code-factory — Claude Code MCP server: what it does, how to install
Gathers local audit evidence for Python changes, connecting AST security checks, test results, and patch review.
claude mcp add code-factory -- uvx factoryline-code-factoryWhat code-factory does
The server exposes Code Factory audit capabilities to coding agents. It performs bounded AST security inspection on Python sources, tracking input values as they flow toward HTTP, filesystem, or SQL sinks. A basic scan reads code without executing project runtime scripts, requiring no Docker containers or tenant configuration.
Audit traces keep track of check statuses alongside the proposed patch. Missing test reports or absent evaluations are recorded as incomplete rather than clean passes. The integrated JUnit module inspects reports up to 10,000 cases. Running native worker execution requires separate environment and safety setups.
What it helps with
- inspect Python source for unsanitized data flowing to SQL or file sinks
- bind JUnit test results to incoming code patches
- flag incomplete audit evidence before accepting agent changes
- compare candidate repairs against affected checks
Example prompts for the agent
- Run a code-factory scan on the root directory and list the security findings
- Review the latest Python diff and check for incomplete audit evidence
- Ingest our JUnit report using code-factory to identify affected tests
How to install code-factory
Platform CLI
claude mcp add code-factory -- uvx factoryline-code-factoryuvx runs the command named after the package; if the README names another one, use uvx --from factoryline-code-factory <command>
Platform CLI
codex mcp add code-factory -- uvx factoryline-code-factoryuvx runs the command named after the package; if the README names another one, use uvx --from factoryline-code-factory <command>
Config file
{
"mcpServers": {
"code-factory": {
"command": "uvx",
"args": [
"factoryline-code-factory"
]
}
}
}uvx runs the command named after the package; if the README names another one, use uvx --from factoryline-code-factory <command>
Config file
{
"servers": {
"code-factory": {
"type": "stdio",
"command": "uvx",
"args": [
"factoryline-code-factory"
]
}
}
}uvx runs the command named after the package; if the README names another one, use uvx --from factoryline-code-factory <command>
Platform CLI
gemini mcp add code-factory uvx factoryline-code-factoryuvx runs the command named after the package; if the README names another one, use uvx --from factoryline-code-factory <command>
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about code-factory
How do I install code-factory in Claude Code?
Run claude mcp add code-factory -- uvx factoryline-code-factory in your terminal. This requires uvx available on your system path.
Does a standard code-factory scan execute my code?
No. The basic scan only inspects Python source files statically. Executing project code requires configuring separate native workers.
What are the limits on JUnit report parsing?
The JUnit reader handles files containing up to 10,000 test cases. Larger or malformed files are marked as incomplete evidence.
