MCP setup
Add wiki.codes as a read-only code intelligence tool for agents. The endpoint is served by the native API at https://api.wiki.codes/mcp.
endpoint
https://api.wiki.codes/mcp
agent config
{
"mcpServers": {
"wiki-codes": {
"type": "streamable-http",
"url": "https://api.wiki.codes/mcp"
}
}
}Use this shape for agents that accept remote HTTP MCP server entries. If your client asks only for a URL, copy the endpoint above.
smoke test
curl -sS https://api.wiki.codes/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
--data '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"smoke","version":"0"}}}'This should return server metadata and tool capabilities.
CVE check
headers=$(mktemp)
curl -sS https://api.wiki.codes/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
--data '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"smoke","version":"0"}}}' \
-D "$headers" >/dev/null
session_id=$(awk 'BEGIN{IGNORECASE=1} /^mcp-session-id:/ {gsub(/\r/,"",$2); print $2; exit}' "$headers")
curl -sS https://api.wiki.codes/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
-H "mcp-session-id: $session_id" \
--data '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"get_cves","arguments":{"slug":"rust","limit":2}}}'
rm -f "$headers"This initializes an MCP session, then calls get_cves against the indexed rust repo with capped evidence.
read-only tools
- list_reposFind indexed repos and slugs.
- get_repo_policyReturn compact repo metadata and access policy.
- get_scoreReturn compact dependency safety score.
- get_cvesReturn capped OSV/CVE evidence.
- get_dependenciesReturn parsed dependency manifests.
- get_commitsReturn recent commit metadata.
- get_branchesReturn branch tip metadata.
- get_dep_historyReturn recent dependency changes.
- search_symbolSearch indexed symbols by identifier.
- get_outlineReturn a file-level symbol outline.
- search_contentSearch indexed content snippets.
- list_treeReturn capped repo tree data.
status
Current endpoint: native API, live, read-only, Streamable HTTP shaped JSON-RPC.
GET, POST, DELETE, and OPTIONS are handled at https://api.wiki.codes/mcp.
Admin ingest and rebuild operations are not exposed through MCP.