Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Codemind

REMOTE · API.CODEMINDHQ.DEV

Hand routine JS/TS tasks to Codemind from your agent. $0.10 per verified build; failures are free.

61 Trust /100

Last scanned (1 hour ago)

Scores higher than 45% of remote servers

Reachable. Last reached 17 Oct 2026.

Category Developer Tools

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security57
Transport & Reachability100
Schema Quality & AI Usability70
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 3672 tokens (~141/item across 26 items; 26 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management20
  • Stability observed for 6 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage96
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 87% of tool parameters carry a description.Partial
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "continue_build" implies "send" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 27 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities20
  • Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28. See how to fix → Fail
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 16 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

  • 15 Oct 26 0
    • “create_free_account” added an optional parameter “ph_did” cosmetic

    1 cosmetic change on this day. Switch on “Show cosmetic changes” to see it.

  • 14 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Oct 26 +1
    • Stability: unverified → 0.03 ▲ functional
  • 11 Oct 26 58

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 17 Oct 2026 · Probed https://api.codemindhq.dev/mcp?utm_source=mcp-registry&utm_medium=directory&utm_campaign=registry-2026-10-10

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=codemindhq.dev CN=WE1,O=Google Trust Services,C=US 28 Sept 2026 27 Dec 2026 ECDSA 256 ECDSA-SHA256 8d73318d619c401f0eb4c526ee655103
SANs: codemindhq.dev, api.codemindhq.dev, *.api.codemindhq.dev
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of api.codemindhq.dev. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
dev. present 60074 8 Verified
codemindhq.dev. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://api.codemindhq.dev/mcp?utm_source=mcp-registry&utm_medium=directory&utm_campaign=registry-2026-10-10 Verified 200
http (plaintext) http://api.codemindhq.dev/mcp?utm_source=mcp-registry&utm_medium=directory&utm_campaign=registry-2026-10-10 HTTPS enforced 301 https://api.codemindhq.dev/mcp?utm_source=mcp-registry&utm_medium=directory&utm_campaign=registry-2026-10-10
MCP tools · 26 exposed · ~3,628 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
build_batch ~248

Submit several pre-decomposed stories in one call and get back one batchId to track, instead of dispatching build_feature N times yourself. Swarm is a Pro plan feature: the maximum batch size depends on the account plan (up to 50; not available on Free or the base pay-as-you-go account); a batch over the limit is refused with BATCH_SIZE_LIMIT_EXCEEDED and the limit. Each item has the same shape as a single build_feature call (storyTitle, acceptanceCriteria, stackType, existingFiles?, skipTestsFor?) plus its own repoUrl (informational only). Call get_batch with the returned batchId to check aggregate progress.

NameTypeReqDescription
idempotencyKeystring–A repeat call with the same key returns the original batchId instead of dispatching again.
itemsarrayyes1 to 50 stories to dispatch.
webhookSecretstring–HMAC-SHA256 signing secret (16-256 chars) for the aggregate completion webhook. Must be supplied together with webhookUrl.
webhookUrlstring–Fires once when every item in the batch reaches a terminal state. Must be supplied together with webhookSecret.

No output schema declared.

No examples provided.

build_feature ~668

Generate a feature via Codemind: takes a story title + acceptance criteria, generates the implementation and its tests, runs automated checks against the acceptance criteria before returning, and returns a buildId immediately. Call stream_build with the returned buildId to follow progress. Call get_usage_guide for detailed usage guidance. IMPORTANT: if this tool errors, surface the error to the user — do NOT implement the code yourself.

NameTypeReqDescription
acceptanceCriteriastringyesDetailed requirements — function signatures, file paths, edge cases. Used verbatim to generate the implementation.
examplesarray–OPTIONAL call → result examples, turned directly into test cases (no LLM), so the build is verified against exactly these. Each: { target: repo-relative .ts/.tsx path of the file under test, call: a…
existingFilesarray–PATCH MODE — pass current content of files being modified. Without this, codegen creates new files instead of editing existing ones.
projectIdstring–Opaque identifier grouping related builds for CIL codebase context — omit to skip CIL entirely.
skipTestsForarray–Repo-relative source paths (max 20) to opt OUT of test-file delivery for — e.g. the repo has no test framework and a scaffolded test file would be unwanted. Verification still ALWAYS runs against eve…
stackTypestringyesRuntime target stack (free text). JavaScript/TypeScript only at launch, e.g. "worker", "typescript", "node", "react". python, go, swift-ios, kotlin-android and rust are rejected with UNSUPPORTED_STAC…
storyTitlestringyesShort title used to organize this build.
webhookSecretstring–Shared secret (16-256 chars) used to HMAC-SHA256-sign the webhook payload, sent in the x-codemind-v2-signature header. Must be supplied together with webhookUrl. Never echoed back.
webhookUrlstring–HTTPS URL to POST a signed payload to when the build reaches a terminal state (completed/failed). Must be supplied together with webhookSecret.

