MCPLow riskUnclaimed

sphior-code-mcp

Deterministic SAST/SCA findings + fix guidance for your GitHub repos, handed to your AI agent.

Toraastrtatoraastrta/sphior-code-mcpUpdated Jul 14, 2026

server.json

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-07-09/server.schema.json",
  "name": "io.github.Toraastrta/sphior-code-mcp",
  "description": "Deterministic SAST/SCA findings + fix guidance for your GitHub repos, handed to your AI agent.",
  "repository": {
    "url": "https://github.com/Toraastrta/Sphior",
    "source": "github",
    "subfolder": "ige-web/packages/code-mcp"
  },
  "version": "1.0.2",
  "websiteUrl": "https://sphior.com/code",
  "packages": [
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "sphior-code-mcp",
      "version": "1.0.2",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "description": "Your SPHIOR CODE API key (sk_live_...). Create one at https://sphior.com/account/code.",
          "isRequired": true,
          "isSecret": true,
          "name": "SPHIOR_API_KEY"
        },
        {
          "description": "Override the API base URL for self-hosted / regional deployments. Default: https://sphior.com/api/v1",
          "name": "SPHIOR_API_BASE"
        }
      ]
    }
  ]
}

Permissions

DeclaredDetected
Runs code—node
Installs—npm:sphior-code-mcp@1.0.2
Runs install scripts—None
NetworkNoneNone
Needs credentialsSPHIOR_API_KEYSPHIOR_API_KEY
Outside the workspace—None
Agent tools—None

Checks

Low risk · Nothing worth a warning was found.

Not reviewed by a person · Checked by rules; the model review is not switched on yet.

Versions

  1. #11.0.2latestOct 7, 2026