com.mcparmory/codacy
PYPI · MCPARMORY-CODACY · 2 COMPONENTS · SCANNED SEP 20
Analyze code quality, security issues, and coverage across repositories
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security87
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- Install-script risk not yet assessed.Unverified
- 2 of 41 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency32
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- License check failed: the license (MIT License) isn't a recognized OSI-approved license. See how to fix → Fail
- Actively maintained (last published 130 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability71
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 36654 tokens (~155/item across 236 items; 236 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management83
- Stability observed for 25 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 19 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 236 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the com.mcparmory/codacy MCP server?
com.mcparmory/codacy runs locally as a PyPI package, launched with uvx mcparmory-codacy. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · mcparmory-codacy
claude mcp add com-mcparmory-codacy -- uvx mcparmory-codacy
{
"mcpServers": {
"com-mcparmory-codacy": {
"command": "uvx",
"args": [
"mcparmory-codacy"
]
}
}
} {
"servers": {
"com-mcparmory-codacy": {
"command": "uvx",
"args": [
"mcparmory-codacy"
]
}
}
} codex mcp add com-mcparmory-codacy -- uvx mcparmory-codacy
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-mcparmory-codacy": {
"type": "local",
"command": [
"uvx",
"mcparmory-codacy"
],
"enabled": true
}
}
} openclaw mcp add com-mcparmory-codacy --command uvx --arg mcparmory-codacy
mcp_servers:
com-mcparmory-codacy:
command: "uvx"
args: ["mcparmory-codacy"] {
"McpServers": {
"com-mcparmory-codacy": {
"Transport": "stdio",
"Command": "uvx",
"Arguments": [
"mcparmory-codacy"
]
}
}
} assistant mcp add com-mcparmory-codacy -t stdio -c uvx -a mcparmory-codacy
{
"mcpServers": {
"com-mcparmory-codacy": {
"command": "uvx",
"args": [
"mcparmory-codacy"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +16
- Malware scan: unverified → pass ▲ security
- 19 Sept 26 −3
- Stability: pass → 0.80 functional
- 18 Sept 26 0
- Stability: 0.97 → pass security
- 17 Sept 26 −14
- Malware scan: pass → unverified ▼ security
- 15 Sept 26 +16
- Malware scan: unverified → pass ▲ security
- 14 Sept 26 −15
- Malware scan: pass → unverified ▼ security
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +15
- Malware scan: unverified → pass ▲ security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed pypi/mcparmory-codacy@1.0.3
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | pypi |
Background: How many MCP packages publish verified provenance →
Dependencies 41 packages
| Packages resolved | 41 |
|---|---|
| Stale | 1 |
| No linked repository | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
get_repository_provider_integration_settings Get Repository Provider Integration Settings ~116
Retrieves the Git provider integration settings for a specific repository, including configuration details that control how Codacy interacts with the provider for that repository.
| Name | Type | Req | Description |
|---|---|---|---|
| provider | string | yes | Short identifier for the Git provider hosting the repository (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified Git provider organization. |
No output schema declared.
No examples provided.
get_repository_sbom_download_url Get Repository SBOM Download URL ~106
Retrieves a presigned URL for downloading the latest Software Bill of Materials (SBOM) for a specified repository. The URL provides temporary, authenticated access to the SBOM artifact.
| Name | Type | Req | Description |
|---|---|---|---|
| provider | string | yes | Short code identifying the Git provider hosting the repository. |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified Git provider organization. |
No output schema declared.
No examples provided.
get_repository_ssh_key Get Repository SSH Key ~111
Retrieves the most recently generated public SSH key associated with a repository, which may be either a user or repository-level SSH key. Useful for verifying or displaying the active SSH key configured for repository access.
| Name | Type | Req | Description |
|---|---|---|---|
| provider | string | yes | Short code identifying the Git provider hosting the repository. |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified organization on the Git provider. |
No output schema declared.
No examples provided.
get_repository_tool_pattern_config Get Repository Tool Pattern ~168
Retrieves the pattern configuration for a specific tool pattern applied to a repository. Returns the organization-level standard configuration if one is applied, otherwise falls back to the repository-level settings.
| Name | Type | Req | Description |
|---|---|---|---|
| patternId | string | yes | The identifier for the specific pattern within the tool whose configuration is being retrieved. |
| provider | string | yes | The Git provider hosting the repository, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified Git provider organization. |
| toolUuid | string | yes | The UUID uniquely identifying the analysis tool whose pattern configuration is being retrieved. |
No output schema declared.
