcp.json |
| VS Code | .vscode/mcp.json |
| Windsurf | ~/.codeium/windsurf/mcp_config.json |
| JetBrains | Settings → AI Assistant → MCP |
| Claude Desktop | ~/.config/Claude/claude_desktop_config.json |
| Claude Code | claude mcp add corbat -- npx -y @corbat-tech/coding-standards-mcp |
Complete setup guide for all 25+ tools
3. Done! Corbat auto-detects your stack.
You: "Create a payment service"
Corbat: ✓ Detected: Java 21, Spring Boot 3, Maven
✓ Profile: java-spring-backend
✓ Architecture: Hexagonal + DDD
✓ Testing: TDD, 80%+ coverage
Tested across 20 real-world scenarios:
| Metric | Without | With | Impact |
|---|---|---|---|
| Quality Score | 63/100 | 93/100 | +48% |
| Code Smells | 43 | 0 | -100% |
| SOLID Compliance | 50% | 89% | +78% |
| Tests Generated | 219 | 558 | +155% |
| SonarQube | FAIL | PASS | Fixed |
View detailed benchmark report with code samples
class UserService {
private users: User[] = [];
getUser(id: string) {
return this.users.find(u => u.id === id);
}
createUser(name: string, email: string) {
const user = { id: Date.now(), name, email };
this.users.push(user);
return user;
}
}
// Problems: returns undefined, no validation, no DI, no tests
interface UserRepository {
findById(id: UserId): User | null;
save(user: User): void;
}
class UserService {
constructor(
private readonly repository: UserRepository,
private readonly idGenerator: IdGenerator
) {}
getUser(id: UserId): User {
const user = this.repository.findById(id);
if (!user) throw new UserNotFoundError(id);
return user;
}
createUser(input: CreateUserInput): User {
this.validateInput(input);
const user = User.create(
this.idGenerator.generate(),
input.name.trim(),
input.email.toLowerCase()
);
this.repository.save(user);
return user;
}
}
// ✓ Dependency injection ✓ Custom errors ✓ Validation ✓ 15 tests
| Profile | Stack | Architecture | Testing |
|---|---|---|---|
java-spring-backend | Java 21 + Spring Boot 3 | Hexagonal + DDD + CQRS | TDD, 80%+ coverage |
kotlin-spring | Kotlin + Spring Boot 3 | Hexagonal + Coroutines | Kotest, MockK |
nodejs | Node.js + TypeScript | Clean Architecture | Vitest |
nextjs | Next.js 14+ | Feature-based + RSC | Vitest, Playwright |
react | React 18+ | Feature-based | Testing Library |
vue | Vue 3.5+ | Feature-based | Vitest |
angular | Angular 19+ | Feature modules | Jest |
python | Python + FastAPI | Hexagonal + async | pytest |
go | Go 1.22+ | Clean + idiomatic | Table-driven tests |
rust | Rust + Axum | Clean + ownership | Built-in + proptest |
csharp-dotnet | C# 12 + ASP.NET Core 8 | Clean + CQRS | xUnit, FluentAssertions |
flutter | Dart 3 + Flutter | Clean + BLoC/Riverpod | flutter_test |
minimal | Any | Basic quality rules | Optional |
Auto-detection: Corbat reads pom.xml, package.json, go.mod, Cargo.toml, pubspec.yaml, *.csproj to select the right profile.
Copy a production-ready configuration for your stack:
Browse 14 templates — Java, Python, Node.js, React, Vue, Angular, Go, Kotlin, Rust, Flutter, and more.
npx corbat-init
Interactive wizard that auto-detects your stack and lets you configure architecture, DDD patterns, and quality metrics.
Create .corbat.json in your project root:
{
"profile": "java-spring-backend",
"architecture": {
"pattern": "hexagonal",
"layers": ["domain", "application", "infrastructure", "api"]
},
"ddd": {
"aggregates": true,
"valueObjects": true,
"domainEvents": true
},
"quality": {
"maxMethodLines": 20,
"maxClassLines": 200,
"minCoverage": 80
},
"rules": {
"always": ["Use records for DTOs", "Prefer Optional over null"],
"never": ["Use field injection", "Catch generic Exception"]
}
}
Your Prompt ──▶ Corbat MCP ──▶ AI + Standards
│
├─ 1. Detect stack (pom.xml, package.json...)
├─ 2. Classify task (feature, bugfix, refactor)
├─ 3. Load profile with architecture rules
└─ 4. Inject guardrails before code generation
| Resource | Description |
|---|---|
| Setup Guide | Installation for all 25+ tools |
| Templates | Ready-to-use .corbat.json configurations |
| Compatibility | Full list of supported tools |
| Benchmark Report | 20 real-world tests with code samples |
| API Reference | Tools, prompts, and configuration |
Stop fixing AI code. Start shipping it.
Recommended by corbat-tech — We use Claude Code internally, but Corbat MCP works with any MCP-compatible tool.
FAQs
AI coding standards that apply themselves - MCP server that enforces production-grade code
The npm package @corbat-tech/coding-standards-mcp receives a total of 52 weekly downloads. As such, @corbat-tech/coding-standards-mcp popularity was classified as not popular.
We found that @corbat-tech/coding-standards-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.