Back to Browse

Code Refactor MCP Server

Developer ToolsModerate7.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Refactor legacy code into modern, idiomatic code without changing its behavior.

About

Refactor legacy code into modern, idiomatic code without changing its behavior.

Remote endpoints: streamable-http: https://code-refactor-api.app.workbuddy.host/mcp

Security Report

7.2
Moderate7.2Low Risk

This is a code refactoring MCP server that uses environment-based configuration, has no hardcoded secrets in the reviewed files, and keeps its network access limited to the Ollama or OpenAI-compatible endpoints it is designed to call. The main point for users is that with the openai backend, the code they submit is sent to a third-party cloud provider, which is documented and opt-in. Part of the codebase (the truncated refactor_core.py and xpack-server) was not fully reviewed, so the assessment covers the reviewed files only. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

5 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

What You'll Need

Set these up before or after installing:

Inference backend: 'ollama' (local, code stays on your machine, default) or 'openai' (any OpenAI-compatible cloud endpoint, e.g. DeepSeek).Optional

Environment variable: REFACTOR_BACKEND

Base URL of the OpenAI-compatible endpoint, e.g. https://api.deepseek.com/v1. Required when REFACTOR_BACKEND=openai.Optional

Environment variable: OPENAI_BASE_URL

API key for the cloud endpoint, e.g. a DeepSeek key. Only needed when REFACTOR_BACKEND=openai.Required

Environment variable: OPENAI_API_KEY

Cloud model name, e.g. deepseek-chat.Optional

Environment variable: OPENAI_MODEL

Ollama server address used when REFACTOR_BACKEND=ollama.Optional

Environment variable: OLLAMA_HOST

Ollama model name used when REFACTOR_BACKEND=ollama.Optional

Environment variable: OLLAMA_MODEL

Per-call timeout in milliseconds. Raise it for slow local CPU inference.Optional

Environment variable: REFACTOR_TIMEOUT_MS

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!