Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.efranceschetti/festo-codesys-mcp

NPM · FESTO-CODESYS-MCP

MCP server for Festo/CODESYS PLCs: IEC 61131-3 ST + validated PLCopen XML generation.

Available components

−81 this week 0 Trust /100

Last scanned (5 days ago)

Scores higher than 0% of npm servers

Category Developer Tools

Dead

Every channel of this server has been unreachable for long enough to be marked dead. Its trust score is pinned to 0 and does not recover automatically: even once the server responds again it stays dead until it is manually reinstated.

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security50
  • No malware found by supply-chain analysis.Pass
  • Known CVEs could not be checked: the version this server declares is not published in its registry.Unverified
  • Install-script risk not yet assessed.Unverified
  • Dependency health could not be checked: the version this server declares is not published in its registry.Unverified
Provenance & Transparency0
Schema Quality & AI Usability87
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 6795 tokens (~65/item across 103 items; 18 tools + 85 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage95
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 83% of tool parameters carry a description.Partial
  • Structured output schemas are declared (33% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 18 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 20 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 30 Oct 26 −16

    The score moved with no change recorded against any check. We would rather say so than guess.

  • 29 Oct 26 −16

    The score moved with no change recorded against any check. We would rather say so than guess.

  • 28 Oct 26 −17
    • Stability: 0.97 → pass security
  • 27 Oct 26 −16
    • Stability: pass → 0.97 functional
  • 26 Oct 26 −16

    The score moved with no change recorded against any check. We would rather say so than guess.

  • 25 Oct 26 0
    • Known CVEs: pass → unverified ▼ security
    • Install scripts: pass → unverified ▼ security
    • Provenance: Provenance check failed: the declared version isn't published, so its provenance can't be verified. security
    • Dependency health: 0.87 → unverified ▼ functional
    • Maintenance: pass → unverified ▼ functional
    • License: pass → fail ▼ functional
    • Licence: MIT functional
  • 24 Oct 26 0
    • Security disclosure: pass → unverified ▼ functional
  • 21 Oct 26 0
    • Stability: 0.97 → pass security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 30 Oct 2026 · Analysed npm/festo-codesys-mcp@1.0.1

Provenance Version not published

The package exists but this version is not published, so there is no artifact to attest.

Result Version not published
Ecosystem npm

Background: How many MCP packages publish verified provenance →

MCP tools · 18 exposed · ~3,972 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
create_data_type ~144

Generate a CODESYS data type: ENUM (E_*) or STRUCT (ST_*), with .st + PLCopen XML output. USE WHEN: you need an ENUM (state/mode) or STRUCT (config/record) to back FB, GVL, or program declarations. Name auto-corrected to E_ (enum) or ST_ (struct) prefix if missing.

NameTypeReqDescription
kindstringyes–
membersarrayyes–
namestringyesType name (e.g., E_MachState or MachState, ST_AxisCfg or AxisCfg)
outputDirstring–Output directory (default: cwd)

No output schema declared.

No examples provided.

create_function_block ~246

Generate a CODESYS Function Block (.st + PLCopen XML) with the standard interface built in. USE WHEN: the user asks for a new FB and plc_library returned no reusable match. ALWAYS BEFORE: (1) plc_library action=search — never create what already exists; (2) plc_knowledge topics 'conventions' + 'abbreviations'. Standard pattern: bEnable/bExecute inputs, bDone/bBusy/bErr/nErrId outputs, nState state machine. Name auto-corrected to FB_ prefix. DO NOT: use this for servo motion logic — motion uses MC_*_Festo blocks (topic 'festo-ptp'), not custom FBs.

NameTypeReqDescription
descriptionstringyesWhat this FB does (English)
inOutVarsarray––
inputVarsarray––
localVarsarray––
namestringyesFB name (e.g., FB_ServoAxis or just ServoAxis)
outputDirstring–Output directory (default: cwd)
outputVarsarray––
stCodestringyesStructured Text body (the logic)

No output schema declared.

No examples provided.

create_gvl ~142

Generate a Global Variable List (.st + PLCopen XML) with {attribute 'qualified_only'}. USE WHEN: you need globals shared across POUs — I/O map, system flags, HMI tags (GVL_HMI), config. Name auto-corrected to GVL_ prefix if missing. Common: GVL_Sys, GVL_IO, GVL_HMI, GVL_Cfg.

