Skip to content
Agentmart
Submit a tool

Codebase Doctor

Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts.

Connector by subhajitlucky · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)
Write a review

Chalk Labs

Need help deploying Codebase Doctor?

Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.

Book a call

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/subhajitlucky-codebase-doctor

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
7 read · 0 write · 0 deleteRead-only
Secrets
None asked for
Install scripts
Not scanned yet
Runs as
Node.js package

Tools by what they do 7

Read from the source code; the running server may list different tools.

Read 7 · Look things up without changing anything.

  • audit_codebase
  • build_receipt
  • describe_capabilities
  • explain_finding
  • review_changes
  • verify_changes
  • verify_intent

Files it touches

  • Any path the agent passes to its tools

Tools (7)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • audit_codebaseAudit a codebaseread-only

    Run the full built-in Codebase Doctor audit on a repository and return the evidence-backed report. Read-only and offline by default; it never enables validation commands (--run-checks) or live database access (--with-database).

  • build_receiptBuild a coverage receiptread-only

    Run a read-only audit and return a portable coverage receipt: what was checked, what was not, the score, and finding fingerprints, with a SHA-256 digest over the canonical body. Receipts never contain secret values or source text. Read-only and offline.

  • describe_capabilitiesDescribe Codebase Doctor capabilitiesread-only

    Describe this MCP server: available tools, the nine audit domains in the domainCoverage inventory, the Doctor capability vocabulary, and the permissions this server never grants.

  • explain_findingExplain one findingread-only

    Return the full evidence, remediation guidance, and verification command for one finding, selected by fingerprint or rule id. Read-only and offline.

  • review_changesReview changed coderead-only

    Review changed code with a PR-ready verdict. Always audits changed scope and narrows findings to added diff lines, returning APPROVE, COMMENT, or REQUEST_CHANGES. Findings on unchanged lines are omitted, never resolved. Read-only and offline by default; it never enables validation commands or live database access.

  • verify_changesVerify repairs against a baselineread-only

    Verify that findings from a prior schema-1 JSON report are repaired. Runs a fresh read-only audit, compares fingerprints, and reports each baseline finding as resolved, unchanged, or unresolved. Absence under incomplete coverage is unresolved, never resolved. Read-only and offline by default; it never enables validation commands or live database access.

  • verify_intentVerify declared intentread-only

    Verify declared intent against audit evidence: claims (rule-absent, rule-present, score-at-least, coverage-complete) are checked as verified, violated, or undecided. Intent is declared JSON or a fenced ```intent block; prose is never interpreted. Undecided means the claim depends on coverage that did not complete and is never counted as verified. Read-only and offline.

Signals

Stars
0
Forks
0
Open issues
0
Last commit
Oct 23, 2026 (8 days ago)
Last release
Oct 23, 2026 (8 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name
io.github.subhajitlucky/codebase-doctor
Version
0.1.10
Auth
No auth
Packages
npm codebase-doctor
License
MIT
Repository
github.com/subhajitlucky/codebase-doctor
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Source
Official MCP Registrygithub-graphql

More from subhajitlucky

Done for you

Rather not set it up yourself?

Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.

See how we build AI agents →Read the case studies

Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.

launches shipped
50+
launches shipped
media placements
500+
media placements
founders on every account
2
founders on every account

Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block

Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.

Get Codebase Doctor running in your business

Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.

Goes to the Chalk Labs founders, not the newsletter. Privacy

Need help deploying Codebase Doctor?

CallGet help
Cite this page

Codebase Doctor MCP server. Agent Mart. https://agentmart.dev/connectors/subhajitlucky-codebase-doctor (last updated 2026-10-24)