sphior code mcp for VS Code
io.github.toraastrta/sphior-code-mcp
Deterministic security findings + fix guidance for your AI agent. Runs locally, no account needed.
client:VS Code
transport:stdio
runtime:npm
Install sphior code mcp in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "sphior-api-key",
"description": "SPHIOR_API_KEY",
"password": true
},
{
"type": "promptString",
"id": "sphior-workspace",
"description": "SPHIOR_WORKSPACE",
"password": true
},
{
"type": "promptString",
"id": "sphior-api-base",
"description": "SPHIOR_API_BASE",
"password": true
},
{
"type": "promptString",
"id": "sphior-timeout",
"description": "SPHIOR_TIMEOUT",
"password": true
}
],
"servers": {
"sphior-code-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"sphior-code-mcp"
],
"env": {
"SPHIOR_API_KEY": "${input:sphior-api-key}",
"SPHIOR_WORKSPACE": "${input:sphior-workspace}",
"SPHIOR_API_BASE": "${input:sphior-api-base}",
"SPHIOR_TIMEOUT": "${input:sphior-timeout}"
}
}
}
}VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs