MCPLow riskUnclaimed
Maven Decoder
Lets AI agents read the real source of any Maven dependency, decompiled from ~/.m2 or Central.
salitabasalitaba/maven-decoder-mcp
server.json
{
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"name": "io.github.salitaba/maven-decoder-mcp",
"description": "Lets AI agents read the real source of any Maven dependency, decompiled from ~/.m2 or Central.",
"title": "Maven Decoder",
"repository": {
"url": "https://github.com/salitaba/maven-decoder-mcp",
"source": "github"
},
"version": "1.3.2",
"websiteUrl": "https://github.com/salitaba/maven-decoder-mcp",
"packages": [
{
"registryType": "npm",
"identifier": "maven-decoder-mcp",
"version": "1.3.2",
"runtimeHint": "npx",
"transport": {
"type": "stdio"
},
"environmentVariables": [
{
"description": "Path to the local Maven repository. Defaults to ~/.m2/repository.",
"format": "filepath",
"name": "MAVEN_REPOSITORY"
},
{
"description": "Comma or whitespace separated list of remote Maven repository base URLs.",
"format": "string",
"name": "MAVEN_REMOTE_REPOS"
},
{
"description": "Username for authenticating against private remote Maven repositories.",
"format": "string",
"name": "MAVEN_REMOTE_USERNAME"
},
{
"description": "Password or token for authenticating against private remote Maven repositories.",
"format": "string",
"isSecret": true,
"name": "MAVEN_REMOTE_PASSWORD"
},
{
"description": "Set to true to disable all network access and use only the local repository.",
"format": "boolean",
"name": "MAVEN_OFFLINE"
},
{
"description": "Whether to automatically download missing artifacts from remote repositories. Defaults to true.",
"format": "boolean",
"name": "MAVEN_AUTO_DOWNLOAD"
},
{
"description": "Override directory used for decompilation and metadata caches.",
"format": "filepath",
"name": "MAVEN_DECODER_CACHE_DIR"
}
]
},
{
"registryType": "pypi",
"identifier": "maven-decoder-mcp",
"version": "1.3.2",
"runtimeHint": "uvx",
"transport": {
"type": "stdio"
},
"environmentVariables": [
{
"description": "Path to the local Maven repository. Defaults to ~/.m2/repository.",
"format": "filepath",
"name": "MAVEN_REPOSITORY"
},
{
"description": "Comma or whitespace separated list of remote Maven repository base URLs.",
"format": "string",
"name": "MAVEN_REMOTE_REPOS"
},
{
"description": "Username for authenticating against private remote Maven repositories.",
"format": "string",
"name": "MAVEN_REMOTE_USERNAME"
},
{
"description": "Password or token for authenticating against private remote Maven repositories.",
"format": "string",
"isSecret": true,
"name": "MAVEN_REMOTE_PASSWORD"
},
{
"description": "Set to true to disable all network access and use only the local repository.",
"format": "boolean",
"name": "MAVEN_OFFLINE"
},
{
"description": "Whether to automatically download missing artifacts from remote repositories. Defaults to true.",
"format": "boolean",
"name": "MAVEN_AUTO_DOWNLOAD"
},
{
"description": "Override directory used for decompilation and metadata caches.",
"format": "filepath",
"name": "MAVEN_DECODER_CACHE_DIR"
}
]
}
]
}Permissions
DeclaredDetected
Runs code—
nodepythonInstalls—
npm:maven-decoder-mcp@1.3.2pypi:maven-decoder-mcp@1.3.2Runs install scripts—
npm:maven-decoder-mcpNetworkNoneNone
Needs credentials
MAVEN_REMOTE_PASSWORDMAVEN_REMOTE_PASSWORDOutside the workspace—None
Agent tools—None
Checks
Low risk · Nothing worth a warning was found.
Not reviewed by a person · Checked by rules; the model review is not switched on yet.
Versions
- #11.3.2latestOct 7, 2026
Maven DecoderOpen in Codeg