No examples provided.
get_security_dashboard_metrics Get Security Dashboard Metrics ~235
Retrieves aggregated security and risk management metrics for an organization's dashboard, with optional filtering by repositories, priorities, categories, scan types, and segments.
| Name | Type | Req | Description |
|---|---|---|---|
| categories | array | – | List of security categories to filter issues by. Use the special value `_other_` to include issues that have no assigned security category. |
| priorities | array | – | List of security issue priority levels to include in the metrics. Refer to SrmPriority for the set of valid priority values. |
| provider | string | yes | The Git provider hosting the organization. Use the short identifier for the target provider. |
| remoteOrganizationName | string | yes | The organization's name as it appears on the Git provider. |
| repositories | array | – | List of repository names to scope the dashboard metrics to. When omitted, metrics are aggregated across all repositories in the organization. |
| scanTypes | array | – | List of scan types to restrict metrics to. Multiple scan types can be specified to combine results across different analysis methods. |
| segments | array | – | List of numeric segment IDs to filter the dashboard metrics by. Segments represent logical groupings of repositories or teams within the organization. |
No output schema declared.
No examples provided.
get_security_item Get Security Item ~126
Retrieves detailed information for a single security and risk management (SRM) finding within an organization. Use this to inspect a specific SRM item by its unique identifier.
| Name | Type | Req | Description |
|---|---|---|---|
| provider | string | yes | The Git provider hosting the organization, specified as a short identifier code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The exact organization name as it appears on the Git provider platform. |
| srmItemId | string | yes | The unique identifier of the SRM finding to retrieve, provided as a UUID. |
No output schema declared.
No examples provided.
get_segment_sync_status Get Segment Sync Status ~110
Retrieves the current synchronization status of segments for a specified organization on a Git provider. Useful for monitoring whether segment data is up to date or still processing.
| Name | Type | Req | Description |
|---|---|---|---|
| provider | string | yes | Identifier for the Git provider hosting the organization. Use the short code for the desired platform (e.g., GitHub, GitLab, or Bitbucket). |
| remoteOrganizationName | string | yes | The organization's name as it appears on the specified Git provider. This must match the exact remote organization name used by the provider. |
No output schema declared.
No examples provided.
get_slack_integration Get Slack Integration ~84
Retrieves the Slack integration configuration for a specified organization on a Git provider. Use this to check whether Slack notifications are enabled and review the current integration settings.
| Name | Type | Req | Description |
|---|---|---|---|
| provider | string | yes | Short code identifying the Git provider hosting the organization. Use the provider's abbreviated identifier. |
| remoteOrganizationName | string | yes | The organization's name as it appears on the Git provider platform. |
No output schema declared.
No examples provided.
get_tool_patterns_overview Get Tool Patterns Overview ~366
Retrieves an overview of code patterns for a specific analysis tool in a repository, showing counts and summaries by category, severity, and status. Uses standard settings if applied, otherwise falls back to repository-level tool configuration.
| Name | Type | Req | Description |
|---|---|---|---|
| categories | string | – | Comma-separated list of pattern categories to include in the overview. Valid values are Security, ErrorProne, CodeStyle, Compatibility, UnusedCode, Complexity, Comprehensibility, Documentation, BestP… |
| enabled | boolean | – | When set to true, returns only enabled patterns; when set to false, returns only disabled patterns. Omit to return patterns regardless of enabled status. |
| languages | string | – | Comma-separated list of programming language names to restrict the overview to patterns applicable to those languages. |
| provider | string | yes | Short code identifying the Git hosting provider for the repository. |
| recommended | boolean | – | When set to true, returns only patterns marked as recommended; when set to false, returns only non-recommended patterns. Omit to return patterns regardless of recommended status. |
| remoteOrganizationName | string | yes | Name of the organization or account that owns the repository on the Git provider. |
| repositoryName | string | yes | Name of the repository within the specified organization on the Git provider. |
| search | string | – | Search string used to filter patterns by matching against pattern names or descriptions. |
| severityLevels | string | – | Comma-separated list of severity levels to filter patterns by. Valid values are Error, High, Warning, and Info. |
| tags | string | – | Comma-separated list of tags to filter patterns by, allowing narrowing results to patterns associated with specific frameworks or topics. |
| toolUuid | string | yes | UUID uniquely identifying the analysis tool whose pattern overview is being retrieved. |
No output schema declared.
