prodlint — Claude Code MCP server: audit and install
prodlint scans code for security, reliability, performance, and AI-quality issues. Use it to review an app before production.
claude mcp add prodlint -- npx -y prodlint-mcpWhat prodlint does
prodlint provides static analysis with zero configuration and no LLM. Its checks cover hardcoded secrets, missing authentication, unchecked inputs, imports for undeclared packages, weak error handling, and other issues. The README groups 52 rules into security, reliability, performance, and AI-quality categories.
The MCP server starts with npx -y prodlint-mcp and lets an agent run prodlint checks against a project. Findings are reported as critical issues, warnings, or informational items, which gives the agent concrete points to inspect. Because the server is launched through npx, the environment must be able to run that command.
prodlint is listed for Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, and Gemini CLI.
What it helps with
- scan source files for hardcoded secrets
- flag API routes without authentication
- catch imports missing from
package.json - spot SQL injection and unsafe redirects
- find floating promises and unbounded queries
Example prompts for the agent
- Run
prodlinton this project and group the findings by severity. - Check the code for missing authentication and explain each critical result.
- Use prodlint to review security and reliability issues before release.
How to install prodlint
Platform CLI
claude mcp add prodlint -- npx -y prodlint-mcpPlatform CLI
codex mcp add prodlint -- npx -y prodlint-mcpConfig file
{
"mcpServers": {
"prodlint": {
"command": "npx",
"args": [
"-y",
"prodlint-mcp"
]
}
}
}Config file
{
"servers": {
"prodlint": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"prodlint-mcp"
]
}
}
}Platform CLI
gemini mcp add prodlint npx -y prodlint-mcpStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about prodlint
How do I install prodlint in Claude Code?
Run claude mcp add prodlint -- npx -y prodlint-mcp.
What does prodlint do?
It is an MCP server for static analysis of applications. Its 52 rules cover security, reliability, performance, and AI-quality issues.
Does prodlint require configuration or an LLM?
The analyzer is described as zero-config and does not use an LLM. The server runs through npx -y prodlint-mcp.
