# Codacy MCP for AI Agents AI Agent Connect

> Codacy MCP lets your AI agent pull code quality data and security alerts directly from your Codacy account. You can query repository grades, search for specific bugs, and manage organization members without leaving your chat interface. It turns your AI into a real-time code health monitor.

## Overview
- **Category:** developer-tools
- **Price:** Free
- **Endpoint:** https://edge.vinkius.com/vk_preview_KbaaZYN1bP8SnLjmfwP5o8lSuAGcVbr6otbUJbbw/ai-agent-connect
- **Tags:** code-quality, static-analysis, security-scanning, automated-reviews, repository-monitoring, technical-debt

## Description

Connect your Codacy account to any AI agent and take control of your automated code reviews and quality metrics through natural conversation. You can monitor security and maintainability across your repositories natively. Instead of jumping between tabs to check for bugs, you can ask your agent for a status update on a specific project. This Connector gives your agent a direct line to your Codacy data, allowing you to pull quality grades, search for high-priority issues, or manage organization members without leaving your workspace. It takes the manual work out of monitoring technical debt and gives you a real-time look at your codebase health. Because Vinkius makes it easy to connect these tools, you can start using this setup in minutes to keep your codebase clean. It's about getting straight answers on code health when you're actually doing the work, rather than hunting for them in a separate tool. You can audit your webhooks, check supported languages, and get a bird's eye view of your entire organization's status without ever leaving your chat window.

## Tools

### get_repository_quality_analysis
Get the current quality grade and metrics for a specific repository. This helps you see how a project ranks on maintainability.

### list_supported_languages
List the programming languages supported by the Codacy engine. Use this to see what languages your agent can analyze.

### list_codacy_organizations
List all organizations associated with your account. This lets you see every team you manage at a glance.

### list_organization_members
List people and users belonging to an organization. Use this to check permissions or team rosters.

### list_organization_repositories
List all repositories analyzed within an organization. This gives you a full view of your team's workspace.

### search_repository_issues
Search for specific code quality issues in a repository. Use filters like category or level to find exactly what you need.

### get_my_codacy_profile
Retrieve information about the authenticated Codacy user. This confirms your account details are correctly linked.

### list_repository_webhooks
List configured webhooks for quality notifications. This helps you check if your alerts are set up correctly.

## Prompt Examples

**Prompt:** 
```
What are the most critical security issues in our 'auth-service' repo?
```

**Response:** 
```
Searching for critical security issues in the 'auth-service' repository...

| Issue Type | Severity | Description |
| :--- | :--- | :--- |
| **SQL Injection** | Critical | Vulnerable pattern detected in login query. |
| **Hardcoded Secret** | Critical | AWS Access Key found in configuration file. |
| **XSS** | Medium | Unsanitized input in user profile page. |

Would you like me to pull the full report for any of these?
```

**Prompt:** 
```
Give me a summary of all repositories in the 'mobile-app' organization.
```

**Response:** 
```
Retrieving repository list for the 'mobile-app' organization...

I found 4 analyzed repositories:
- **core-engine**: Grade A (Healthy)
- **ui-components**: Grade B (Maintainability issues)
- **api-gateway**: Grade A (Healthy)
- **analytics-worker**: Grade C (High technical debt)

Let me know if you'd like to see the specific issues for the 'ui-components' project.
```

**Prompt:** 
```
What languages does Codacy actually support for analysis?
```

**Response:** 
```
Codacy supports a wide range of programming languages for analysis, including:

- **Main Languages**: JavaScript, TypeScript, Python, Go, Java, PHP, Ruby, C#
- **Config Files**: Dockerfile, Terraform, YAML

It supports over 40 languages in total. Is there a specific language you need to verify for your project?
```

## Capabilities

### Pull repository quality grades
Get the current quality grade and metrics for a specific repository.

### Search for specific code issues
Search for specific code quality issues using filters like level and category.

### List all organizations
List all organizations associated with your Codacy account.

### See organization members
List people and users belonging to an organization.

### Check supported languages
List the programming languages supported by the Codacy analysis engine.

### View configured webhooks
Monitor configured webhooks for real-time quality and analysis notifications.

### Get your Codacy profile
Retrieve information about the authenticated Codacy user.

## Use Cases

### Security Audit
A security analyst asks the agent to find all 'Critical' issues in a repo using search_repository_issues. This helps them prioritize the most dangerous bugs immediately.

### Team Onboarding
An engineering manager asks for a list of all members in a specific organization using list_organization_members. This helps them quickly verify who has access to the codebase.

### Health Check
A developer wants to know the maintainability grade of a new project using get_repository_quality_analysis. This gives them a quick pulse check on the project's technical debt.

### Workspace Overview
A DevOps engineer asks to see every repository in the company using list_organization_repositories. This allows them to verify that all projects are being actively monitored.

## Benefits

- Get instant repository grades using get_repository_quality_analysis to see project health without leaving your chat. This saves you from opening the dashboard every time you want to check a grade.
- Find specific bugs faster with search_repository_issues to target high-priority security vulnerabilities. You can filter by level or category to find exactly what needs fixing first.
- Manage team access easily by using list_organization_members to audit who has access to your code. This helps you keep your organization rosters updated and secure at all times.
- Stay on top of your workspace by pulling all projects with list_organization_repositories in one go. You can see every analyzed repository across your entire account instantly.
- Verify your notification setup by checking list_repository_webhooks to ensure your alerts are active and correct. This prevents you from missing critical quality notifications.

## How It Works

The bottom line is you get instant access to your code quality metrics inside any AI chat.

1. Subscribe to the Codacy MCP on Vinkius.
2. Provide your Codacy Account API Token from your user settings.
3. Ask your AI client to check repo health or search for bugs.

## Frequently Asked Questions

**Can Codacy MCP find security vulnerabilities?**
Yes, it lets your agent search for specific issues using filters like level and category to highlight critical risks in your codebase.

**How do I see my organization's repo grades?**
You can ask the agent to pull the quality analysis for any repo in your organization to see its current grade and health metrics.

**Can I manage team members using Codacy MCP?**
Yes, you can list all members of an organization to check who has access or to audit your team roster directly from your chat.

**Does Codacy MCP support multiple organizations?**
It does. You can list all organizations associated with your account to manage them all from a single chat interface.

**How do I check my webhook settings?**
You can ask your agent to list your configured webhooks to ensure your notifications are active and set up correctly.

**What kind of code quality metrics can I see?**
The Connector pulls grades and metrics for analyzed repositories, helping you track maintainability and technical debt across your projects.

**Can I see the quality grade for a specific repository?**
Yes! Use the `get_repository_quality_analysis` tool. Provide the provider (e.g., `gh`), organization, and repository name. The agent will return the current letter grade (A-F) and core quality metrics.

**How do I search for security-related issues in my code?**
Use the `search_repository_issues` tool. You can filter the payload to include `categories: ['Security']`. Your agent will fetch all security vulnerabilities identified by Codacy in that repository.

**Where do I find my Codacy API Token?**
Log in to Codacy, click on your avatar in the top right, go to **User Settings**, and select the **API** tab. You can generate and copy your account token from there.