No examples provided.
ignore_issue_false_positive Ignore Issue False Positive ~142
Marks a false positive result on a specific issue as ignored, suppressing it from future analysis reports. Use this to dismiss incorrectly flagged issues within a repository.
| Name | Type | Req | Description |
|---|---|---|---|
| issueId | string | yes | The unique identifier of the issue whose false positive result should be ignored. |
| provider | string | yes | The Git provider hosting the repository, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified Git provider organization. |
No output schema declared.
No examples provided.
ignore_security_item Ignore Security Item ~196
Marks a specific security and risk management (SRM) item as ignored for an organization, optionally providing a reason category and explanatory comment. Useful for suppressing known false positives, accepted risks, or non-applicable findings.
| Name | Type | Req | Description |
|---|---|---|---|
| comment | string | – | Free-text comment providing additional context or justification for why the security item is being ignored. |
| provider | string | yes | Short code identifying the Git provider hosting the organization. |
| reason | string | – | Categorized reason for ignoring the item. Must be one of: AcceptedUse (intentional usage), FalsePositive (incorrect detection), NotExploitable (not actionable in context), TestCode (issue exists in t… |
| remoteOrganizationName | string | yes | The organization's name as it appears on the Git provider. |
| srmItemId | string | yes | The unique UUID identifier of the security and risk management item to ignore. |
No output schema declared.
No examples provided.
join_organization Join Organization ~105
Joins an organization on a specified Git provider, granting the authenticated user membership in that organization. Requires the provider identifier and the organization's remote name.
| Name | Type | Req | Description |
|---|---|---|---|
| provider | string | yes | Short code identifying the Git provider where the organization is hosted. Accepted values include identifiers for GitHub, GitLab, and Bitbucket. |
| remoteOrganizationName | string | yes | The exact name of the organization as it appears on the specified Git provider. This must match the organization's remote identifier on that platform. |
No output schema declared.
No examples provided.
list_api_tokens List API Tokens ~60
Retrieves all API tokens associated with the authenticated user's account. Useful for auditing active tokens or managing programmatic access credentials.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Maximum number of API tokens to return in a single response. Accepts values between 1 and 100. |
No output schema declared.
No examples provided.
list_branch_required_checks List Branch Required Checks ~115
Retrieves the required status checks configured for a specific branch in a repository. These checks must pass before pull requests can be merged into the branch.
| Name | Type | Req | Description |
|---|---|---|---|
| branchName | string | yes | The name of the branch for which required status checks will be retrieved. |
| provider | string | yes | Short code identifying the Git provider hosting the repository. |
| remoteOrganizationName | string | yes | The organization or account name as it appears on the Git provider. |
| repositoryName | string | yes | The repository name within the specified organization on the Git provider. |
No output schema declared.
No examples provided.
list_coding_standard_repositories List Coding Standard Repositories ~157
Retrieves the list of repositories currently using a specific coding standard within an organization. Useful for auditing which repositories are governed by a given set of coding rules.
| Name | Type | Req | Description |
|---|---|---|---|
| codingStandardId | string | yes | The unique numeric identifier of the coding standard whose associated repositories should be listed. |
| limit | string | – | Maximum number of repositories to return per request. Accepts values between 1 and 100; defaults to 100 if not specified. |
| provider | string | yes | The Git provider hosting the organization, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The exact name of the organization as it appears on the Git provider. |
No output schema declared.
No examples provided.
list_coding_standard_tool_patterns List Coding Standard Tool Patterns ~457
Retrieves the list of code patterns configured for a specific tool within a coding standard, supporting filtering by language, category, severity, tags, and enabled/recommended status.
