Sphior Code Mcp

MCP server · by Toraastrta

Developer Tools npm v1.1.6

Deterministic SAST/SCA findings + fix guidance for your AI agent. Runs locally, no account needed.

View source ↗ Website ↗ Generate config for multiple servers More servers

Install

Pin version registry version 1.1.6

npm
npx -y sphior-code-mcp

npm
npx -y sphior-code-mcp@1.1.6

Setup by client

Pick your client — the config below is generated for this server (local stdio). Copy respects the “Pin version” switch above.

claude_desktop_config.json

{
  "mcpServers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp"
      ],
      "env": {
        "SPHIOR_API_KEY": "<YOUR_SPHIOR_API_KEY>"
      }
    }
  }
}

{
  "mcpServers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp@1.1.6"
      ],
      "env": {
        "SPHIOR_API_KEY": "<YOUR_SPHIOR_API_KEY>"
      }
    }
  }
}

Format verified against the official Claude Desktop docs ↗.

terminal

claude mcp add --env SPHIOR_API_KEY=<YOUR_SPHIOR_API_KEY> sphior-code-mcp -- npx -y sphior-code-mcp

claude mcp add --env SPHIOR_API_KEY=<YOUR_SPHIOR_API_KEY> sphior-code-mcp -- npx -y sphior-code-mcp@1.1.6

Format verified against the official Claude Code docs ↗.

.cursor/mcp.json

{
  "mcpServers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp"
      ],
      "env": {
        "SPHIOR_API_KEY": "<YOUR_SPHIOR_API_KEY>"
      }
    }
  }
}

{
  "mcpServers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp@1.1.6"
      ],
      "env": {
        "SPHIOR_API_KEY": "<YOUR_SPHIOR_API_KEY>"
      }
    }
  }
}

Format verified against the official Cursor docs ↗.

.vscode/mcp.json

{
  "servers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp"
      ],
      "env": {
        "SPHIOR_API_KEY": "<YOUR_SPHIOR_API_KEY>"
      }
    }
  }
}

{
  "servers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp@1.1.6"
      ],
      "env": {
        "SPHIOR_API_KEY": "<YOUR_SPHIOR_API_KEY>"
      }
    }
  }
}

Format verified against the official VS Code docs ↗.

mcp_config.json

{
  "mcpServers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp"
      ],
      "env": {
        "SPHIOR_API_KEY": "<YOUR_SPHIOR_API_KEY>"
      }
    }
  }
}

{
  "mcpServers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp@1.1.6"
      ],
      "env": {
        "SPHIOR_API_KEY": "<YOUR_SPHIOR_API_KEY>"
      }
    }
  }
}

Format verified against the official Windsurf docs ↗.

Environment variables

Defined in the server's official registry manifest. Required secrets are shown as <YOUR_…> placeholders in the configs above.

SPHIOR_API_KEY secret — Optional. Without it the server runs in local mode: it scans your workspace with the bundled deterministic engine and returns fix guidance. Set it to also get tamper-evident evidence, history and GRC integrations. Create
SPHIOR_WORKSPACE — Optional. Directory to scan in local mode. Defaults to the directory your client launches the server in.
SPHIOR_API_BASE — Override the API base URL for self-hosted / regional deployments. Default: https://sphior.com/api/v1

About this server

Distributed as npm, listed under Developer Tools. Review our MCP security guide before granting access to real data.

Frequently asked questions

How do I install Sphior Code Mcp?

Run the install command shown above, then paste the config for your client (Claude Desktop, Claude Code, Cursor, VS Code or Windsurf) into its MCP settings and restart the client.

Is Sphior Code Mcp free to use?

The MCP server itself is free to install. The source is public on https://github.com/Toraastrta/sphior-code. Any third-party service it calls may require its own API key and account.

Which clients support Sphior Code Mcp?

Any MCP-compatible client can use it, including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and custom agents.

Add this badge

Publish this server? Link back with a badge on your README or site — copy either snippet.

Markdown

[![Listed on MCPNav](https://mcpnav.net/badge/sphior-code-mcp.svg)](https://mcpnav.net/server/sphior-code-mcp/)

HTML

<a href="https://mcpnav.net/server/sphior-code-mcp/"><img src="https://mcpnav.net/badge/sphior-code-mcp.svg" alt="Listed on MCPNav" height="20"></a>