Skills/npm/codeatlas-mcp-server

codeatlas-mcp-server@1.5.9

VERIFIED· not started

Publisher claims: "Local-first MCP server for CodeAtlas — AST analysis, codebase intelligence, semantic memory, and A2A orchestration." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher giauphan · publishing for 143 daysInstalls 1,155Last detonated 17 h ago
$claude mcp add codeatlas-mcp-server -- npx -y codeatlas-mcp-server
WatchReport an issue

Coverage

Not started: dependency install failed; the server itself was not observed.
Tested
the dependency install step · every file read, file written and host contacted by what ran
Not tested
server startup · the tool list · tool behavior

What this means for the label: Verified here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.

Before you give it your token

It will ask for
ANTHROPIC_API_KEYCODEATLAS_API_KEYGEMINI_API_KEYOPENCODE_API_KEYConfiguration, not credentials: CLAUDE_CODE_ENTRYPOINT, CLAUDE_PROJECT_DIR, CLAUDECODE, CODEATLAS_ALLOW_CUSTOM_URL, CODEATLAS_API_TIMEOUT_MS, CODEATLAS_API_URL, CODEATLAS_CLAUDE_PROJECTS_DIR, CODEATLAS_CLI_PATH, CODEATLAS_CONTEXT_CACHE_DIR, CODEATLAS_CONTEXT_MAX_CHARS, CODEATLAS_CONTEXT_SUPPRESS_DUPLICATES, CODEATLAS_DURABLE_CAPTURE, CODEATLAS_HOOK_TOOLS_ALLOWLIST, CODEATLAS_HOOK_TOOLS_DENYLIST, CODEATLAS_INJECT_BRAIN_CONTEXT, CODEATLAS_MEMORY_SPOOL_DIR, CODEATLAS_MIN_QUERY_WORD_LENGTH, CODEATLAS_MIN_RELEVANCE_SCORE, CODEATLAS_MULTI_TENANT, CODEATLAS_PROJECT, CODEATLAS_PROJECT_DIR, CODEATLAS_PROJECT_DIRS, CODEATLAS_PROJECT_ID, CODEATLAS_PROJECTS_ROOT, CODEATLAS_SCAN_AI_KEY, CODEATLAS_SCAN_AI_MODEL, CODEATLAS_SCAN_AI_URL, CODEX_HOME, GEMINI_CLI_IDE_WORKSPACE_PATH, OPENCODE_BASE_URL, PATHEXT, SKILL_MD_PATH
Where it talks to
no vendor host named in the code
What the honeypot saw
no credential files read · no network
What we could not test
server startup · the tool list · tool behavior

Connect it with a scoped credential, under the guard. It asks for ANTHROPIC_API_KEY, CODEATLAS_API_KEY, GEMINI_API_KEY, OPENCODE_API_KEY and talks to its vendor. Give the credential to the guard, not the server: the value never enters the server's environment and only travels to the host you bind. What the tools do with a real credential was not observed.

$vet-skills run --net declared -- npx -y codeatlas-mcp-server

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-13 and scored it 82/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 10 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
10sprocessdependency install exit 254 · npm error enoent This is related to npm not being able to find a file. npm error enoent npm error A complete log of this run can be found in: /tmp/ks-detonate-9cGaX8/task/home/.npm/_logs/2026-11-13T20_36_44_686Z-debug-0.log
10sclaimednot started: dependency install failed (exit 254); the server itself was not observed
10sprocessscript backend runs setup only
10sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsdist/src/services/projectService.js:1020 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst foundKey = parsed.mcpServers[serverName]?.env?.CODEATLAS_API_KEY;Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsdist/index.js:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst globalEnvPath = path.join(os.homedir(), ".codeatlas", ".env");Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagedist/src/memoryGenerator.js:272 · npx invocation of non-well-known package — may execute untrusted codeclaude mcp add codeatlas -- npx -y @giauphan/codeatlas-mcpFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsdist/src/services/watcherService.js:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesignoredDirectoryNames.has(component)) || basename === '.env' || basename.endsWith('.log') || basename.endsWith('.pyc');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagedist/src/memoryGenerator.js:96 · npx invocation of non-well-known package — may execute untrusted codeclaude mcp add codeatlas -- npx -y @giauphan/codeatlas-mcpFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsdist/src/cli/hooks/eventDecoder.js:35 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…", "listagents", "taskoutput"]); const SENSITIVE_SOURCE = /(?:^|[\s"'=:/\\])(?:\.env(?:\.[A-Za-z0-9_-]+)?|\.npmrc|\.pypirc|\.ssh|id_(?:rsa|ed25519)|authorized_keys|…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsdist/src/services/projectService.js:1012 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif (parsed.mcpServers?.codeatlas?.env?.CODEATLAS_API_KEY) {Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsdist/src/presentation/mcpServer.js:2326 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif (existing.mcpServers?.["codeatlas-genome"]?.env?.CODEATLAS_API_KEY) {Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsdist/index.js:68 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// ⚠️ NOTE: API key must be set via CODEATLAS_API_KEY environment variable or .env file.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actiondist/src/cli/setupClaude.js:41 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(` • PostToolUse / PostToolUseFailure / Stop / PreCompact: native brain-save`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File permission modification commanddist/src/cli/hooks/task-router.sh:4 · File permission modification command — agent changes file ownership/permissions# Run chmod +x after editing, then restart Claude server.Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
HIGH
Access to sensitive file pathsdist/src/analyzer/parser.js:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…['node_modules', 'dist', 'out', '.git', '__pycache__', '.venv', 'venv', 'env', '.env', 'vendor', 'build', '.tox', '.mypy_cache', '.pytest_cache', 'coverage', '.next…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsdist/src/presentation/mcpServer.js:2200 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// Save the key securely to ~/.codeatlas/.envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsdist/src/presentation/mcpServer.js:2320 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif (existing.mcpServers?.codeatlas?.env?.CODEATLAS_API_KEY) {Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈69 tok
1 file · 47 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for codeatlas-mcp-server@1.5.9 as of 16 h ago. This is the package itself, not its dependencies.