NameTypeReqDescription
isConstantboolean––
namestringyesGVL name (e.g., GVL_Sys or just Sys)
outputDirstring–Output directory (default: cwd)
variablesarrayyes–

No output schema declared.

No examples provided.

create_program ~155

Generate a CODESYS Program (.st + PLCopen XML) for cyclic control logic. USE WHEN: you need a cyclic PRG (runs once per scan) — PRG_Main, PRG_Auto, sequence orchestration — and no reusable one exists. Programs run once per PLC scan (PRG_Main, PRG_Auto, etc.). Name auto-corrected to PRG_ prefix if missing.

NameTypeReqDescription
descriptionstringyesWhat this program does
localVarsarray––
namestringyesProgram name (e.g., PRG_Main or just Main)
outputDirstring–Output directory (default: cwd)
stCodestringyesStructured Text body

No output schema declared.

No examples provided.

create_project_structure ~167

Scaffold a standard CODESYS project directory for Festo CPX-E. USE WHEN: starting a new CODESYS project and you need the standard folder scaffold before creating POUs. Creates: src/0_Types, src/1_Globals, src/2_Programs, src/3_FunctionBlocks, src/4_Functions, src/5_Library, export/xml, docs. Set includeExamples=true to pre-populate with E_MachState, GVL_Sys, and PRG_Main stubs. After scaffolding, create files in order: Types → GVLs → FBs → Programs → generate XML.

NameTypeReqDescription
includeExamplesboolean––
projectDirstringyesRoot directory
projectNamestringyesProject name

No output schema declared.

No examples provided.

debug_plc_code ~156

Static analysis for Structured Text bugs — run BEFORE deploying to a real PLC. USE WHEN: ST code is convention-clean and you need runtime-bug analysis, or the user reports misbehavior. Catches: WHILE/REPEAT loops (watchdog risk), missing error handling (bErr/nErrId), CiA 402 safety gaps (MC_Power without MC_Stop), state machine issues (missing IDLE/ERROR), Hungarian notation violations, REAL-INT type mismatches, unused timer outputs. Returns categorized Critical/Warning/Suggestion results.

NameTypeReqDescription
codestringyesThe Structured Text code to analyze
contextstring–Additional context (e.g., "EtherCAT axis", "conveyor control")

No output schema declared.

No examples provided.

explain_error_code ~172

Decode Festo/CODESYS/EtherCAT error codes using ALL embedded references. USE WHEN: any Festo/CODESYS/EtherCAT error code appears — 0x…, 16#…, drive fault, AL status. Never guess meanings. Accepts hex (0x7500), IEC (16#8011), or decimal formats. Searches: CiA 402, Festo PtP, CODESYS ground truth, ALL embedded topics, and all device manuals. If not found locally, search the web — then save useful findings to knowledge/manuals/ for future use.

NameTypeReqDescription
errorCodestringyesThe error code (e.g., "0x7500", "16#8011", "MC error 4357")
sourcestring–Error source platform
NameTypeReqDescription
errorCodestringyes–
foundbooleanyes–
manualHitsbooleanyes–
messagestringyes–
snippetCountnumberyes–
sourcestringyes–
sourcesMatchedarrayyes–

No examples provided.

generate_plcopen_xml ~180

Batch-convert a directory of .st files into a single PLCopen TC6 0200 XML for CODESYS import. USE WHEN: .st sources are final and reviewed, and the user wants a CODESYS-importable file. ALWAYS BEFORE: plc_knowledge topic 'ground-truth' (anti-hallucination XML rules) if you have not loaded it this session. ALWAYS AFTER: validate_plcopen_xml -> validate_plcopen_xsd -> validate_plcopen_semantic. Never hand the XML to the user before the chain passes. DO NOT: hand-write PLCopen XML — always generate it from .st sources with this tool.

NameTypeReqDescription
outputFilestringyesOutput XML file path
projectNamestring––
sourceDirstringyesDirectory containing .st files

No output schema declared.

