# prodcheck

Pre-production review tool for your coding agent. Connects 4,685 checks covering application security, performance, and AI safety risks before launch.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 15
- Author: FarzamHabibi
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/FarzamHabibi/pre-production-checklist
- Updated: 2026-10-19
- HTML: https://affpapa.org/en/nevibecode/mcp/prodcheck

## What it does

The server connects a catalog of 101 checklists across six domains directly to your coding assistant. Built for solo founders and lean teams running without a dedicated security department, it handles the whole stack from infrastructure configurations to deploy pipelines. When queried, your assistant analyzes the project and points directly to `file:line` locations.

Over 1,300 items target failure modes introduced by AI development, including prompt injection and tool-calling risks. You can invoke checks via the MCP interface, initialize a repository review skill with `npx prodcheck init`, or filter stack-specific blockers into `BLOCKERS.md` using the `--gate` flag.

Running this server requires Node.js with `npx` in your path, and the assistant will flag unverified items as UNKNOWN for mandatory manual review.

## Requirements
- Needs: Node.js (commands run via npx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add prodcheck -- npx -y prodcheck
```

### Codex

**Platform CLI**
```bash
codex mcp add prodcheck -- npx -y prodcheck
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "prodcheck": {
            "command": "npx",
            "args": [
                "-y",
                "prodcheck"
            ]
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "prodcheck": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "prodcheck"
            ]
        }
    }
}
```

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add prodcheck npx -y prodcheck
```

## When to use it
- audit release blockers before production deployment
- detect prompt injection and tool misuse risks in AI agents
- generate a stack-specific launch checklist into BLOCKERS.md
- inspect authorization logic without a dedicated security team

## Example prompts
- Inspect the repository with prodcheck and point out release blockers with file and line references
- Run the prodcheck AI safety checks against our LLM tool definitions
- Filter prodcheck for our stack and output critical gates to BLOCKERS.md

## Similar
- [code-review-checklist](https://affpapa.org/en/nevibecode/skills/code-review-checklist.md) — skill · 365 installs
- [audit-prep-assistant](https://affpapa.org/en/nevibecode/skills/audit-prep-assistant.md) — skill · 5700 installs
- [thermo-nuclear-review](https://affpapa.org/en/nevibecode/skills/thermo-nuclear-review.md) — skill · 2700 installs
- [rust-review](https://affpapa.org/en/nevibecode/skills/rust-review.md) — skill · 2000 installs
- [intended-vs-implemented](https://affpapa.org/en/nevibecode/skills/intended-vs-implemented.md) — skill · 1800 installs
- [production-code-audit](https://affpapa.org/en/nevibecode/skills/sickn33-production-code-audit.md) — skill · 1200 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md