CodeMCP is a project-scoped Model Context Protocol server designed for developer workspaces. It connects compatible AI assistants to local project context, file tools, commands, and session memory.

Is my source code uploaded to any third-party cloud servers?

CodeMCP runs against the configured project on your local machine and does not use a hosted indexing service. Remote access is optional and uses an authenticated server endpoint.

How does CodeMCP prevent AI from making unwanted edits?

CodeMCP supports permission modes and approval workflows. When approval is enabled, file and command changes are presented for review before they are applied.

Which AI clients are supported by CodeMCP?

CodeMCP supports compatible MCP clients, including Claude Desktop, Cursor, Cline, Windsurf, and remote clients that can authenticate with its Streamable HTTP OAuth flow.

How do I run CodeMCP?

You can launch CodeMCP in any project directory with a single terminal command: npx codemcp, pnpm dlx codemcp, or bunx codemcp. No global installation is required.

Back to product

SECURITY MODEL

SANDBOXED

Boundaries you can
reason about.

CodeMCP is a local bridge. Its security model is built around project boundaries, protected paths, explicit permissions, and visible file changes.

01020304

Project boundary

Paths are resolved and constrained to the configured project. Attempts to traverse outside that project are rejected by the path guard.

configured project → allowed path

Protected paths

Sensitive paths, including credential locations and environment variables (.env*), are protected from tool access automatically.

protected path → denied

Permission modes

Filesystem changes are controlled by permission mode. In approval mode, a proposed change must be explicitly accepted in the terminal before it touches disk.

write request → approval → filesystem

Encrypted credentials

CodeMCP implements encrypted credential storage for credentials it manages. No unencrypted secrets are persisted or leaked to remote logs.

credential → encrypted storage

Boundaries you canreason about.

Project boundary

Protected paths

Permission modes

Encrypted credentials

Boundaries you can
reason about.