festo-codesys-mcp

Item: festo-codesys-mcp
Rating: 60
Author: M8ven

An MCP server that turns AI assistants into competent Festo/CODESYS PLC engineers by grounding them in curated, manufacturer-accurate knowledge and forcing every artifact through a machine-checked validation pipeline for CODESYS import.

→ efranceschetti/festo-codesys-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tool annotations don’t match behaviour

2 read-only tools perform write/delete/exec — debug_plc_code (line 78: statePattern.exec(stripped)); review_st_code (line 154: varPattern.exec(stripped))

⚠️

Tool descriptions don’t match what handlers do

1 tool describes read intent but its handler mutates — create_gvl (line 328: writeFile(join(dir, `${gvlName}.st`), stContent, 'utf-8'))

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configCODESYS_PRODUCT_VERSION

configFESTO_MCP_ALLOW_OUTSIDE_WORKSPACE— unset 1 lets file-writing tools leave the workspace jail

configFESTO_MCP_CODESYS_PATH— Enabled by setting to your CODESYS.exe and

configFESTO_MCP_CODESYS_PROFILE— to the profile name shown in the CODESYS version

configFESTO_MCP_CODESYS_TEMPLATE

configFESTO_MCP_CODESYS_TIMEOUT_MS

configFESTO_MCP_ENABLE_HARDWARE— Enabled by =1 (plus Python with the official

configFESTO_MCP_PYTHON— bundled venv Python interpreter used by the XSD/semantic validators and hardware tools (needs lxml; hardware also needs festo-cpx-io / festo-edcon)

configFESTO_MCP_PYTHON_TIMEOUT_MS

configFESTO_MCP_WRAPPERS_DIR

configMCP_DUAL_LOG

configProgramData

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/efranceschetti-festo-codesys-mcp-13hsws)](https://m8ven.ai/mcp/efranceschetti-festo-codesys-mcp-13hsws)

commit: 588c5afc9593a6ab851506757239a83539a381f4

code hash: b5fcc6618a6206772be4fc2063ca5d41b15bcdb5bc68936ed46a849e319fac1c

verified: 7/21/2026, 9:25:43 AM

view raw JSON →