Pmd MCP server

by roeiba·io.github.roeiba/pmd·v0.1.2·2 stars

MCP server for PMD static code analyzer - run code analysis and detect duplicates

B75/100grade B

What users say

No reviews yet

Safety scan

B75/100

Adoption

New

2 stars29 downloads/wk

Reviews

Nobody has reviewed Pmd yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

pmd_checkwrite action
Run PMD static code analysis on source files. Detects code quality issues, bugs, and style violations.
pmd_cpdwrite action
Run CPD (Copy-Paste Detector) to find duplicated code. Supports Python, Java, JavaScript, TypeScript, and more.
pmd_list_languages
List all programming languages supported by PMD for static analysis and copy-paste detection.
pmd_list_rulesets
List available PMD rulesets for code analysis. Optionally filter by language.

scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it

no findings

Code scan14 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 291 days ago4/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 75/100; higher than 45% of 48,255 servers
Tools: 4; the typical server has 7
Tools that change things: 50%; typical: 0%. Fewer write tools means less an agent can break
GitHub stars: 2; more than 75% of 28,688 servers
Downloads a week: 29; more than 16% of 12,191 servers with a package

What its tools let an agent do: 2 read · 2 change

Runs npx -y @springsoftware/pmd-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add pmd -- npx -y @springsoftware/pmd-mcp

Is Pmd MCP server safe?: Mostly: it is graded B (75/100). Read the Pmd safety report
How do I install Pmd?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Pmd need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Pmd maintained?: The last commit was 325 days ago (2025-12-14). The latest release is v0.1.2.
How does Pmd compare with other MCP servers?: safety score 75/100 (higher than 45% of 48,255 servers); tools 4 (the typical server has 7); tools that change things 50% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.