| Name | Type | Req | Description |
|---|---|---|---|
| categories | string | – | Comma-separated list of pattern categories to filter by. Valid values are `Security`, `ErrorProne`, `CodeStyle`, `Compatibility`, `UnusedCode`, `Complexity`, `Comprehensibility`, `Documentation`, `Be… |
| codingStandardId | string | yes | The numeric identifier of the coding standard to retrieve patterns from. |
| direction | string | – | The direction in which results are sorted — `asc` for ascending or `desc` for descending. |
| enabled | boolean | – | When set to `true`, returns only enabled patterns; when set to `false`, returns only disabled patterns. Omit to return patterns regardless of enabled status. |
| languages | string | – | Comma-separated list of programming language names to filter patterns by; only patterns applicable to the specified languages are returned. |
| limit | string | – | Maximum number of patterns to return per request. Must be between 1 and 100 inclusive. |
| provider | string | yes | The short identifier for the Git provider hosting the organization. |
| recommended | boolean | – | When set to `true`, returns only recommended patterns; when set to `false`, returns only non-recommended patterns. Omit to return patterns regardless of recommended status. |
| remoteOrganizationName | string | yes | The organization's name as it appears on the Git provider. |
| search | string | – | A search string used to filter patterns by name or description; returns patterns whose metadata contains this value. |
| severityLevels | string | – | Comma-separated list of severity levels to filter by. Valid values are `Error`, `High`, `Warning`, and `Info`. |
| sort | string | – | The field by which to sort the returned patterns. Valid values are `category`, `recommended`, and `severity`. |
| tags | string | – | Comma-separated list of pattern tags to filter by; only patterns matching at least one of the specified tags are returned. |
| toolUuid | string | yes | The UUID identifying the specific tool whose patterns should be listed. |
No output schema declared.
No examples provided.
list_coding_standard_tools List Coding Standard Tools ~118
Retrieves all tools configured within a specific coding standard for an organization. Useful for auditing which static analysis tools are enabled and their associated rule configurations.
| Name | Type | Req | Description |
|---|---|---|---|
| codingStandardId | string | yes | The unique numeric identifier of the coding standard whose tools should be listed. |
| provider | string | yes | The Git provider hosting the organization, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The organization's name as it appears on the Git provider platform. |
No output schema declared.
No examples provided.
list_coding_standards List Coding Standards ~89
Retrieves all coding standards for a specified organization, including both active and draft coding standards. Useful for auditing or managing code quality rules across an organization.
| Name | Type | Req | Description |
|---|---|---|---|
| provider | string | yes | The Git provider hosting the organization, used to identify which platform to query. |
| remoteOrganizationName | string | yes | The organization's name as it appears on the Git provider, used to scope the coding standards lookup. |
No output schema declared.
No examples provided.
list_commit_analysis_logs List Commit Analysis Logs ~145
Retrieves the analysis log entries for a specific commit in a repository, providing details about the analysis process and any issues encountered during execution.
| Name | Type | Req | Description |
|---|---|---|---|
| commitUuid | string | yes | The unique identifier of the commit whose analysis logs are being requested, provided as a UUID or full commit SHA hash. |
| provider | string | yes | Short code identifying the Git provider hosting the repository (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified organization on the Git provider. |
No output schema declared.
No examples provided.
list_commit_clones List Commit Clones ~244
Retrieves duplicate code blocks (clones) detected in a specific commit for a repository. Use the status parameter to filter results by new, fixed, or all duplicate occurrences.
| Name | Type | Req | Description |
|---|---|---|---|
| commitUuid | string | yes | The UUID or full SHA hash identifying the specific commit to analyze for duplicate code blocks. |
| limit | string | – | Maximum number of duplicate code block results to return per request. Accepts values between 1 and 100. |
| onlyPotential | boolean | – | When set to true, restricts results to only potential duplicate code issues, excluding confirmed clones. |
| provider | string | yes | The Git provider hosting the repository, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified organization on the Git provider. |
| status | string | – | Filters duplicate code blocks by their status relative to the commit: all returns every clone, new returns only newly introduced clones, and fixed returns only clones resolved in this commit. |
No output schema declared.
No examples provided.
list_commit_coverage_reports List Commit Coverage Reports ~169
Retrieves all code coverage reports associated with a specific commit in a repository. Useful for reviewing coverage data uploaded from multiple sources or tools for a given commit.
| Name | Type | Req | Description |
|---|---|---|---|
| commitUuid | string | yes | The full commit UUID or SHA hash that uniquely identifies the commit whose coverage reports should be listed. |
| limit | string | – | Maximum number of coverage reports to return in a single response. Accepts values between 1 and 100. |
| provider | string | yes | Short code identifying the Git provider hosting the repository (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The organization or account name as it appears on the Git provider. |
| repositoryName | string | yes | The repository name within the specified organization on the Git provider. |
No output schema declared.
