Ask your agent in plain language. Each of these maps to a real tool on the server.
get_repository_analysis
Retrieve detailed code analysis results for a specific repository including quality grade, issues, complexity, duplication, coverage, and analysis progress. Provides a comprehensive quality overview of the repository.
search_sbom_dependencies
Search software bill of materials (SBOM) dependencies across your organization. Find specific dependencies (e.g. "log4j"), filter by vulnerability severity, and identify which repositories use a given dependency.
configure_analysis_tool
Enable, disable, or configure a static analysis tool for a repository. Can toggle the tool on/off and set whether it should use a configuration file from the repository. Use the "List Repository Tools" tool first to find tool UUIDs.
list_repositories
List repositories in the configured organization with their analysis information including quality grade, issue counts, coverage, complexity, and duplication metrics. Can filter by name and supports pagination.
search_security_items
Search and filter security findings (SRM items) across your organization. Includes SAST issues, secrets detection, dependency vulnerabilities, IaC scanning, DAST findings, and more. Filter by priority, status, scan type, repository, and category.
get_pull_request_analysis
Retrieve detailed analysis results for a specific pull request, including quality gate status, new/fixed issues, coverage metrics, and affected files. Optionally includes the list of issues found in the PR.
list_coding_standards
List coding standards configured for the organization. Coding standards define which tools and patterns are used for analysis, ensuring consistent code quality across repositories. Shows drafts and effective standards.
list_pull_requests
List pull requests for a repository with their analysis status. Returns PR title, status, quality gate results, and issue counts. Useful for monitoring PR quality across a repository.
search_issues
Search and filter code quality issues in a repository. Filter by severity level (Error, Warning, Info), category (Security, CodeStyle, ErrorProne, etc.), language, branch, pattern, and author. Returns issue details including file path, line number, message, tool, and severity.
add_repository
Add a repository to Codacy for code analysis. Requires admin permissions on the repository in the Git provider. Specify the provider and the full repository path (e.g. "organization/repo-name").
manage_repository_token
Create, list, or delete repository API tokens. Repository tokens provide scoped access to a single repository and are commonly used for uploading coverage data via the Codacy Coverage Reporter.
get_commit_analysis
Retrieve analysis results for a specific commit, including quality metrics, issues introduced, and coverage data. Can also list recent commits with their analysis status for a repository.
list_organizations
List all Codacy organizations the authenticated user belongs to. Returns organization names, providers, and membership details. Useful for discovering available organizations before performing repository-level operations.
list_files
List files in a repository with their code quality metrics including grade, number of issues, complexity, coverage, and duplication. Useful for identifying problematic files in a codebase.
list_people
List people associated with the configured Codacy organization, including members and contributors. Supports filtering by name/email and pagination. Returns the provider details for each person.
manage_dast_target
Create, list, delete, or trigger scans on DAST (Dynamic Application Security Testing) targets. DAST targets can be web applications or APIs (REST with OpenAPI spec or GraphQL). Use this to manage security scanning of your web applications and APIs.
list_repository_tools
List the static analysis tools configured for a repository, including their enabled/disabled status. Shows which analysis tools (e.g. ESLint, PMD, Pylint) are active and whether they use configuration files from the repository.
list_tool_patterns
Discover configured code patterns for a repository analysis tool, including pattern IDs, definitions, enabled state, parameters, and coding standards. Call list_repository_tools to discover tool UUIDs.
get_security_item
Retrieve a security finding with its full remediation, advisory, dependency, ownership, and ignored-state details. Call search_security_items to discover item IDs.
set_security_item_ignored
Ignore or restore a security finding. Returns the updated finding from Codacy. Call search_security_items to discover item IDs.
get_quality_settings
Read a repository’s quality thresholds for issue percentage, duplication, complexity, and coverage. Call list_repositories to discover repository names.
get_current_user
Get the Codacy account authenticated by the API token, including its ID, email, name, and active status.
list_branches
Discover repository branches and their enabled/default state. Use an enabled branch name with file, commit, issue, or repository analysis tools.
Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.
{"mcpServers": {"metorial": {"url": "<your-magic-mcp-url>"}}}
claude mcp add --transport http metorial <your-magic-mcp-url>
codex mcp add metorial --url <your-magic-mcp-url>codex mcp login metorial
One governed layer for every app your agents reach, not a separate connector per tool.
Manage repositories, issues, and pull requests. Create and configure branches, star repositories, review code, and merge changes. Automate CI/CD workflows with GitHub Actions, manage workflow runs, secrets, and artifacts. Track issues with labels, milestones, and assignees. Search across code, repositories, issues, and users. Manage organizations, teams, and memberships. Create and manage projects, gists, packages, deployments, and environments. Access security alerts including code scanning, secret scanning, and Dependabot alerts. Read and write file contents in repositories. Manage webhooks, notifications, and codespaces.
Manage CRM data including Accounts, Contacts, Leads, Opportunities, Cases, and custom objects. Create, read, update, and delete records. Query data using SOQL and search across objects using SOSL. Perform bulk data operations for large-scale imports, exports, and migrations. Execute composite requests to batch multiple operations in a single API call. Access analytics, reports, and dashboards. Manage files and attachments associated with records. Interact with Chatter feeds, posts, and groups for social collaboration. Manage org metadata including custom objects, fields, layouts, and workflows. Query data using GraphQL for precise data retrieval across related objects.
Manage SharePoint sites, document libraries, lists, and files. Create, read, update, and delete lists and list items with custom columns. Resolve site users to numeric Person/Group LookupId values. Upload, download, move, copy, and version files in document libraries. Search across sites, files, folders, lists, and list items using Microsoft Search. Manage permissions at site, list, and item levels with granular access control. Define and manage content types and site columns. Retrieve site properties and search for sites across Microsoft 365.
Create, read, update, and delete records in Airtable bases and tables. Manage base schemas including creating tables and fields. Filter records using formulas, sort by fields, and scope queries to specific views. Upsert records to find, create, or update in a single call. Upload attachments to records, read and write record comments, list accessible bases, and receive real-time base change events through webhooks.
Track, manage, and resolve application errors and performance issues. List, query, and bulk-update issues and error events with filters like status, assignment, and tags. Create and manage releases, associate commits, and upload source maps. Configure issue alert rules and metric alert rules with notification actions. Set up cron monitors to detect missed or failed scheduled jobs. Build custom dashboards with configurable widgets. Run ad-hoc Discover queries across errors and transactions for performance analysis. Manage organizations, teams, projects, and members. Provision users via SCIM. Access session replay data.
Manage Git repositories, pull requests, and CI/CD pipelines on Bitbucket Cloud. Create, fork, and configure repositories within workspaces and projects. Create, review, approve, merge, and decline pull requests with inline code comments. Browse source code, list commits, and manage branches and tags. Trigger, monitor, and manage Bitbucket Pipelines. List workspace members, configure repository default reviewers and branch restrictions, create and manage repository webhooks, and search code across repositories.
Review repository, commit, pull request, and file analysis. Search code quality issues, security findings, and SBOM dependencies. Inspect coverage, quality thresholds, analysis tools, and code patterns. Discover organizations, members, coding standards, and branches. Manage security finding ignore states, DAST targets and scans, and repository API tokens.
Common questions about connecting Codacy to AI agents with Metorial.
