Skip to main content
mcpSource-backedReview first Safety Privacy

Searchcode MCP Server

Remote MCP server for analyzing, searching, retrieving, and auditing code from public Git repositories without cloning them into the local workspace.

by searchcode.com·added 2026-06-06·
Claude CodeClaude Desktop
HarnessClaude CodeClaude Desktop
Review first review before installing

Open the source and read safety notes before installing.

Safety notes

  • Searchcode analyzes public repositories through a hosted remote service; do not point it at private repository URLs unless you have a private/enterprise arrangement and have reviewed the current access controls.
  • The service can return code snippets, file contents, symbols, file trees, static-analysis findings, and credential-scan findings from public repositories.
  • Treat tool results as machine-assisted code intelligence. Confirm security findings, complexity claims, and dependency conclusions against the repository before making merge, hiring, acquisition, or incident decisions.
  • Large or repeated repository analysis can create automated traffic to Searchcode; keep agent loops bounded and avoid broad unattended scans.

Privacy notes

  • Prompts and tool inputs can reveal which public repositories, symbols, files, dependencies, security concerns, or candidate portfolios a team is investigating.
  • Returned code snippets, findings, file paths, and repository metadata become part of the MCP client transcript and may be processed by the connected model provider.
  • Public code can still contain secrets, personal data, proprietary code accidentally committed upstream, or prompt-injection text. Review returned snippets before forwarding them into other tools or reports.
  • Searchcode's public page says the hosted MCP server is free during beta and does not require signup or an API key; review the live site before production use because pricing and private-code options may change.

Prerequisites

  • MCP client with remote Streamable HTTP support, or `mcp-remote` for clients that still need a stdio bridge.
  • Public Git repository URLs or `owner/repo` names for the repositories Claude should inspect.
  • Team agreement that public repository metadata, code snippets, file paths, and static-analysis results may be sent through a hosted third-party MCP service.
  • Client-side policy for whether model-generated findings should be treated as triage hints or reviewed security results.

Schema details

Install type
cli
Troubleshooting
No
Collection metadata
Estimated setup
5 minutes
Difficulty
beginner
Tool listing metadata
Full copyable content
{
  "mcpServers": {
    "searchcode": {
      "url": "https://api.searchcode.com/v1/mcp"
    }
  }
}

About this resource

Content

Searchcode MCP Server is a hosted Streamable HTTP MCP server that gives Claude structured code intelligence for public Git repositories. Instead of cloning a repository and reading files one by one, Claude can ask Searchcode for a repository overview, code search results, file trees, file contents, batches of files, and detailed code-quality or credential findings.

The Searchcode site describes six MCP tools mirrored by a REST API: code_analyze, code_search, code_get_file, code_get_files, code_file_tree, and code_get_findings. The public page also says the service is free during beta, needs no signup or API key, and is built on the author's open-source scc and cs projects for code counting, complexity analysis, and code search.

Source Review

These sources were reviewed on 2026-06-06. Prefer the live Searchcode page, llms.txt, OpenAPI spec, well-known MCP metadata, and upstream open-source tool repositories for current endpoint, tool, pricing, and implementation details.

Features

  • Analyze public repositories for language breakdowns, complexity, file counts, tech stack, code quality, and credential-scan findings.
  • Search public repository code with boolean queries, regex, fuzzy matching, file/path/language filters, and structural filters.
  • Retrieve a specific file, line range, or symbol declaration after search results identify the target.
  • Retrieve batches of related files without making separate tool calls.
  • Browse file trees with language, path, depth, and fuzzy filename filters.
  • Drill into static-analysis findings by severity, category, path, and result offset.
  • Use the same six capabilities through a documented REST API when an MCP client is not available.

Installation

For Claude Code, add the hosted remote server:

claude mcp add searchcode --transport http https://api.searchcode.com/v1/mcp

For MCP clients that accept JSON server configuration:

{
  "mcpServers": {
    "searchcode": {
      "url": "https://api.searchcode.com/v1/mcp"
    }
  }
}

For Claude Desktop clients that still require a stdio command, use mcp-remote as documented by Searchcode:

{
  "mcpServers": {
    "searchcode": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://api.searchcode.com/v1/mcp"]
    }
  }
}

Use Cases

  • Get a compact overview of an unfamiliar public repository before deciding what Claude should inspect.
  • Search for a symbol, API pattern, dependency use, or security-sensitive code path across a public repo.
  • Retrieve exact function or class definitions instead of asking an agent to read an entire file.
  • Compare public repositories when evaluating libraries, vendors, acquisition targets, or candidate portfolios.
  • Review code quality and credential findings as triage evidence before a human security review.
  • Reduce token use in public-code research by replacing repeated clone, grep, and file-read loops with structured results.

Safety and Privacy

Searchcode is best treated as a public-code intelligence service. It can make repository exploration much cheaper for an agent, but its outputs should not be accepted as final security, licensing, architecture, or hiring conclusions without human review.

Do not send private repository URLs, customer code, internal symbols, or confidential investigation context unless Searchcode's private-code offering and your organization's policy explicitly allow that use. Public repositories can contain malicious prompt text or accidentally committed sensitive data, so review returned snippets before asking Claude to summarize or act on them.

Duplicate Check

No searchcode.com, api.searchcode.com, boyter/scc, boyter/cs, or Searchcode MCP entry was found in content/mcp, content/tools, content/guides, or content/agents.

#code-search#code-analysis#developer-tools#security#remote

Source citations

Signals

Loading live community signals…

More like this, weekly

A short, calm digest of reviewed Claude resources. Unsubscribe any time.