No examples provided.
list_commit_delta_issues List Commit Delta Issues ~281
Retrieves issues introduced or fixed by a specific commit, calculated as a delta between the source commit and its parent (or an optional target commit). Use this to audit code quality changes at the commit level.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Maximum number of issues to return per request; must be between 1 and 100. |
| onlyPotential | boolean | – | When set to true, restricts results to potential issues only, excluding confirmed issues from the response. |
| provider | string | yes | The Git provider hosting the repository, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified organization on the Git provider. |
| srcCommitUuid | string | yes | The SHA or UUID of the source commit to analyze; the delta is calculated from this commit against its parent or the specified target commit. |
| status | string | – | Filters results by issue status: all returns every delta issue, new returns only introduced issues, and fixed returns only resolved issues. |
| targetCommitUuid | string | – | The SHA or UUID of an optional target commit to use as the comparison baseline instead of the source commit's parent. |
No output schema declared.
No examples provided.
list_commit_files List Commit Files ~350
Retrieves the list of files changed in a specific commit along with their static analysis and coverage results. Supports filtering, searching, sorting, and pagination to narrow down results.
| Name | Type | Req | Description |
|---|---|---|---|
| branch | string | – | The branch to scope the analysis results to; must be a branch enabled on Codacy. Defaults to the repository's main branch if omitted. |
| columnOrder | string | – | The direction in which to sort results: 'asc' for ascending order (default) or 'desc' for descending order. |
| commitUuid | string | yes | The unique identifier of the commit, provided as a UUID or full SHA hash string. |
| filter | string | – | Narrows the returned files by type: omit to return all files changed in the commit or with coverage changes, or use 'withCoverageChanges' to return only files that have coverage changes. |
| limit | string | – | Maximum number of file results to return per request. Accepts values between 1 and 100. |
| provider | string | yes | The Git provider hosting the repository, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified Git provider organization. |
| search | string | – | Filters the results to only include files whose relative path contains the specified string. |
| sortColumn | string | – | The field by which to sort the returned files: 'filename' (default) sorts alphabetically, 'deltaCoverage' sorts by coverage change, and 'totalCoverage' sorts by overall coverage value. |
No output schema declared.
No examples provided.
list_commit_statistics List Commit Statistics ~214
Retrieves daily commit analysis statistics for a repository over the last N days that have available analysis data. Note that returned days reflect days with actual data, which may not align with the last N consecutive calendar days.
| Name | Type | Req | Description |
|---|---|---|---|
| branch | string | – | The repository branch to retrieve commit statistics for, which must be a branch enabled in Codacy settings. Defaults to the main branch configured in the Codacy repository settings if omitted. |
| days | string | – | The number of days of commit statistics to return, ranging from 1 to 365. Returns the most recent days that have analysis data, defaulting to 31 if not specified. |
| provider | string | yes | The Git provider hosting the repository, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified Git provider organization. |
No output schema declared.
No examples provided.
list_coverage_reports List Coverage Reports ~147
Retrieves the most recent coverage reports and their statuses for a specified repository. Useful for monitoring code coverage trends and identifying the latest analysis results.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Maximum number of coverage reports to return, between 1 and 100 inclusive. Defaults to 100 if not specified. |
| provider | string | yes | The Git provider hosting the repository, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified Git provider organization. |
No output schema declared.
No examples provided.
list_dast_reports List DAST Reports ~115
Retrieves a paginated list of uploaded DAST (Dynamic Application Security Testing) scan reports for an organization, including their current processing state. Results are sorted by submission date from latest to earliest.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Maximum number of DAST reports to return per request. Accepts values between 1 and 100. |
| provider | string | yes | The Git provider hosting the organization, used to identify the source control platform. |
| remoteOrganizationName | string | yes | The organization's name as it appears on the Git provider. |
No output schema declared.
No examples provided.
list_dast_targets List DAST Targets ~129
Retrieves all configured Dynamic Application Security Testing (DAST) targets for the specified organization. Returns a paginated list of targets that have been set up for security scanning.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Maximum number of DAST targets to return in a single response. Accepts values between 1 and 100. |
| provider | string | yes | The Git provider hosting the organization, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The organization's name as it appears on the specified Git provider. |
No output schema declared.