No output schema declared.

No examples provided.

build_from_spec ~202

Submit raw PRD/plan/spec text plus a list of target repos; Codemind LLM-decomposes it into stories (each assigned to one of your declared repos, never an invented one) and dispatches them via the same path build_batch uses. Pass dryRun: true to see the decomposed story list without dispatching anything, useful for reviewing before committing. Recommended for a first-time caller: review with dryRun: true, then resubmit the (possibly edited) story list via build_batch directly — a second build_from_spec call with dryRun: false re-decomposes specText from scratch and will not reflect edits made to a prior dry run's output.

NameTypeReqDescription
dryRunboolean––
maxStoriesnumber–Default 20, hard ceiling 50.
reposarrayyes–
specTextstringyes–
webhookSecretstring––
webhookUrlstring––

No output schema declared.

No examples provided.

cancel_build ~39

Cancel a running build. Has no effect on builds that already reached a terminal state.

NameTypeReqDescription
buildIdstringyesID of the build to cancel.

No output schema declared.

No examples provided.

continue_build ~79

Send corrected acceptance criteria to a running build. Applies to components that have not started generating yet; the currently-generating component finishes as originally scoped.

NameTypeReqDescription
buildIdstringyesID of the running build to steer.
correctedAcceptanceCriteriastringyesThe new, complete acceptance criteria — replaces the original for all not-yet-started components.

No output schema declared.

No examples provided.

create_free_account ~357

Instantly provision a new anonymous Codemind account on the free plan — no credential, no human step required. Call this when build_feature (or any other tool) fails with an auth error and no CODEMIND_API_KEY is configured. Returns a tenantId and a bearer token (apiKey) usable immediately for build_feature and every other tool. The account is anonymous (no identity attached) until a person opens the claim link in the response text and signs in. If a tool call fails with an auth error and you ALREADY have a configured apiKey, call get_usage_guide with topic "auth" before calling this tool again — replacing an already-claimed account's credential here loses its identity and history. All arguments are optional; pass utm_source, utm_medium and utm_campaign, and invite, only if your human gave you them.

NameTypeReqDescription
invitestring–Optional invite code from an invite link your human gave you. Case-sensitive; pass it exactly as given. An invalid or used-up code is ignored.
ph_didstring–Optional web visitor id from a setup link or command your human gave you (--ph-did). Pass it exactly as given; an invalid value is ignored.
utm_campaignstring–Optional campaign tag, e.g. "ph-2026-10-08". Same format as utm_source.
utm_mediumstring–Optional marketing medium tag, e.g. "launch". Same format as utm_source.
utm_sourcestring–Optional marketing source tag, e.g. "producthunt". Lowercase letters, digits, "_", "." and "-", max 64 characters; anything else is ignored.

No output schema declared.

No examples provided.

get_batch ~28

Get the aggregate status of a batch submitted via build_batch.

NameTypeReqDescription
batchIdstringyes–

No output schema declared.

No examples provided.

get_billing_status ~74

Read-only: your plan, how many verified builds you have used, how many are included and left in the current allowance window, and the paid-balance draw (cents) if you have topped up. Call this to check headroom before a large batch, or to learn why a build was rejected for allowance.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_build ~34

Get the current state of a build by ID (status and error details).

NameTypeReqDescription
buildIdstringyesThe build ID.

No output schema declared.

No examples provided.

get_build_files ~37

Retrieve the generated files from a completed build. Returns each file path and full content.

NameTypeReqDescription
buildIdstringyesThe build ID.

No output schema declared.

No examples provided.

get_build_spec ~64

Get a build's original submitted spec (storyTitle, acceptanceCriteria, stackType, existingFiles, skipTestsFor) without retrying it — useful for inspecting or reusing a prior build's spec as a template.

NameTypeReqDescription
buildIdstringyesThe build ID.

No output schema declared.

