Home / MCP servers / CodeNib
CodeNib
sysevol-ai/CodeNibMCP server
Source-linked CodeGraph exploration, ranked search, and static navigation for coding agents.
Why this score
0 public GitHub projects have this in their committed setup (counted 2026-10-07). That counts people who kept it, not people who starred it. Private projects aren't visible, so the real number is higher.
Popularity score: 57/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Nov 4, 2026 at the PyPI package codenib@0.2.5, first 300 source files (it's a large repo), with Cisco's open-source skill-scanner.
What its code does:
- Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.codenib/llm/decisions.py, codenib/openrouter_auth.py and 2 more
- Runs shell commands Common for dev tools. Read the commands it runs.codenib/agent/tools/defaults.py:1227, codenib/clients/_manifest.py:27, codenib/git_snapshot.py:43 and 4 more
- Runs code it builds while running (eval or exec) Harder to read ahead of time, since the code is assembled while it runs.codenib/wiki/evidence.py:337
- Makes network requestscodenib/artifacts/github.py:126, codenib/openrouter_auth.py:368, codenib/web/launcher.py:68 and 4 more
- Reads environment variables, where API keys usually livecodenib/cli.py:1153, codenib/toolchains.py:517, codenib/web/launcher.py:172
Web addresses in its code:
- openrouter.aicodenib/cli.py:1035
- api.github.comcodenib/artifacts/github.py:209
- demo.codenib.aicodenib/web/share.py:48
- code.claude.comcodenib/agent/tools/defaults.py:15
- codeload.github.comcodenib/wiki/visitor_source.py:206
These are the sites named in the code, so it's where your data could go. It isn't a complete list: code can build addresses while it runs, and a few of these may be links rather than calls. Whatever you send also goes to the AI model you use.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Nothing from another maker does quite the same job yet.