Skip to content

Enable Codacy MCP server #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Copilot wants to merge 3 commits into from
+65 −1
Closed

Enable Codacy MCP server #5

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
c864930
Initial plan
Copilot Feb 18, 2026
1867f82
Add Codacy MCP server configuration and documentation
Copilot Feb 18, 2026
9908e26
Use clearer placeholder for Codacy token
Copilot Feb 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions .cursor/mcp.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
{
"mcpServers": {
"codacy": {
"command": "npx",
"args": ["-y", "@codacy/codacy-mcp"],
"env": {
"CODACY_ACCOUNT_TOKEN": "YOUR_CODACY_TOKEN_HERE"
}
}
}
}
55 changes: 54 additions & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1,54 @@
# 1
# 1
Copy link

Copilot AI Feb 18, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The README title "# 1" on line 1 appears to be a placeholder or error. Consider using a more descriptive title that reflects the repository's purpose, such as "# Codacy MCP Integration" or a title that describes what this repository is for.

Suggested change
# 1
# Codacy MCP Integration

Copilot uses AI. Check for mistakes.

## Codacy MCP Server Setup

This repository has been configured with the Codacy MCP (Model Context Protocol) Server, which enables code quality and security analysis through your IDE.

### Prerequisites

1. **Node.js & npm**: Ensure Node.js and npm are installed
```bash
node -v
npm -v
```

2. **Codacy Account Token**: Obtain your personal API token from your Codacy account
- Go to your Codacy account → Access Management
- Generate a new API token if you don't have one

### Configuration

The MCP server is configured in `.cursor/mcp.json`. To use it:

1. Replace `YOUR_CODACY_TOKEN_HERE` with your actual Codacy API token in `.cursor/mcp.json`:
```json
{
"mcpServers": {
"codacy": {
"command": "npx",
"args": ["-y", "@codacy/codacy-mcp"],
"env": {
"CODACY_ACCOUNT_TOKEN": "your-actual-token-here"
Comment on lines +23 to +31
Copy link

Copilot AI Feb 18, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The token placeholder in the README example shows "your-actual-token-here" (line 31), but the actual configuration file uses "YOUR_CODACY_TOKEN_HERE" (line 7 in .cursor/mcp.json). These placeholders should be consistent to avoid confusion. Consider using the same placeholder value in both locations.

Copilot uses AI. Check for mistakes.
}
}
}
}
```

Copy link

Copilot AI Feb 18, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider adding a security warning about not committing the actual token to version control. Users should be advised to use environment variables, secret management tools, or gitignore the file after adding their token. This is especially important since the configuration file is checked into version control with a placeholder.

Suggested change
> **Security warning:** Do **not** commit your real `CODACY_ACCOUNT_TOKEN` to version control.
> - Prefer setting `CODACY_ACCOUNT_TOKEN` via environment variables or a secret management tool.
> - If you store the token in `.cursor/mcp.json`, ensure this file is excluded from version control (for example, by adding it to `.gitignore`).

Copilot uses AI. Check for mistakes.
2. If using VS Code or another IDE, you may need to copy this configuration to your IDE's settings file.

### Features

The Codacy MCP Server provides:
- Repository setup and management
- Code quality analysis (grade, issues, duplication, complexity, coverage)
- Security scanning (SAST, secrets detection, SCA, IaC scanning)
- File management and pull request analysis

### Troubleshooting

- If using Node Version Manager (NVM), ensure you reference the correct node binary in the configuration
- Make sure your Codacy token has the necessary permissions
- The server will automatically install the Codacy CLI when first run

For more information, visit the [Codacy MCP Server GitHub repository](https://github.com/codacy/codacy-mcp-server).