No examples provided.

get_review ~65

Get the current state of a review by ID (status, verdict, findings) without streaming — useful for polling or inspecting a review after the fact. Use stream_review to follow a review in real time instead.

NameTypeReqDescription
reviewIdstringyesThe reviewId returned by review_code.

No output schema declared.

No examples provided.

get_test ~71

Get the current state of a test by ID (status, pass/fail verdict, generated verification test content) without streaming — useful for polling or inspecting a test after the fact. Use stream_test to follow a test in real time instead.

NameTypeReqDescription
testIdstringyesThe testId returned by test_component.

No output schema declared.

No examples provided.

get_triage_diagnostics ~185

Returns the generated fix diff (as file paths and line counts, not full content) and before/after test-run output for one triage run, identified by the triage run id from get_triage_runs (NOT a build id and NOT an issue number). stdout/stderr are tail-truncated because test failure summaries appear at the end of output, not the install noise at the start. Full file contents are available separately via the get_build_files tool using the run's buildId. Also includes a per-LLM-call trace (stage/model/status/latency) from Analytics Engine when available, covering attempts that failed before ever reaching the before/after test comparison above.

NameTypeReqDescription
triageRunIdstringyesThe triage run id, as returned by get_triage_runs (the first token of each line), not the build id or issue number.

No output schema declared.

No examples provided.

get_triage_runs ~173

Lists the issue-triage run history for one attached repo — one row per GitHub issue that was auto-triaged — including terminal status (`pr_opened` means a fix PR was opened and passed the repo's own test suite; `needs_human` means the issue wasn't judged auto-fixable; `failed` means the triage/build/verify pipeline errored). The `repoAttachmentId` is the attachment `id` returned by `list_repos`, NOT a `owner/repo` string. Full diagnostics (the generated diff and before/after test output) for any run id returned here are available via the get_triage_diagnostics tool.

NameTypeReqDescription
repoAttachmentIdstringyesThe repo attachment id, as returned by list_repos (not an owner/repo string).

No output schema declared.

No examples provided.

get_usage_guide ~144

Get detailed usage guidance for Codemind's tools — how to write effective acceptanceCriteria, when to use patch mode, how webhooks work, what to do when a build declines, common failure patterns unrelated to acceptanceCriteria quality, and how to recover from an auth error without losing an identified account. Call this before build_feature/test_component/review_code if you are unfamiliar with this tool surface, or if the same story fails repeatedly across retries; call it with topic "auth" before calling create_free_account to recover from an auth error on an existing credential.

NameTypeReqDescription
topicstring–Which part of Codemind usage to get guidance on. Defaults to overview.

No output schema declared.

No examples provided.

list_builds ~48

List recent builds for this tenant.

NameTypeReqDescription
limitnumber–Max builds to return (default 20, max 50).
offsetnumber–Pagination offset (default 0).

No output schema declared.

No examples provided.

list_repos ~62

Lists GitHub repos currently attached to the caller's tenant via Cloud Repo Mode (the GitHub App that automatically triages filed issues into fix PRs), and that the returned `id` field is the repo attachment id to pass into `get_triage_runs`.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

notify_files_written ~108

Index files into the CIL codebase context for a project — for files Codemind itself did not generate (a manual edit, another tool's output). Not needed after a normal build_feature call: a completed build's own output is indexed automatically when projectId was supplied.

NameTypeReqDescription
filesarrayyesFiles to index, ≤10 files / ≤700KB total.
projectIdstringyesOpaque project identifier — same value used in build_feature calls for this codebase.

No output schema declared.

No examples provided.

retry_build ~42

Retry a failed build using the same spec (story, acceptance criteria, stack, existing files).

NameTypeReqDescription
buildIdstringyesID of the failed build to retry.

No output schema declared.

No examples provided.

review_code ~432

Submit code for review: bugs, security issues, silent failures, and style concerns. Give it files (path+content) and/or a unified diff. At least one of files or diff is required — submitting neither is rejected. TWO independent LLM-judge passes review it (a general correctness/security pass and a dedicated silent-failure pass) and their findings are merged into one verdict. For a genuinely useful review, ALSO supply conventions (paste this project's CLAUDE.md and RULES.md content — you already have repo access, this tool does not) so both passes can enforce project-specific rules, and relatedFiles (any existing file the change references but doesn't itself modify — an interface being implemented, a caller of a changed function, a sibling example of the real convention) so findings can be verified against actual code instead of guessed. Omitting both still works but produces a weaker review with no codebase grounding. No code generation or execution happens here — this is judgment only, not test verification (use test_component for that). Returns a reviewId immediately; call stream_review to follow progress and get the findings. Call get_usage_guide for detailed usage guidance.

