
Security News
pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90%
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.
@vaur94/mcp-code
Advanced tools
Production-grade MCP server for semantic coding workflows and AI coding-agent acceleration.
🇬🇧 English | 🇹🇷 Turkce
Semantic MCP server for AI coding agents that resolves the right code slice, plans bounded edits, predicts impact, and routes scoped verification.
@vaur94/mcpbase as an installed package, not a fork.git clone https://github.com/vaur94/mcp-code.git
cd mcp-code
npm ci
npm run build
Use examples/mcp-code.config.json as the starting point.
{
"server": {
"name": "mcp-code",
"version": "0.1.0"
},
"logging": {
"level": "info",
"includeTimestamp": false
},
"workspace": {
"rootPath": "/absolute/path/to/repository",
"include": ["src/**/*.{ts,tsx,js,jsx}", "tests/**/*.{ts,tsx,js,jsx}"],
"exclude": ["**/node_modules/**", "**/dist/**", "**/coverage/**"]
},
"security": {
"commands": {
"allowed": ["npm"]
},
"paths": {
"allowed": ["/absolute/path/to/repository"]
}
}
}
{
"mcpServers": {
"mcp-code": {
"command": "node",
"args": ["/absolute/path/to/mcp-code/dist/index.js"],
"env": {
"MCP_CODE_CONFIG": "/absolute/path/to/mcp-code.config.json"
}
}
}
}
resolve_code_sliceexplain_sliceplan_safe_editapply_safe_editanalyze_impactverify_slice| Tool | Purpose |
|---|---|
resolve_code_slice | Resolve the smallest useful semantic working set for a symbol, file, or coding target. |
explain_slice | Compress a slice into responsibilities, constraints, contracts, and risks. |
plan_safe_edit | Create a bounded edit plan with invariants, touched files, and verification guidance. |
apply_safe_edit | Apply approved edits only within the planned symbol and file scope. |
analyze_impact | Estimate blast radius, downstream dependents, and contract exposure. |
verify_slice | Route targeted validation and group failures by touched-scope relevance. |
src/index.ts boots the server through @vaur94/mcpbase.src/context/ builds the shared service container and typed execution context.src/infrastructure/repository-analyzer.ts owns slice resolution, explanations, edit planning, impact analysis, and guarded mutation.src/infrastructure/verification-runner.ts maps slice scope to repo verification commands.src/tools/ exposes the fixed six-tool public surface.docs/README.mddocs/en/README.mddocs/tr/README.mddocs/en/user-guide/getting-started.mddocs/en/user-guide/configuration.mddocs/en/integration/opencode.mddocs/en/architecture/overview.mddocs/en/api/tool-reference.mdnpm ci
npm run lint
npm run typecheck
npm run test
npm run test:protocol
npm run build
npm run ci:check
main.release-please opens or refreshes a release PR from conventional commits, then creates the GitHub release when that PR is merged.@vaur94/mcp-code; the unscoped mcp-code package is owned by another maintainer and cannot be trusted or published from this repo.@vaur94/mcp-code still needs one manual npm publish, then trusted publishing can take over with GitHub OIDC..github/workflows/publish.yml verifies the package with npm run ci:check and npm run pack:dry-run before any publish step.published release event and checks that the GitHub tag matches package.json.RELEASE_PLEASE_TOKEN secret backed by a GitHub PAT.mcp-code/
├── src/ # Runtime entry, services, schemas, and tool adapters
├── tests/ # Unit, integration, protocol, and fixtures
├── docs/ # English + Turkish product and developer docs
├── examples/ # Ready-to-copy config and host integration examples
├── .github/ # CI, release, issue, PR, and hygiene automation
└── AGENTS.md # AI-agent-oriented repository knowledge base
Contributions are welcome. Start with CONTRIBUTING.md, run npm run ci:check, and keep changes aligned with the semantic workflow boundary.
MIT. See LICENSE.
FAQs
Production-grade MCP server for semantic coding workflows and AI coding-agent acceleration.
The npm package @vaur94/mcp-code receives a total of 0 weekly downloads. As such, @vaur94/mcp-code popularity was classified as not popular.
We found that @vaur94/mcp-code demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.

Research
/Security News
Thirteen malicious Packagist themes expose visitors on unpatched iPhones to a WebKit-to-kernel exploit chain that steals device data and wallet seeds.