Back to Home
Azteron icon

codesona-mcp-server

Verified Safe

by Azteron

Overview

The Codesona MCP Server provides team coding standards via stdio transport to AI assistants in IDEs, fetching rules from the Codesona API and supporting rule suggestion.

Installation

Run Command
npx -y @codesona/mcp-server

Environment Variables

  • CODESONA_API_KEY
  • CODESONA_API_URL
  • NODE_ENV

Security Notes

The server explicitly disables TLS certificate verification (`rejectUnauthorized: false`) when `NODE_ENV` is set to 'development'. This is a critical security risk as it makes the server vulnerable to Man-in-the-Middle (MITM) attacks against the Codesona API in development environments. While conditional, it exposes a significant vulnerability that users should be aware of. No hardcoded secrets or obvious malicious patterns were found, and `CODESONA_API_KEY` is loaded from environment variables.

Similar Servers

Stats

Interest Score0
Security Score5
Cost ClassMedium
Avg Tokens2500
Stars0
Forks0
Last Update2025-11-22

Tags

mcpcoding-standardsAI-assistantIDE-integrationcode-quality