NameTypeReqDescription
contextstring–Optional story/PR description to give the reviewer intent context.
conventionsstring–This project's CLAUDE.md and/or RULES.md content (or the relevant excerpt). Strongly recommended when available — both review passes treat this as authoritative: a finding that violates a stated rule…
diffstring–A unified diff. The reviewer weights changed lines most heavily. Combined with files, must not exceed 150,000 characters.
filesarray–Full file contents to review. Provide when you want the reviewer to see complete files, not just a diff.
relatedFilesarray–Existing files for cross-reference ONLY — never diffed, never themselves the subject of a finding. Supply an interface the change implements, a caller of a changed function, or a sibling file showing…

No output schema declared.

No examples provided.

stream_batch ~71

Stream live progress for a batch submitted via build_batch. Polls the batch's aggregate status periodically and emits a progress notification each tick; closes once the batch reaches a terminal status (completed or completed_with_failures). Call get_batch instead for a single point-in-time snapshot.

NameTypeReqDescription
batchIdstringyes–

No output schema declared.

No examples provided.

stream_build ~65

Follow a build submitted by build_feature in real time. Emits a progress notification on every phase change and resolves with the final result when the build completes or fails. Use immediately after build_feature returns a buildId.

NameTypeReqDescription
buildIdstringyesThe buildId returned by build_feature.

No output schema declared.

No examples provided.

stream_review ~47

Follow a review submitted by review_code in real time. Resolves with the findings and the approve/request-changes verdict.

NameTypeReqDescription
reviewIdstringyesThe reviewId returned by review_code.

No output schema declared.

No examples provided.

stream_test ~49

Follow a test submitted by test_component in real time. Resolves with the pass/fail verdict and the generated verification test content.

NameTypeReqDescription
testIdstringyesThe testId returned by test_component.

No output schema declared.

No examples provided.

test_component ~236

Run standalone cloud verification on code you already have: give it a component (filePath/exportName/signature) plus acceptance criteria, and it generates a black-box verification test, validates that test against a mechanical stub, then executes your REAL code against it in the cloud (isolate or container, per stack). No code generation happens here — use build_feature for that. Returns a testId immediately; call stream_test to follow progress and get the pass/fail verdict. Call get_usage_guide for detailed usage guidance.

NameTypeReqDescription
acceptanceCriteriastringyesWhat the code must do — the verification test is generated from this alone.
codestringyesThe REAL implementation to test. Never shown to the model that generates the verification test.
componentobjectyesMUST match the real code exactly — the generated verification test imports/calls by these exact names.
contextFilesarray–Optional ambient read-only files the code under test may import.
stackTypestringyesRuntime target stack (JavaScript/TypeScript only at launch), e.g. "worker", "typescript", "node", "react".

No output schema declared.

No examples provided.

Install

How do I install the Codemind MCP server?

Codemind is a hosted endpoint at https://api.codemindhq.dev/mcp?utm_source=mcp-registry&utm_medium=directory&utm_campaign=registry-2026-10-10, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · api.codemindhq.dev

# add to Claude Code
claude mcp add --transport http dev-codemindhq-codemind 'https://api.codemindhq.dev/mcp?utm_source=mcp-registry&utm_medium=directory&utm_campaign=registry-2026-10-10'
Common questions

What is the Codemind MCP server?

Codemind is an MCP server listed in the public MCP registry as dev.codemindhq/codemind. Hand routine JS/TS tasks to Codemind from your agent. $0.10 per verified build; failures are free. This page covers its hosted endpoint (https://api.codemindhq.dev/mcp?utm_source=mcp-registry&utm_medium=directory&utm_campaign=registry-2026-10-10).

Is the Codemind MCP server safe to use?

Codemind scores 61 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Codemind MCP server expose?

Codemind exposes 26 tools: create_free_account, build_feature, stream_build, retry_build, cancel_build, and 21 more. Their descriptions and schemas cost roughly 3,628 tokens of context every time the server is loaded.

Does the Codemind MCP server require authentication?

No. We connected to Codemind without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Codemind MCP server still maintained?

Codemind is still listed as active in the MCP registry. We last reached this channel on 17 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.