narsil-mcp

Name: narsil-mcp Review
Item: narsil-mcp
Rating: 3.2
Author: Aaron Matthews

Connector Security Usable

Works inClaude Code Claude Cowork Claude Chat

Usable Scanned — metadata only

Provides deep code analysis across 32 languages with integrated security scanning and call-graph generation, reducing manual code review overhead and surfaci…

Rust MCP server for comprehensive code intelligence - 90 tools, 32 languages, security scanning, call graphs, and more

Scan codebase for security vulnerabilities across 32 programming languages automatically
Generate call graphs to understand function dependencies and data flow in large systems
Find hardcoded secrets, weak cryptography, and compliance violations in source code

179 starsApache-2.0 (commercial OK)FreeNo code needed

Usable rating — This tool is functional but has notable gaps. Review the evaluation notes below before deploying.

Why it matters

Provides deep code analysis across 32 languages with integrated security scanning and call-graph generation, reducing manual code review overhead and surfacing exploitable patterns early in the development cycle.

Best for

Security teams and engineering leads auditing large polyglot codebases for vulnerabilities and architectural dependencies.

Works in

Claude Code Claude Cowork Claude Chat

Source

https://github.com/postrv/narsil-mcp

By postrv

How to Get It

Option 1: Claude Desktop AppOpen the Customize panel in the sidebar → browse connectors → search and add. Works in Claude Code, Claude Cowork, and Claude Chat.

Option 2: Paste into Claude CodeCopy the command below and paste it into a Claude Code conversation. Claude will run it for you.

Command

claude mcp add narsil-mcp -- npx -y narsil-mcp

Tip: Paste this into a Claude Code conversation. Verify command matches your Claude Code version.

Auto-generated from the tool's public listing — not hands-on verified. Cross-check against the source repo's README before running.

First thing to try

Once it’s connected, paste this into Claude:

Help me scan codebase for security vulnerabilities across 32 programming languages automatically

CostFree

Trust Signals Auto-scanned

Stars179Contributors4Last updated2026-05-12LicenseApache-2.0 (OK for commercial use)Known CVEsNone foundSources: GitHub Advisory Database + OSV.dev · Scanned 2026-08-11 · scanner vattempted-no-data

Data & Access

Data processingPrompts sent to Anthropic API. Enterprise/Team plans exclude training.

Community Pulse Emerging

Discussed on Hacker News, Reddit

Introducing Narsil MCP: The Blazing-Fast, Reforged Code Intelligence Server for — Reddit · 68 pts
Narsil-MCP: a Rust-powered MCP server with 76 tools for deep code intelligence — Hacker News · 3 pts
Introducing Narsil MCP: The Super-Fast, Reforged Code Intelligence Server for AI — Reddit · 3 pts

3 mentions across 2 sources

Reviewer notes

Auto-scanned review. These are observations, not a security certification.

catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 179 GitHub stars; 4 contributors; last commit 98d ago; license Apache-2.0.

Things to check

Scanned, not hands-on tested — this entry was auto-scanned from public metadata (GitHub metrics, license, security flags). No reviewer has run it, and no tool-specific limitations have been documented yet.

How to evaluate tools before deploying →

Data shown here comes from public APIs and automated scanning. Reviewer notes reflect one person's experience. This is not a security certification or legal recommendation. Always evaluate tools according to your own organization's policies.

Evaluation Scores

Evaluation

Ease of Use

3/5

Versatility

3/5

Reliability

4/5

Security

3/5

Overall score3.25 / 5.00 UsableEvaluatedAug 2026

catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 179 GitHub stars; 4 contributors; last commit 98d ago; license Apache-2.0.

← Back to the Claude Observatory