Sphior Code Mcp

io.github.Toraastrta/sphior-code-mcp · v1.1.11

Deterministic security findings + fix guidance for your AI agent. Runs locally, no account needed.

Website Source code Set it up

Connect Runs on your machine

Terminal

claude mcp add sphior-code-mcp -e SPHIOR_API_KEY=<SPHIOR_API_KEY> -e SPHIOR_WORKSPACE=<SPHIOR_WORKSPACE> -e SPHIOR_API_BASE=<SPHIOR_API_BASE> -e SPHIOR_TIMEOUT=<SPHIOR_TIMEOUT> -- npx -y [email protected]

claude_desktop_config.json

{
  "mcpServers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "SPHIOR_API_KEY": "<SPHIOR_API_KEY>",
        "SPHIOR_WORKSPACE": "<SPHIOR_WORKSPACE>",
        "SPHIOR_API_BASE": "<SPHIOR_API_BASE>",
        "SPHIOR_TIMEOUT": "<SPHIOR_TIMEOUT>"
      }
    }
  }
}

~/.cursor/mcp.json

{
  "mcpServers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "SPHIOR_API_KEY": "<SPHIOR_API_KEY>",
        "SPHIOR_WORKSPACE": "<SPHIOR_WORKSPACE>",
        "SPHIOR_API_BASE": "<SPHIOR_API_BASE>",
        "SPHIOR_TIMEOUT": "<SPHIOR_TIMEOUT>"
      }
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "sphior-code-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "SPHIOR_API_KEY": "<SPHIOR_API_KEY>",
        "SPHIOR_WORKSPACE": "<SPHIOR_WORKSPACE>",
        "SPHIOR_API_BASE": "<SPHIOR_API_BASE>",
        "SPHIOR_TIMEOUT": "<SPHIOR_TIMEOUT>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

Name	Description
`SPHIOR_API_KEY` Optional, secret	Optional. Without it the server runs in local mode: it scans your workspace with the bundled deterministic engine and returns fix guidance. Set it to also reach the repositories you connected to SPHIOR on GitHub, with their history and verifiable scan records. Create one under Settings → API at htt…
`SPHIOR_WORKSPACE` Optional	Optional. Directory to scan in local mode. Defaults to the directory your client launches the server in.
`SPHIOR_API_BASE` Optional	Override the API base URL for self-hosted / regional deployments. Default: https://sphior.com/api/v1
`SPHIOR_TIMEOUT` Optional	Optional. Local scan and request timeout in milliseconds (1000–300000). Default: 30000

Details

Package	`[email protected]` (NPM, stdio)
First published	12 Nov 2026
Last updated	12 Nov 2026
Registry name	`io.github.Toraastrta/sphior-code-mcp`

More developer tools servers See all

Live status

Local install

Installed and run on your own machine, so there is no public endpoint to check.

Pair it with live search

Agents that use Sphior Code Mcp often also need current facts. NestDaddy MCP gives your AI today's internet: web search, real-time breaking news and full page reading in one connector.

See NestDaddy MCP

For maintainers

[![NestDaddy MCP](https://nestdaddy.com/mcp/servers/io-github-toraastrta-sphior-code-mcp/badge.svg)](https://nestdaddy.com/mcp/servers/io-github-toraastrta-sphior-code-mcp)

Add the badge to your README. It turns green while your server passes our daily check. Listing details come from the official MCP registry; update them there.

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.