No examples provided.

plc_knowledge ~504

Load embedded PLC reference documentation — the source of truth for Festo/CODESYS/EtherCAT/PLCopen. USE WHEN: before writing ANY Structured Text (load 'conventions' + 'abbreviations' first), before generating XML (load 'ground-truth'), before motion code (load 'festo-ptp' + 'ethercat-cia402'), or whenever a technical fact is needed — never answer from memory. Actions: 'topic' (load by name), 'search' (BM25 full-text across ALL topics + manuals), 'list_manuals', 'read_manual'. Topics (27): conventions, abbreviations, hungarian-notation, state-machines, engineering-discipline, ground-truth, xml-rules, plcopen-schema, plcopen-example, plcopen-extensions, festo-cpx, festo-ptp, festo-cdpx-hmi, festo-vtux-terminal, festo-cmmt-st, festo-mqtt, motion-patterns, ethercat-cia402, eplan, hmi-web-architecture, opcua-websocket-gateway, hmi-embedded-deploy, plc-architecture-patterns, plc-alarm-patterns, codesys-recipe-manager, codesys-gotchas, plc-testing-twin. Covers: Festo CPX/PtP/CMMT/MQTT, CODESYS, EtherCAT CiA 402, PLCopen XML, naming conventions, engineering discipline & quality gates, custom Web HMI + OPC-UA gateway, PLC program architecture + alarm design, recipes, testing without hardware, CODESYS gotchas, 19 device manuals. If information is not found here, you may search the web — but suggest saving useful findings to knowledge/manuals/ for future use.

NameTypeReqDescription
actionstringyes'topic': load reference by name | 'search': full-text across ALL topics + manuals | 'list_manuals': show available manuals | 'read_manual': load complete manual
filenamestring–Manual filename for action=read_manual (e.g., "festo-cpx-e-system")
querystring–Search term for action=search (e.g., "P-0-4014", "homing method", "CMMT fault")
topicstring–Topic name for action=topic. Use "all" to load every topic concatenated.

No output schema declared.

No examples provided.

plc_library ~261

Access the 38-block reusable ST library (30 Function Blocks + 8 shared DUTs) — ALWAYS check here BEFORE creating new FBs. USE WHEN: about to create any FB, or looking for ready-made motor/valve/PID/sensor/safety logic. Actions: 'search' (keyword match), 'list' (browse by category), 'get' (full source code). Categories: types (8), motion (4), actuators (5), sensors (4), safety (2), system (5), utilities (10). Contains ready-to-use blocks for motors, valves, PID, sensors, safety, and more. DO NOT create a new FB if a similar one already exists here.

NameTypeReqDescription
actionstringyes'search': find blocks by keyword | 'list': browse all blocks (optionally by category) | 'get': retrieve full .st source code
categorystring–Filter by category for action=list, or category hint for action=get
namestring–Block name for action=get (e.g., "FB_StandardMotor", "E_AxisState")
querystring–Search term for action=search (e.g., "motor", "temperature", "pid")

No output schema declared.

No examples provided.

plc_lookup ~207

Quick lookup for PLC conventions and error codes — instant answers without loading full knowledge topics. USE WHEN: you need a single fact — prefix, state number, error code — without loading a full topic. Try this BEFORE plc_knowledge for point lookups. Actions: 'hungarian' (type→prefix), 'type_prefix' (POU→prefix), 'state' (state number→name), 'error_code' (decode Festo/CiA402/CODESYS error), 'fb_interface' (standard FB pattern), 'list_standard' (full reference).

NameTypeReqDescription
actionstringyes'hungarian': get prefix for a type | 'type_prefix': get prefix for POU type | 'state': decode state number | 'error_code': decode error | 'fb_interface': show standard FB pattern | 'list_standard': f…
valuestring–The value to look up (type name, POU type, state number, or error code)
NameTypeReqDescription
actionstringyes–
detailsobjectyes–
foundbooleanyes–
messagestringyes–

No examples provided.

plc_validate ~267

Validate PLC code against conventions — composable validators with consistent results. USE WHEN: you need to check ST against conventions programmatically — naming, FB interface, or state machine — without a full review. Actions: 'naming' (check variable names + Hungarian notation), 'fb_interface' (check FB pattern), 'state_machine' (check nState pattern), 'batch' (validate multiple items at once). Returns {valid, message, details} for each check.

NameTypeReqDescription
actionstringyes'naming': check variable/POU naming | 'fb_interface': check FB bEnable/bDone pattern | 'state_machine': check nState 0/90/99 | 'batch': multiple validations
codestring–ST code to validate (for fb_interface, state_machine)
itemsstring–JSON array of {type, input, extra?} for batch mode
pouNamestring–POU name (for naming action with pouType)
pouTypestring–POU type: functionBlock, program, enum, struct (for naming action)
typeNamestring–Type name like BOOL, INT, REAL (for naming action)
varNamestring–Variable name (for naming action)
NameTypeReqDescription
actionstringyes–
detailsobject––
failednumberyes–
messagestringyes–
passednumberyes–
resultsarray––
validbooleanyes–

No examples provided.

review_st_code ~133

Validate ST code against naming conventions — returns ONLY violations, not reference dumps. USE WHEN: immediately after writing or editing any ST code. Checks: Hungarian notation (b=BOOL, n=INT, r=REAL, t=TIME, fb=FB instance), POU prefixes (FB_, PRG_, FC_), FB interface pattern (bEnable/bDone/bBusy/bErr/nErrId), state machine (0=IDLE, 90=DONE, 99=ERROR), snake_case detection. Includes quick-reference table when violations are found.

NameTypeReqDescription
codestringyesThe Structured Text code to review

No output schema declared.

No examples provided.

st_find_references ~200

Find all references (usages) of an ST identifier across a directory of .st files — token-aware and comment/string-safe (unlike grep: ignores comments, strings, typed literals, and substring matches). USE WHEN: you need every usage of an ST identifier across files before renaming or refactoring. Each reference carries file, line/column, the line text, the containing POU, whether it is the declaration site, and disambiguation hints (e.g. resolves E_X.MEMBER member access via the qualifier). Note: sourceDir must be inside the workspace unless FESTO_MCP_ALLOW_OUTSIDE_WORKSPACE=1.

NameTypeReqDescription
caseInsensitiveboolean–IEC is case-insensitive (default true)
includeDeclarationboolean–Include the declaration site (default false)
namestringyesIdentifier to search for (whole token)
sourceDirstringyesDirectory containing .st files (recursive scan)
NameTypeReqDescription
definitionsarrayyes–
namestringyes–
referenceCountnumberyes–
referencesarrayyes–
sourceDirstringyes–

No examples provided.

st_symbols ~254

Index a directory of .st files and navigate symbols across files — dialect-aware (CODESYS V3.5), comment/string-safe, better than grep. USE WHEN: you need to navigate an existing .st project — outline symbols or resolve a definition across files (better than grep). Actions: 'outline' — project map. Returns top-level symbols (functionBlock/program/function/enum/struct/gvl) by default; pass kindFilter to include vars/members (e.g. ["inputVar","globalVar"]). 'definition' — resolve a name (case-insensitive) to its definition(s); requires 'name'. Notes: sourceDir must be inside the workspace unless FESTO_MCP_ALLOW_OUTSIDE_WORKSPACE=1. Line numbers and find-references arrive in a later version (this version returns file + container).

NameTypeReqDescription
actionstringyes'outline' = project map | 'definition' = resolve a name
kindFilterarray–Filter by SymbolKind (e.g. ["functionBlock","globalVar"])
namestring–Symbol name (required for action=definition)
sourceDirstringyesDirectory containing .st files (recursive scan)
NameTypeReqDescription
actionstringyes–
fileCountnumberyes–
sourceDirstringyes–
symbolCountnumberyes–
symbolsarrayyes–

No examples provided.

validate_plcopen_semantic ~334

Compares variable/initializer counts between source .st files and generated PLCopen XML. USE WHEN: after validate_plcopen_xsd passes, to confirm no variables/initializers were silently dropped vs the .st sources. Detects bugs where the generator silently drops variables or initializers: - VARS_MISSING — ST has more vars than XML (Bugs A/B/F) - INITS_MISSING — ST has more initializers than XML (Bug E) - AT_ADDR_LOST — ST has vars with AT %IX/QX, XML has 0 <address> tags (Bug A) - POU_MISSING_IN_XML — POU declared in .st but absent in XML Use AFTER validate_plcopen_xsd. If XSD passes but semantic fails, the XML is structurally valid but missing content — exactly the silent-failure scenario that caused the 2026-05-22 incident (203 CODESYS errors). Tolerances are configurable; defaults are permissive (-25% vars, -30% inits). Output: { gate, valid, summary, errors[{line, location, code, message}], counts }

NameTypeReqDescription
filePathstringyesPath to PLCopen XML file (e.g. master-final.xml)
initsTolerancenumber–XML/ST init ratio threshold (default 0.70)
sourceDirstringyesDirectory containing source .st files (recursive scan)
varsTolerancenumber–XML/ST var ratio threshold (default 0.75)

No output schema declared.

