# codebadger MCP server

> Lets an AI client build Joern Code Property Graphs from repositories and run CPGQL queries to trace data flow and find vulnerabilities.

- Repository: https://github.com/qcri/codebadger
- Page: https://hostedmcp.org/servers/qcri/codebadger
- Transport: —
- Stars: 180
- License: GPL-3.0

## FAQ

### What languages does codebadger support for code analysis?

It analyzes Java, C/C++, JavaScript, Python, Go, Kotlin, C#, Ghidra, Jimple, PHP, Ruby, and Swift code through Joern CPGs.

### What can an AI agent do with codebadger tools?

Agents can run CPGQL queries, trace data flow and taint, slice programs, and search for vulnerabilities.

### What inputs can codebadger build a CPG from?

It can take a Git repository, a local path, or a pasted code snippet as input to build a CPG.

### Does codebadger support large analysis batches?

Yes, it uses per-CPG worker pools, memory-aware scheduling, and a Postgres/Redis backend to scale.

### Where is codebadger documented?

Installation, usage, tools, configuration, deployment, and other guides are in the docs/ directory.