HefestoAI — Claude Code MCP server: what it does, how to install
Reviews AI-written code before release: finds secrets and injection risks, and flags where dependencies, README and CI disagree.
claude mcp add --transport http hefestoai https://hefestoai.narapallc.com/api/mcp-protocolWhat HefestoAI does
HefestoAI runs once your assistant has finished writing and before anything ships. It cross-checks what the project claims about itself (dependencies, pyproject.toml, README, CHANGELOG, action.yml, Dockerfile, CI) against what is really there. On top of that it looks for hardcoded secrets and injection patterns, and measures function complexity.
A typical catch: a Python import with no matching entry in pyproject.toml, or a version that differs between pyproject.toml, CHANGELOG and the README badges. No single file shows these, so a per-file linter stays quiet. The GitHub Action runs the same checks and writes SARIF for Code scanning.
The MCP server is a remote HTTP endpoint at https://hefestoai.narapallc.com/api/mcp-protocol. If your code is TypeScript or Go, the Action won't cover it: you need the CLI with pip install "hefesto-ai[multilang]".
What it helps with
- find a Python import missing from
pyproject.toml - catch a password or API key hardcoded in source
- spot SQL injection in an f-string query
- compare versions across
pyproject.toml, CHANGELOG and README badges - confirm CI uses the same Python version and flake8 config as local
Example prompts for the agent
- Run HefestoAI on the code you just wrote before I commit
- Use hefestoai to scan this project and show findings at MEDIUM or higher
- Ask hefestoai to compare versions in
pyproject.toml, CHANGELOG and README
How to install HefestoAI
Platform CLI: remote server
claude mcp add --transport http hefestoai https://hefestoai.narapallc.com/api/mcp-protocolPlatform CLI: remote server
codex mcp add hefestoai --url https://hefestoai.narapallc.com/api/mcp-protocolConfig file
{
"mcpServers": {
"hefestoai": {
"url": "https://hefestoai.narapallc.com/api/mcp-protocol"
}
}
}Config file
{
"servers": {
"hefestoai": {
"type": "http",
"url": "https://hefestoai.narapallc.com/api/mcp-protocol"
}
}
}Platform CLI: remote server
gemini mcp add -t http hefestoai https://hefestoai.narapallc.com/api/mcp-protocolStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about HefestoAI
How do I install HefestoAI in Claude Code?
Run claude mcp add --transport http hefestoai https://hefestoai.narapallc.com/api/mcp-protocol. It connects as a remote HTTP server.
What does HefestoAI do?
It checks code after the assistant writes it and before release. It compares what the project declares with what it does (dependencies, versions, CI, Dockerfile) and looks for secrets, injection risks and heavy complexity.
Which languages does HefestoAI cover?
The Action handles Python plus configs such as YAML, Terraform and Dockerfile. TypeScript, JavaScript, Java, Go, Rust and C# need the CLI: pip install "hefesto-ai[multilang]".