No examples provided.

validate_plcopen_xml ~230

Fast smoke check for PLCopen XML — XML well-formedness + 13 structural regex heuristics. USE WHEN: immediately after generate_plcopen_xml, as the fast first gate before the XSD/semantic validators. Use AFTER generate_plcopen_xml as a quick gate before the heavier validators. Checks: XML well-formedness, PLCopen namespace, XHTML namespace, fileHeader, contentHeader, coordinateInfo (fbd/ld/sfc), mandatory instances footer, zero-ID rule on connectionPoints, ST code wrapping in xhtml, inOutVariables on blocks, structural hierarchy. Returns: PASSED/ISSUES counts and VALID/FIX verdict. NOTE: this is a sanity check only. For full validation use: - validate_plcopen_xsd — XSD official PLCopen TC6 v2.00 (catches structural issues) - validate_plcopen_semantic — count vars/inits source ST vs XML (catches Bugs A/B/E/F: missing vars/inits)

NameTypeReqDescription
filePathstringyesPath to PLCopen XML file
NameTypeReqDescription
countsobjectyes–
failednumberyes–
failedChecksarrayyes–
filePathstringyes–
passednumberyes–
passedChecksarrayyes–
validbooleanyes–

No examples provided.

validate_plcopen_xsd ~220

Strict schema validation against the official PLCopen TC6 v2.00 XSD (embedded). USE WHEN: after validate_plcopen_xml passes and you need strict schema conformance before import. Catches structural issues that the fast sanity check misses: malformed elements, required attributes missing, type mismatches, etc. Use AFTER generate_plcopen_xml for full structural validation before CODESYS import. Output: { gate, valid, summary, errors[{line, location, code, message}], counts } Codes: FILE_NOT_FOUND, XSD_NOT_FOUND, XSD_PARSE_ERROR, XML_PARSE_ERROR, XSD_VIOLATION. NOTE: requires lxml in the MCP python venv. Pair with validate_plcopen_semantic for end-to-end coverage (XSD catches structure, semantic catches missing vars/inits).

NameTypeReqDescription
filePathstringyesPath to PLCopen XML file
xsdPathstring–Optional custom XSD path. Default: bundled tc6_xml_v200_patched.xsd

No output schema declared.

No examples provided.

Install

How do I install the io.github.efranceschetti/festo-codesys-mcp server?

io.github.efranceschetti/festo-codesys-mcp runs locally as an npm package, launched with npx -y festo-codesys-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · festo-codesys-mcp

# add to Claude Code
claude mcp add efranceschetti-festo-codesys-mcp -- npx -y festo-codesys-mcp
Common questions

What is the io.github.efranceschetti/festo-codesys-mcp server?

io.github.efranceschetti/festo-codesys-mcp is listed in the public MCP registry as io.github.efranceschetti/festo-codesys-mcp. MCP server for Festo/CODESYS PLCs: IEC 61131-3 ST + validated PLCopen XML generation. This page covers its npm package (festo-codesys-mcp).

Is the io.github.efranceschetti/festo-codesys-mcp server safe to use?

io.github.efranceschetti/festo-codesys-mcp scores 0 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.efranceschetti/festo-codesys-mcp server expose?

io.github.efranceschetti/festo-codesys-mcp exposes 18 tools: create_function_block, create_program, create_data_type, create_gvl, generate_plcopen_xml, and 13 more. Their descriptions and schemas cost roughly 3,972 tokens of context every time the server is loaded.

Is the io.github.efranceschetti/festo-codesys-mcp server still maintained?

io.github.efranceschetti/festo-codesys-mcp has been unreachable for long enough that we treat it as dead, and its score is pinned to zero. We last reached this channel on 23 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.