CodeQL N1ght

Provides an MCP interface to install environments, create CodeQL databases from assets, and perform security scans with configurable options.

python

8

GitHub Stars

python

Language

6 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "yezere-codeql_n1ght_mcp_server": {
      "command": "python",
      "args": [
        "codeql_n1ght_mcp_server.py"
      ]
    }
  }
}

You can use the CodeQL N1ght MCP Server to expose a standardized interface for AI assistants to automate CodeQL workflows. It handles environment setup, database creation from common package formats, and security scanning with flexible configuration and parallel processing to speed up analysis tasks.

How to use

You interact with this MCP server through an MCP client to perform a sequence of code analysis tasks. Start the server in STDIO mode, then issue requests to install environments, create databases from target files, and run security scans. You can configure timeouts, decompiler options, and caching to fit your project’s needs. The server provides clear return information for each operation so you can handle success and errors in your automation.

How to install

Prerequisites for this server are Python and access to the required dependencies.

pip install -r requirements.txt

Place the CodeQL N1ght executable at the configured path if you need to override the default. The default path is J:\mcp\codeql-n1ght.exe. Ensure the executable is accessible from your environment.

Run the MCP server in STDIO mode using Python to start listening for MCP requests.

python codeql_n1ght_mcp_server.py

Configuration and notes

Default Executable Path: J:\mcp\codeql-n1ght.exe.

Path formats supported include Windows-style (J:\path) and Unix-style (/j:/path).

Timeouts are configurable per operation. General operations default to 10 minutes, while database creation and scanning have a longer default timeout of up to 20 hours.

All operations return a standardized response including returncode, stdout, stderr, and timeout fields to help your automation handle results.

If the executable is missing or a parameter is invalid, clear error information is returned to help you diagnose issues quickly.

Notes on usage and behavior

The server supports environment installation, database creation from JAR/WAR/ZIP assets (with decompiler options), and security scanning with customizable query packs.

Available tools

version

Get version or help information from the CodeQL N1ght executable.

install_environment

Install required dependencies (JDK, Ant, CodeQL) with optional custom URLs.

create_database

Create a CodeQL database from target files (JAR/WAR/ZIP) with options for decompiler selection (procyon/fernflower), dependency handling, parallel processing, and cache management.

scan_database

Execute security scans on CodeQL databases with configurable paths, query packs, parallel processing options, and cache control.

run_codeql_n1ght

Generic interface for direct command execution with custom arguments.