Back to Browse

Tododebt MCP Server

Developer ToolsModerate5.6MCP RegistryLocal
Free

Server data from the Official MCP Registry

TODO, FIXME, and HACK inventory with git blame age and file owner.

About

TODO, FIXME, and HACK inventory with git blame age and file owner.

Security Report

5.6
Moderate5.6Moderate Risk

tododebt is a static-analysis tool that walks a repo, matches uppercase TODO/FIXME/HACK/XXX markers, and optionally ages them via git blame; it never executes scanned code and has no network calls. The only notable items are informational: the MCP tool accepts an arbitrary filesystem path and reads source files within it, which matches its purpose, and the scanner's own pattern definitions are self-matching by design. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

12 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-tododebt": {
      "args": [
        "-y",
        "@reneturcios/tododebt"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

tododebt

How much acknowledged debt is sitting in the codebase? tododebt inventories the markers — TODO, FIXME, HACK by default — across a set of source files and reports every occurrence with its file, 1-based line number, and line text, plus counts in total, by marker, and by file.

A marker counts only as a standalone token (the marker followed by a non-letter), so TODOS and METHOD never false-positive, while TODO:, FIXME(user), and // TODO all count. Only the first marker on a line is reported. Matching is case-sensitive.

The MCP tool takes file contents as input (no disk access); the CLI reads the files you name. Pure local computation: no network, no configuration.

CLI

npx @reneturcios/tododebt scan src/*.ts
npx @reneturcios/tododebt scan README.md src/index.ts --markers TODO,XXX
npx @reneturcios/tododebt --version

Exit codes: 0 on success (a non-empty inventory is a result, not an error), 1 on a runtime error (including an unreadable file), 2 on a usage error.

MCP server

npx -y @reneturcios/tododebt mcp

MCP client config:

{
  "mcpServers": {
    "tododebt": {
      "command": "npx",
      "args": ["-y", "@reneturcios/tododebt", "mcp"]
    }
  }
}

Tools

  • scan_todos — Inventory debt markers across supplied source files.
    • files (array, required) — the files to scan, as {path, content} pairs
    • markers (array of strings, optional) — markers to look for; default TODO, FIXME, HACK

Docker

docker run -i ghcr.io/cloudcorprecords/tododebt
docker run --rm -v "$PWD:/w" ghcr.io/cloudcorprecords/tododebt scan /w/src/index.ts

Development

npm install
npm run build   # tsc -> dist/
npm test        # tsx --test test/*.test.ts (pure local, no network)
npm run dev     # run the CLI from source

License

MIT — Copyright (c) 2026 Rene Turcios

Reviews

No reviews yet

Be the first to review this server!