No examples provided.
list_duplication_tools List Duplication Tools ~32
Retrieves the complete list of available duplication tools. Use this to discover which duplication tools are accessible for subsequent operations.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_emails List User Emails ~33
Retrieves all email addresses associated with the authenticated user's account, including primary and secondary addresses along with their verification and visibility status.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_enterprise_metric_latest_values_grouped List Enterprise Metric Latest Values Grouped ~268
Retrieves the latest values of a non-accumulating aggregating metric for all organizations in an enterprise, grouped by a specified dimension such as organization, category, or severity. Grouping by repository is not supported, and accumulating metrics (e.g., fixed issues) are excluded.
| Name | Type | Req | Description |
|---|---|---|---|
| dimensionsFilter | array | – | List of dimension values used to filter the grouped results, restricting output to only the specified dimension entries. |
| enterpriseName | string | yes | The URL-friendly slug name that uniquely identifies the enterprise. |
| groupBy | array | yes | One or more grouping dimensions that determine how results are aggregated. Accepted values are `organization` or a valid metric dimension; for OpenIssues, NewIssues, and FixedIssues the supported dim… |
| limit | integer | – | Maximum number of grouped result entries to return. |
| metricName | string | yes | The name of the metric to retrieve latest grouped values for. Must be a non-accumulating metric; use the ready metrics endpoint to discover available metric names. |
| provider | string | yes | Identifier for the Git provider hosting the enterprise. |
| sortDirection | string | – | Direction in which the grouped results are sorted, either ascending or descending. |
No output schema declared.
No examples provided.
list_enterprise_organizations List Enterprise Organizations ~130
Retrieves the list of organizations belonging to a specified enterprise on a given Git provider. Supports pagination via a configurable result limit.
| Name | Type | Req | Description |
|---|---|---|---|
| enterpriseName | string | yes | The unique slug identifier for the enterprise whose organizations you want to retrieve. |
| limit | string | – | Maximum number of organizations to return in a single response. Accepts values between 1 and 100, defaulting to 100 if not specified. |
| provider | string | yes | The Git provider hosting the enterprise, specified as a short identifier code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
No output schema declared.
No examples provided.
list_enterprise_provider_tokens List Enterprise Provider Tokens ~43
Retrieves all enterprise provider account tokens configured by the authenticated user on Codacy's platform. Useful for auditing or managing active integrations with enterprise identity and source control providers.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_enterprise_seats List Enterprise Seats ~148
Retrieves a paginated list of seats allocated within a specified enterprise on a given Git provider. Supports filtering by search term to narrow results.
| Name | Type | Req | Description |
|---|---|---|---|
| enterpriseName | string | yes | The URL-friendly slug identifier of the enterprise whose seats are being listed. |
| limit | string | – | Maximum number of seat records to return in a single response. Accepts values between 1 and 100. |
| provider | string | yes | The Git provider hosting the enterprise, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| search | string | – | Optional search string used to filter the returned seats, matching against relevant seat or user identifiers. |
No output schema declared.
No examples provided.
list_enterprises List Enterprises ~95
Retrieves all enterprises associated with the authenticated user for a specified Git provider. Returns a paginated list of enterprise accounts the user has access to.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Maximum number of enterprise records to return in a single response, between 1 and 100 inclusive. |
| provider | string | yes | The Git provider to query for enterprises, identified by its short code (e.g., GitHub, GitLab, Bitbucket). |
No output schema declared.
No examples provided.
list_file_clones List File Clones ~189
Retrieves all duplicated code blocks (clones) detected within a specific file in a repository. Useful for identifying code duplication issues at the file level.
| Name | Type | Req | Description |
|---|---|---|---|
| fileId | string | yes | The unique numeric identifier for a file tied to a specific commit. This ID is commit-scoped and can be obtained from file listing endpoints. |
| limit | string | – | Maximum number of duplicate code block results to return. Accepts values between 1 and 100, defaulting to 100 if not specified. |
| provider | string | yes | The Git provider hosting the repository, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified Git provider organization. |
No output schema declared.
No examples provided.
list_file_issues List File Issues ~192
Retrieves the list of code quality issues found in a specific file within a repository. Results are scoped to the file identified by its commit-specific file ID.
| Name | Type | Req | Description |
|---|---|---|---|
| fileId | string | yes | The unique identifier for a file tied to a specific commit. This ID is commit-scoped and may differ across commits for the same file path. |
| limit | string | – | Maximum number of issues to return in a single response. Accepts values between 1 and 100, defaulting to 100 if not specified. |
| provider | string | yes | The Git provider hosting the repository, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified Git provider organization. |
No output schema declared.
