Back to Home
knitli icon

codeweaver

Verified Safe

by knitli

Overview

CodeWeaver is an AI-first MCP server designed to provide 'exquisite context' for AI agents by offering semantic code search and code analysis capabilities.

Installation

Run Command
python -m codeweaver.main --transport streamable-http

Environment Variables

  • VOYAGE_API_KEY
  • OPENAI_API_KEY
  • COHERE_API_KEY
  • ANTHROPIC_API_KEY
  • AWS_ACCESS_KEY_ID
  • AWS_SECRET_ACCESS_KEY
  • AWS_REGION_NAME
  • GOOGLE_API_KEY
  • MISTRAL_API_KEY
  • HUGGINGFACEHUB_API_TOKEN
  • QDRANT_URL
  • QDRANT_API_KEY
  • TAVILY_API_KEY
  • CODEWEAVER_PROJECT_PATH
  • CODEWEAVER_STORAGE_PATH
  • CODEWEAVER_LOG_LEVEL
  • CODEWEAVER_VERBOSE
  • CODEWEAVER_DEBUG
  • CODEWEAVER_MANAGEMENT_HOST
  • CODEWEAVER_MANAGEMENT_PORT
  • CODEWEAVER_MCP_HOST
  • CODEWEAVER_MCP_PORT
  • CODEWEAVER_USE_FASTEMBED_GPU
  • CODEWEAVER_DISABLE_TELEMETRY
  • CODEWEAVER_TOOLS_OVER_PRIVACY

Security Notes

The project uses `subprocess` for system-level operations (Git, system services, Docker) and appears to handle command construction carefully. It operates two HTTP servers (Management and MCP) and explicitly mentions `SecretStr` for API keys, indicating good practice for secret management. There are no obvious `eval` or arbitrary code execution vulnerabilities directly exposed to user input. The tiered API design (Human, User Agent, Context Agent) suggests controlled exposure. Overall, it seems reasonably secure given its functionality, but any system interaction carries inherent risks.

Similar Servers

Stats

Interest Score36
Security Score8
Cost ClassHigh
Avg Tokens7500
Stars6
Forks1
Last Update2025-12-06

Tags

AI-firstsemantic searchcode analysisMCP serverdeveloper tools