Model Context Protocol을 통한 AI-assisted CodeQL 쿼리 개발

CodeQL (QL) 코드의 Agentic AI 개발을 위해 특별히 디자인된 포괄적인 모형 Context 의정서 (MCP) 서버. 이 서버는 AI 보조 쓰기, 유효성 검사 및 보안 분석 및 코드 품질에 대한 CodeQL 쿼리를 최적화하는 도구, 신속한 및 리소스를 제공합니다.

특징

-Comprehensive Tool Suite - 쿼리 편집, 실행, 테스트 및 데이터베이스 작업에 대한 CodeQL CLI 명령 -Multi-Language Support - Python, JavaScript, Java, C/C++, Rust, Swift 등 10개 언어에 대한 CodeQL 쿼리 개발 지원

• AI-Optimized Prompts - CodeQL 개발 워크플로우를 통해 AI 보조를 안내하는 내장 프롬프트 및 리소스
• Test-Driven Development - 예상 결과와 쿼리 정확도를 검증하는 통합 테스트 도구
• Flexible Transport - 다른 통합 시나리오에 대한 stdio 및 HTTP 전송 모드 모두 지원

제한

• CodeQL CLI가 별도로 설치되어 있어야 합니다.
• Performance는 CodeQL 데이터베이스의 크기에 따라 분석됩니다.
• 몇몇 진보된 CodeQL CLI 특징은 아직 공구로 드러낼지도 모릅니다

CodeQL Development MCP Server

Enabling AI-assisted CodeQL query development through the Model Context Protocol

A comprehensive Model Context Protocol (MCP) server designed specifically for agentic AI development of CodeQL (QL) code. This server provides tools, prompts, and resources to help AI assistants write, validate, and optimize CodeQL queries for security analysis and code quality.

Features

• Comprehensive Tool Suite - Wraps CodeQL CLI commands for query compilation, execution, testing, and database operations
• Multi-Language Support - Supports CodeQL query development for 10 languages including Python, JavaScript, Java, C/C++, Rust, Swift, and more
• AI-Optimized Prompts - Built-in prompts and resources that guide AI assistants through CodeQL development workflows
• Test-Driven Development - Integrated testing tools for validating query accuracy with expected results
• Flexible Transport - Supports both stdio and HTTP transport modes for different integration scenarios

Limitations

• Requires CodeQL CLI to be installed separately
• Performance depends on the size of CodeQL databases being analyzed
• Some advanced CodeQL CLI features may not yet be exposed as tools

Project Status

Active Development - This project is actively maintained and used in production environments for AI-assisted CodeQL development.

Background

The codeql-development-mcp-server project is maintained by GitHub’s CodeQL Expert Services team and builds (and hopefully improves) on the concepts from the advanced-security/codeql-development-template repository template.

The main advantages of using the codeql-development-mcp-server are:

1. Agnostic of development environment
2. Agnostic of calling Large Language Model (LLM)
3. MCP server tools codify advanced CodeQL development practices

Roadmap

Development priorities and open issues are tracked in GitHub Issues.

Contributing

We welcome contributions! Whether it’s bug fixes, new features, documentation improvements, or additional language support, please see CONTRIBUTING.md for guidelines.

Please note that this project is released with a Contributor Code of Conduct. By participating in this project you agree to abide by its terms.

Requirements

Environment

• Node.js v25.6.0 or later (nodejs.org)
• Some calling LLM Bring your own LLM, but some LLMs are (much) better than others.

External Dependencies

• CodeQL CLI - Must be installed and available in PATH (github.com/github/codeql-cli-binaries)

Quick Start

VS Code extension via VSIX (recommended for IDEs)