MCP.Market

Tech Debt MCP server

by PierreJanineh·io.github.PierreJanineh/tech-debt-mcp·v2.1.0·7 stars
No reviews yet

MCP Server for analyzing technical debt across multiple programming languages

B80/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B80/100

full report

Adoption
Growing

7 stars47 downloads/wk

Reviews

Write one

Nobody has reviewed Tech Debt yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Tech Debt tools (16, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • add_custom_rule

    Add a custom pattern-based tech debt rule.

  • analyze_file

    Analyze a single file for technical debt issues.

  • analyze_project

    Analyze an entire project for technical debt. Scans all supported files and returns a comprehensive report with issues, metrics, and recommendations.

  • check_dependencies

    Analyze project dependencies across multiple package managers.

  • execute_custom_ruleswrite action

    Execute all custom rules against code or a file.

  • get_debt_summary

    Get a quick summary of technical debt in a project.

  • get_issues_by_category

    Get all issues of a specific category.

  • get_issues_by_severity

    Get all issues of a specific severity level.

  • get_recommendations

    Get prioritized recommendations for addressing technical debt.

  • get_sqale_metrics

    Get SQALE technical debt metrics including remediation time, debt ratio, and rating.

  • get_vulnerability_report

    Generate an offline dependency report listing all project dependencies for vulnerability review. Note: actual CVE lookups require Phase 2b online integration.

  • list_session_custom_rules

    List custom rules registered in this server session via add_custom_rule. Does NOT include customPatterns declared in .techdebtrc.json (those run inside analyze_project via AnalysisEngine but are not surfaced here). Renamed from list_custom_rules (TEC-51) for clarity; the old name is no longer registered.

  • list_supported_languages

    List all programming languages supported by the analyzer.

  • remove_custom_rulewrite action

    Remove a custom rule by ID.

  • validate_config

    Validate a .techdebtrc.json configuration file for syntax and schema correctness.

  • validate_custom_pattern

    Validate a custom pattern before adding it as a rule.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

1 medium
  • Code scan97 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 61 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • mediumeval / new Function usedexec.eval
    dist/analyzers/javascriptAnalyzer.js: …verity: 'critical', title: 'eval() usage detected', descripti…
Overall 80/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Tech Debt compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
80/100
higher than 60% of 48,255 servers
Tools
16
the typical server has 7
Tools that change things
13%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
7
more than 86% of 28,688 servers
Downloads a week
47
more than 39% of 12,191 servers with a package

What its tools let an agent do: 13 read · 1 create · 1 delete · 1 run or deploy

Install Tech Debt in Claude Code, Cursor or VS Code

Runs npx -y tech-debt-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add tech-debt-mcp -- npx -y tech-debt-mcp
Add to Cursor

What the publisher says

From the Tech Debt repository's README, as published. We do not edit it. Read it on GitHub

Tech Debt MCP Server

-brightgreen)

16 Tools · 2 Resources · 14 Languages · 10 Dependency Ecosystems

A Model Context Protocol (MCP) server for analyzing technical debt across multiple programming languages. Designed to integrate with GitHub Copilot, Claude, Cursor, and other MCP-compatible tools.

Features

  • Multi-language support: JavaScript, TypeScript, Python, Java, Swift, Kotlin, Objective-C, C++, C, C#, Go, Rust, Ruby, PHP
  • Comprehensive analysis: Detects various types of tech debt including code quality issues, security vulnerabilities, and maintainability problems
  • SQALE Metrics: Calculate technical debt with SQALE rating system (A-E scale)
  • SwiftUI Analysis: Specialized checks for SwiftUI patterns, state management, memory leaks, view nesting, and concurrency issues
  • Custom Rules: Define your own pattern-based checks with regex support
  • Dependency Analysis: Parse package manifests across 10 ecosystems (npm, pip, Maven/Gradle, Cargo, Go Modules, Composer, Bundler, NuGet, C/C++, Swift)
  • Inline Suppression: Suppress false positives with // techdebt-ignore-next-line or block comments
  • Config Validation: Validate .techdebtrc.json configuration files for schema correctness
  • Actionable recommendations: Provides prioritized suggestions for addressing technical debt
  • Flexible filtering: Filter results by severity, category, or language
  • Security hardened (v2.0.2): Path traversal prevention on all tool and resource path inputs, ReDoS-safe custom-rule regex validation, regex-injection escaping in SwiftUI checks, absolute-path sanitization in all error messages, and CodeQL SAST scanning on every push/PR

Supported Languages

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Tech Debt: common questions

Is Tech Debt MCP server safe?
Mostly: it is graded B (80/100). Read the Tech Debt safety report
How do I install Tech Debt?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Tech Debt need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Tech Debt maintained?
The last commit was 101 days ago (2026-07-26). The latest release is v2.1.0.
How does Tech Debt compare with other MCP servers?
safety score 80/100 (higher than 60% of 48,255 servers); tools 16 (the typical server has 7); tools that change things 13% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.