sphior-code-mcp

Name: sphior-code-mcp
Author: Toraastrta

Community

MCP server by Toraastrta · updated 4 days ago · ★ 1 · 1.3k downloads a week

Score 82

Deterministic SAST/SCA findings + fix guidance for your AI agent. Runs locally, no account needed. sphior-code-mcp is a community project by Toraastrta, not verified by a company domain.

Install Add to Cursor Add to VS Code GitHub Website

Yours? Claim it

Works withClaude Code Claude Desktop Cursor Codex Gemini CLI VS Code Windsurf Antigravity CLI

Maintenance

Last commit 4 days ago

Licence

MIT: permissive, fine for commercial use

Quality

Clear description, published package or server URL, original repository

Security

No risky patterns in the files we checked

What you need

Setting	Needed	What it is
`SPHIOR_API_KEY`Environment variable, secret	Optional	Optional. Without it the server runs in local mode: it scans your workspace with the bundled deterministic engine and returns fix guidance. Set it to also get tamper-evident evidence, history and GRC integrations. Create one at https://sphi
`SPHIOR_WORKSPACE`Environment variable	Optional	Optional. Directory to scan in local mode. Defaults to the directory your client launches the server in.
`SPHIOR_API_BASE`Environment variable	Optional	Override the API base URL for self-hosted / regional deployments. Default: https://sphior.com/api/v1

From the publisher's entry in the official MCP Registry. Required settings are already in the install config below as placeholders.

Install sphior-code-mcp

Built from the published package, never by AI

claude mcp add sphior-code-mcp -- npx -y sphior-code-mcp

Run in your terminal. Add --scope user to use it in every project.

Step-by-step: install sphior-code-mcp in Claude Code

{
  "mcpServers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp"
      ]
    }
  }
}

Settings, Developer, Edit config. Paste into claude_desktop_config.json and restart.

Step-by-step: install sphior-code-mcp in Claude Desktop

{
  "mcpServers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project).

Step-by-step: install sphior-code-mcp in Cursor

{
  "servers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp"
      ]
    }
  }
}

Add to .vscode/mcp.json. VS Code uses "servers", not "mcpServers".

Step-by-step: install sphior-code-mcp in VS Code

codex mcp add sphior-code-mcp -- npx -y sphior-code-mcp

Step-by-step: install sphior-code-mcp in Codex

{
  "mcpServers": {
    "sphior-code-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "sphior-code-mcp"
      ]
    }
  }
}

Add to ~/.gemini/config/mcp_config.json (all projects) or .agents/mcp_config.json (this project).

Step-by-step: install sphior-code-mcp in Antigravity CLI

gemini mcp add sphior-code-mcp npx -y sphior-code-mcp

Gemini CLI was replaced by Antigravity CLI in June 2026 and remains only for enterprise licences and paid API keys.

Step-by-step: install sphior-code-mcp in Gemini CLI

MCP servers run with your permissions and can read what you give them access to. Some need an API key: check the README and add it under env in the sphior-code-mcp block.

Weekly newsletter

Like sphior-code-mcp? Get the best new MCP servers every week

The best new tools, security warnings before you install something risky, and one practical tip. Free, three minute read.

Security check

No download-and-run commands, hidden instructions or signs of sending keys out were found.

Checked automatically: README.md. This looks for known risky patterns and is not a full audit. How grades work

Alternatives to sphior-code-mcp

All alternatives →

OpenWork MCP Gateway different-ai

Your OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL.

AFA Remote 24k

Modelcontextprotocol Core modelcontextprotocol

Model Context Protocol for TypeScript — public Zod schemas (spec + OAuth/OpenID) (with updated dependencies)

AAA Local 14k

Agents MCP electric-sql

Model Context Protocol registry, transports, and OAuth bridges for Electric Agents

AAA Local 10k

MCP Remote punkpeye

Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth

AAA Local 505k/wk

Agentmesh MCP Proxy microsoft

Public Preview — Security proxy for MCP servers: The Firewall for Model Context Protocol

AAA Local 6.5k

NotFairnowork-studio

OAuth MCP for Google, Meta, X, LinkedIn, Reddit, TikTok, GSC, GA4, WordPress and GHL.

AAA Remote 4.0k

sphior-code-mcp vs OpenWork MCP Gateway sphior-code-mcp vs Modelcontextprotocol Core sphior-code-mcp vs Agents MCP

sphior-code-mcp: common questions

How do I install sphior-code-mcp?

In Claude Code run claude mcp add sphior-code-mcp -- npx -y sphior-code-mcp. For Claude Desktop, Cursor and VS Code, paste the config shown above and restart. See the install guides.

Is sphior-code-mcp the official server?

sphior-code-mcp is a community project by Toraastrta, not verified by a company domain.

Is sphior-code-mcp free?

The code is published under the MIT licence. The service it connects to may have its own pricing.

Is sphior-code-mcp safe to use?

It scores 82 of 100. Grades: maintenance A, licence A, quality C. Security check: grade A, no risky patterns found in the files checked. Review the code before you install. How grades work.

What are alternatives to sphior-code-mcp?

Similar MCP servers: OpenWork MCP Gateway, Modelcontextprotocol Core, Agents MCP, MCP Remote.

Does sphior-code-mcp work with ChatGPT?

Not directly. It runs locally, and ChatGPT only connects to remote servers with a URL. Use it in Claude Code, Claude Desktop, Cursor, VS Code or Codex.