MCP.Market

Roz MCP server

by andypgray·io.github.andypgray/roz-mcp·v1.1.0

Roslyn-powered C# code navigation, blast-radius analysis, and verified edits for coding agents.

B83/100grade B
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Roz yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Roz tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it

no findings
  • –Code scanpackage could not be scannedn/a
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 24 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Roz compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 65% of 48,243 servers

Install Roz in Claude Code, Cursor or VS Code

The registry entry has no remote endpoint or installable package.

What the publisher says

From the Roz repository's README, as published. We do not edit it. Read it on GitHub

roz-mcp

<!-- mcp-name: io.github.andypgray/roz-mcp -->

roz is an MCP server that gives C# coding agents the compiler's view of a solution. It finds every real reference to a symbol, including the edges text search misses: overrides, interface dispatch, DI registrations. It renames a symbol across the whole solution in one call, previews the blast radius of a proposed change, and makes edits that verify themselves against the compiler in the same round trip. roz runs as a .NET global tool over stdio; one roz-mcp setup command configures Claude Code, Cursor, VS Code Copilot Chat, or Codex CLI.

roz was developed for and dogfooded on large legacy financial codebases, and it is for that sort of work that it shines. It is most probably not worth the (inherent to the MCP protocol) token overhead for clean greenfield work; When it helps (and when it doesn't) has the measurements.

Quickstart

roz requires the .NET 10 SDK.

dotnet tool install -g Zphil.Roz
cd path/to/your/solution
roz-mcp setup

Restart the AI client, then ask it something that needs the compiler:

"Find all implementations of IRepository in this solution and show me each class's Save method."

setup auto-detects which AI clients the project uses (via the .claude/, .cursor/, .vscode/, and .codex/ marker directories), writes the matching MCP config file(s), and appends a short usage snippet to the corresponding project rules file. If several markers are present, choose explicitly with --client=claude,cursor. Setup is idempotent: re-running it updates roz's entries without disturbing sibling MCP servers or user-added environment variables, and it refreshes the # roz-mcp rules section in place without touching the rest of the file.

VS Code and Cursor users can also add the server in one click, once the tool is installed:

The badges wire the server into the client config only. roz-mcp setup is the fuller path: it also writes the project rules snippet and, for Claude Code, the permission defaults that route write tools through a confirmation prompt.

Two defaults are worth knowing before your first session:

  • Solution discovery walks up from the working directory; pin a specific .sln/.slnx with ROZSOLUTIONPATH in the MCP config's env block.
  • Tool surface: the default set is 13 of the 20 tools; most write tools are opt-in. Seed a different surface at onboarding with roz-mcp setup --tools=all (everything) or --tools=read (read-only), and see Configuration for finer control.

From source

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Roz: common questions

Is Roz MCP server safe?
Mostly: it is graded B (83/100). Read the Roz safety report
Does Roz need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Roz maintained?
The last commit was 65 days ago (2026-09-01). The latest release is v1.1.0.