Back to MCP Trust Indexm8ven
45
/ 100
17 days ago
glama

codex-workspace-codegraph-mcp

A local MCP server for code operations that provides file editing, Git, command execution, and codebase analysis via CodeGraph, with a built-in feedback web UI. It operates entirely offline without any external API dependencies.

→ lllli223/codex-workspace-codegraph-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: CWMCP_ACCESS_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configCODEGRAPH_MCP_TOOLS— "": "explore,node,search,callers,callees,impact,files,status"
🔐 secretCWMCP_ACCESS_TOKEN— 随机值 HTTP MCP 和 WebUI 访问令牌
configCWMCP_ALLOWED_ORIGINS— 空 额外允许的浏览器 Origin，逗号分隔；默认仅接受同源和本机 Origin
configCWMCP_APPROVAL_POLICY— "": "on-request",
configCWMCP_CLOUDFLARED— 自动查找 cloudflared 可执行文件
configCWMCP_CODEGRAPH_COMMAND— codegraph CodeGraph 可执行文件
configCWMCP_COMMAND_TIMEOUT_MS— 120000 普通命令超时
configCWMCP_DEBUG
configCWMCP_DISABLE_CODEGRAPH— 0 设为 1 禁用 CodeGraph
configCWMCP_FEEDBACK_AUTO_RESPONSE
configCWMCP_HOST— 127.0.0.1 MCP HTTP 监听地址
configCWMCP_MAX_OUTPUT_BYTES— 1048576 stdout/stderr 输出上限
configCWMCP_MAX_READ_BYTES— 2097152 单文件读取上限
configCWMCP_MCP_PORT— 8765 MCP HTTP 端口
configCWMCP_NO_BROWSER
configCWMCP_QUIET
configCWMCP_SANDBOX— "": "workspace-write",
configCWMCP_TRANSPORT— stdio stdio 或 http
configCWMCP_TUNNEL_VERBOSE— 0 设为 1 输出子进程详细日志
configCWMCP_WEB_HOST— 127.0.0.1 WebUI 监听地址
configCWMCP_WEB_PORT— 8766 WebUI 端口
configCWMCP_WORKSPACE— 当前目录 允许访问的工作区根目录
configComSpec
configSHELL
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/lllli223-codex-workspace-codegraph-mcp-chmhjk)](https://m8ven.ai/mcp/lllli223-codex-workspace-codegraph-mcp-chmhjk)
commit: b1c1c0c9827c0788c57decdbdc883b50ab1c0e5d
code hash: 6f0c6a784eca055a7968d416e3996b23d0f34529aae1caa5c0a8150431b2f832
verified: 7/14/2026, 8:28:37 AM
view raw JSON →