MCP setup

Add wiki.codes as a read-only code intelligence tool for agents. The endpoint is served by the native API at https://api.wiki.codes/mcp.

endpoint

https://api.wiki.codes/mcp

agent config

{
  "mcpServers": {
    "wiki-codes": {
      "type": "streamable-http",
      "url": "https://api.wiki.codes/mcp"
    }
  }
}

Use this shape for agents that accept remote HTTP MCP server entries. If your client asks only for a URL, copy the endpoint above.

smoke test

curl -sS https://api.wiki.codes/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  --data '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"smoke","version":"0"}}}'

This should return server metadata and tool capabilities.

CVE check

headers=$(mktemp)

curl -sS https://api.wiki.codes/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  --data '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"smoke","version":"0"}}}' \
  -D "$headers" >/dev/null

session_id=$(awk 'BEGIN{IGNORECASE=1} /^mcp-session-id:/ {gsub(/\r/,"",$2); print $2; exit}' "$headers")

curl -sS https://api.wiki.codes/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  -H "mcp-session-id: $session_id" \
  --data '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"get_cves","arguments":{"slug":"rust","limit":2}}}'

rm -f "$headers"

This initializes an MCP session, then calls get_cves against the indexed rust repo with capped evidence.

read-only tools

  • list_reposFind indexed repos and slugs.
  • get_repo_policyReturn compact repo metadata and access policy.
  • get_scoreReturn compact dependency safety score.
  • get_cvesReturn capped OSV/CVE evidence.
  • get_dependenciesReturn parsed dependency manifests.
  • get_commitsReturn recent commit metadata.
  • get_branchesReturn branch tip metadata.
  • get_dep_historyReturn recent dependency changes.
  • search_symbolSearch indexed symbols by identifier.
  • get_outlineReturn a file-level symbol outline.
  • search_contentSearch indexed content snippets.
  • list_treeReturn capped repo tree data.

status

Current endpoint: native API, live, read-only, Streamable HTTP shaped JSON-RPC.

GET, POST, DELETE, and OPTIONS are handled at https://api.wiki.codes/mcp.

Admin ingest and rebuild operations are not exposed through MCP.