No examples provided.
list_gate_policies List Gate Policies ~134
Retrieves all gate policies configured for a specified organization on a Git provider. Gate policies define quality or security gates that govern code merging and deployment workflows.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Maximum number of gate policies to return in a single response. Accepts values between 1 and 100, defaulting to 100 if not specified. |
| provider | string | yes | The Git provider hosting the organization, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The exact organization name as it appears on the specified Git provider. |
No output schema declared.
No examples provided.
list_gate_policy_repositories List Gate Policy Repositories ~128
Retrieves all repositories that are following a specific gate policy within an organization. Useful for auditing which repositories are governed by a given quality gate configuration.
| Name | Type | Req | Description |
|---|---|---|---|
| gatePolicyId | string | yes | The unique numeric identifier of the gate policy whose associated repositories should be listed. |
| limit | string | – | Maximum number of repositories to return per request. Accepts values between 1 and 100. |
| provider | string | yes | The Git provider hosting the organization. Use the short identifier for the target provider. |
| remoteOrganizationName | string | yes | The organization name as it appears on the Git provider. |
No output schema declared.
No examples provided.
list_ignored_files List Ignored Files ~223
Retrieves the most recently recorded list of ignored files for a repository on Codacy. When a Codacy configuration file is present, the ignored files list is read-only and reflects what was excluded during the last analysis.
| Name | Type | Req | Description |
|---|---|---|---|
| branch | string | – | The name of a branch enabled on Codacy to scope the ignored files results; defaults to the main branch configured in Codacy repository settings if omitted. |
| limit | string | – | The maximum number of ignored files to return in a single response, between 1 and 100 inclusive. |
| provider | string | yes | The Git provider hosting the repository, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified organization on the Git provider. |
| search | string | – | A string used to filter results, returning only files whose relative path contains this value anywhere within it. |
No output schema declared.
No examples provided.
list_ignored_issues List Ignored Issues ~148
Retrieves a paginated list of issues that Codacy detected but were manually marked as ignored in the specified repository. Supports filtering via request body parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Maximum number of ignored issues to return per request. Accepts values between 1 and 100. |
| provider | string | yes | The Git provider hosting the repository, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The name of the organization or account on the Git provider that owns the repository. |
| repositoryName | string | yes | The name of the repository within the specified organization on the Git provider. |
No output schema declared.
No examples provided.
list_image_tags List Image Tags ~145
Retrieves all Docker image tags associated with a specific image in an organization's SBOM registry. Results are paginated and scoped to the specified Git provider and organization.
| Name | Type | Req | Description |
|---|---|---|---|
| imageName | string | yes | The name of the Docker image for which to list available tags. |
| limit | string | – | Maximum number of image tags to return in a single response. Accepts values between 1 and 100. |
| provider | string | yes | The Git provider hosting the organization, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The organization's name as it appears on the specified Git provider. |
No output schema declared.
No examples provided.
list_integrations List Integrations ~60
Retrieves all integrations connected to the authenticated user's account. Returns a paginated list of integration records up to the specified limit.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Maximum number of integrations to return in a single response. Accepts values between 1 and 100. |
No output schema declared.
No examples provided.
list_jira_issue_type_fields List Jira Issue Type Fields ~169
Retrieves the available fields for a specific Jira issue type within a project, enabling dynamic form construction when creating or editing issues. Results are scoped to the organization identified by the Git provider and organization name.
| Name | Type | Req | Description |
|---|---|---|---|
| jiraIssueTypeId | string | yes | The identifier of the Jira issue type within the project for which available fields are returned. |
| jiraProjectId | string | yes | The numeric identifier of the Jira project whose issue type fields are being queried. |
| limit | string | – | Maximum number of fields to return per response. Accepts values between 1 and 100, defaulting to 100 when omitted. |
| provider | string | yes | Short code identifying the Git provider hosting the organization. |
| remoteOrganizationName | string | yes | The organization's name as it appears on the Git provider platform. |
No output schema declared.
