codeJung-mcp

Item: codeJung-mcp
Rating: 0
Author: M8ven

MCP server that exposes the self-hosted codeJung code-review service as tools, enabling PR and local directory reviews through any MCP client.

→ beardfaceguy/codeJung-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Reads files from sensitive locations

Touches: ~/codeJung/deploy/codejung.env

🔐

You'll be asked for 2 credentials: CODEJUNG_API_TOKEN, CODEJUNG_SERVICE_API_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configCODEJUNG_API_URL

🔐 secretCODEJUNG_API_TOKEN

configCODEJUNG_SSH_HOST— codejung SSH host running the service

configCODEJUNG_ENV_PATH— ~/codeJung/deploy/codejung.env path to codejung.env on the host (holds the service token)

configCODEJUNG_REVIEW_STAGING— ~/cj-review-staging host dir bind-mounted into the worker at /review-staging (used by review_dir)

configCODEJUNG_API

configCODEJUNG_MCP_HTTP_HOST

configCODEJUNG_MCP_HTTP_PORT

🔐 secretCODEJUNG_SERVICE_API_TOKEN— Auth: Authorization: Bearer <> (enforced at the

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/beardfaceguy-codejung-mcp-1dg96m)](https://m8ven.ai/mcp/beardfaceguy-codejung-mcp-1dg96m)

commit: 9fccfa53d7dd195a14d857fb7d686f4cd9b99c4c

code hash: 2293a1ea1b65b7feeffbf3a09ba8b2b871c46dbd3ffd3640463707ca3d87497b

verified: 7/6/2026, 10:30:15 AM

view raw JSON →