sphior code mcp for VS Code

io.github.toraastrta/sphior-code-mcp

Deterministic SAST/SCA findings + fix guidance for your GitHub repos, handed to your AI agent.

client:VS Code transport:stdio runtime:npm

Install sphior code mcp in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "sphior-api-key",
      "description": "SPHIOR_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "sphior-api-base",
      "description": "SPHIOR_API_BASE",
      "password": true
    }
  ],
  "servers": {
    "sphior-code-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp"
      ],
      "env": {
        "SPHIOR_API_KEY": "${input:sphior-api-key}",
        "SPHIOR_API_BASE": "${input:sphior-api-base}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

sphior code mcp in other clients

sphior code mcp MCP server