No examples provided.
list_jira_issue_types List Jira Issue Types ~135
Retrieves all available issue types (e.g., Bug, Story, Task) for a specific Jira project, enabling users to select valid types when creating or managing Jira issues linked to a Git organization.
| Name | Type | Req | Description |
|---|---|---|---|
| jiraProjectId | string | yes | The unique numeric identifier of the Jira project whose issue types should be retrieved. |
| limit | string | – | Maximum number of issue types to return per request. Accepts values between 1 and 100. |
| provider | string | yes | Short code identifying the Git provider for the organization. |
| remoteOrganizationName | string | yes | The organization's name as it appears on the Git provider platform. |
No output schema declared.
No examples provided.
list_jira_projects List Jira Projects ~160
Retrieves the available Jira projects linked to a specific Git provider organization, enabling users to associate repositories with Jira for issue tracking. Supports filtering and pagination to narrow down results.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Maximum number of Jira projects to return in a single response, between 1 and 100 inclusive. Defaults to 100 if not specified. |
| provider | string | yes | The short identifier for the Git provider hosting the organization (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The exact organization name as it appears on the specified Git provider. |
| search | string | – | Optional search string to filter returned Jira projects by name, returning only projects whose names contain the provided value. |
No output schema declared.
No examples provided.
list_jira_tickets List Jira Tickets ~147
Retrieves Jira tickets linked to a specific Codacy element (such as an issue, finding, file, or dependency) within an organization. Useful for tracing code quality findings back to their associated Jira work items.
| Name | Type | Req | Description |
|---|---|---|---|
| elementId | string | yes | The unique identifier of the specific Codacy element for which Jira tickets are being requested. |
| elementType | string | yes | The category of Codacy element whose linked Jira tickets should be retrieved. Must be one of: issue, finding, file, or dependency. |
| provider | string | yes | Short code identifying the Git provider hosting the organization. |
| remoteOrganizationName | string | yes | The organization's name as it appears on the Git provider platform. |
No output schema declared.
No examples provided.
list_metrics_tools List Metrics Tools ~36
Retrieves the complete list of available metrics tools. Use this to discover which metrics tools are accessible for monitoring, analysis, or reporting workflows.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_organization_audit_logs List Organization Audit Logs ~154
Retrieves audit logs for the specified organization within an optional time range. Requires Business plan and organization admin or manager role.
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | – | Start of the audit log time window as a Unix epoch timestamp in milliseconds. If omitted, defaults to the earliest available audit log entry. |
| provider | string | yes | The Git provider hosting the organization, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The organization's name as it appears on the Git provider. |
| to | string | – | End of the audit log time window as a Unix epoch timestamp in milliseconds. If omitted, defaults to the current time. |
No output schema declared.
No examples provided.
list_organization_images List Organization Images ~133
Retrieves the list of Docker images available for a specified organization on a Git provider. Supports pagination to control the number of results returned.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Maximum number of Docker images to return in a single response. Accepts values between 1 and 100, defaulting to 100 if not specified. |
| provider | string | yes | The Git provider hosting the organization, identified by a short code (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The exact name of the organization as it appears on the specified Git provider. |
No output schema declared.
No examples provided.
list_organization_join_requests List Organization Join Requests ~152
Retrieves all pending requests from users asking to join a specified organization on a Git provider. Supports filtering by search term and pagination via a result limit.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | Maximum number of join requests to return in a single response. Accepts values between 1 and 100. |
| provider | string | yes | The short identifier for the Git provider hosting the organization (e.g., gh for GitHub, gl for GitLab, bb for Bitbucket). |
| remoteOrganizationName | string | yes | The exact name of the organization as it appears on the Git provider. |
| search | string | – | Filters the returned join requests to those matching the provided search string, such as a username or partial name. |
No output schema declared.
No examples provided.
What is the com.mcparmory/codacy MCP server?
com.mcparmory/codacy is an MCP server listed in the public MCP registry as com.mcparmory/codacy. Analyze code quality, security issues, and coverage across repositories. This page covers its PyPI package (mcparmory-codacy).
Is the com.mcparmory/codacy MCP server safe to use?
com.mcparmory/codacy scores 75 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the com.mcparmory/codacy MCP server expose?
com.mcparmory/codacy exposes 236 tools: list_organization_repositories_with_analysis, search_organization_repositories, get_repository_analysis, list_repository_tools, list_tool_conflicts, and 231 more. Their descriptions and schemas cost roughly 36,654 tokens of context every time the server is loaded.
Is the com.mcparmory/codacy MCP server still maintained?
com.mcparmory/codacy is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.