
Codecov
io.github.egulateePublished by GitHub account egulateev1.1.0Updated Oct 24, 2026
MCP server for querying Codecov coverage data with configurable URL support
Overview
Lets an assistant read Codecov coverage data for GitHub repositories, including file, commit, repository, and pull request coverage.
- What you can do
- Provides tools to query Codecov coverage through the Codecov API v2: line-by-line coverage for a file, coverage for a commit, overall repository coverage, pull request coverage with file-level impact, and comparisons between two git references. It supports codecov.io and self-hosted Codecov instances via a configurable base URL. Currently only GitHub repositories are supported.
- When to use it
- Useful when reviewing pull requests and wanting to check coverage thresholds, see which files lack coverage, or compare coverage between branches, commits, or tags without leaving the assistant. Also useful for tracking coverage trends across development cycles.
- Requirements
- Runs locally over stdio, typically via npx with the npm package or a Docker image. Requires Node.js for the npm route, or Docker as an alternative. Needs a Codecov API token in CODECOV_TOKEN (not an upload token) and optionally CODECOV_BASE_URL for self-hosted instances, which must use https. Network access to the Codecov instance is required.
Installation
In SourceWeft
- Open Codecov in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
MCP Server for Codecov
[npm version] [npm downloads] [codecov] [Test and Coverage] [Security Policy] [License: MIT] [Node.js Version] [TypeScript] [MCP]
A Model Context Protocol (MCP) server that provides tools for querying Codecov coverage data. Supports both codecov.io and self-hosted Codecov instances with configurable URL endpoints.
📦 Published on npm: @egulatee/mcp-codecov 🐳 Docker image: ghcr.io/egulatee/mcp-server-codecov
📖 Learn More: Read about building this MCP server with AI in just 2 hours.
Quick Start (Claude Code)
Get started in under 2 minutes:
1. Get your Codecov API token
Create an API token (not an upload token) from your Codecov account:
- Go to codecov.io (or your self-hosted URL)
- Click your avatar → Settings → Access tab
- Click "Generate Token" and name it "MCP Server API Access"
- Copy the token value
2. Set your environment variable
Add to your shell profile (~/.zshrc or ~/.bashrc):
Then reload: source ~/.zshrc
3. Install the MCP server
4. Verify installation
Expected output: codecov: @egulatee/mcp-codecov - ✓ Connected
That's it! You can now use Codecov tools in Claude Code. See Available Tools below.
Features
- File-level coverage: Get detailed line-by-line coverage data for specific files
- Commit coverage: Retrieve coverage statistics for individual commits
- Repository coverage: Get overall coverage metrics for repositories
- Pull request coverage: Analyze coverage changes and impact for pull requests
- Coverage comparison: Compare coverage between branches, commits, or tags
- Configurable URL: Point to any Codecov instance (codecov.io or self-hosted)
- Token authentication: API token support for accessing coverage data
Token Types
Important: Codecov has two different types of tokens:
- Upload Token: Used for pushing coverage reports TO Codecov during CI/CD. Found on your repository's Settings → General page.
- API Token: Used for reading coverage data FROM Codecov via the API. Created in your Codecov Settings → Access tab.
This MCP server requires an API token, not an upload token.
Available Tools
get_file_coverage
Get line-by-line coverage data for a specific file.
Parameters:
owner(required): Repository owner (username or organization)repo(required): Repository namefile_path(required): Path to the file within the repository (e.g., 'src/index.ts')ref(optional): Git reference (branch, tag, or commit SHA)
Example:
get_commit_coverage
Get coverage data for a specific commit.
Parameters:
owner(required): Repository ownerrepo(required): Repository namecommit_sha(required): Commit SHA
Example:
get_repo_coverage
Get overall coverage statistics for a repository.
Parameters:
owner(required): Repository ownerrepo(required): Repository namebranch(optional): Branch name (defaults to repository's default branch)
Example:
get_pull_request_coverage
Get coverage data for a specific pull request, including coverage changes and file-level impact.
Parameters:
owner(required): Repository owner (username or organization)repo(required): Repository namepull_number(required): Pull request number
Example:
Use Cases:
- Check if PR meets coverage thresholds before approving
- Alert when PR decreases overall coverage
- Identify which files in a PR lack coverage
- Implement quality gates that block merges if coverage drops
compare_coverage
Compare coverage between two git references (branches, commits, or tags).
Parameters:
owner(required): Repository owner (username or organization)repo(required): Repository namebase(required): Base reference (e.g., 'main', commit SHA)head(required): Head reference to compare against base
Example:
Use Cases:
- Compare coverage between release branches
- Analyze coverage changes between any two commits
- Track coverage trends across development cycles
- Validate coverage improvements in feature branches
Repository Activation
Important Note: Before a repository can receive coverage uploads, it must be activated in Codecov. This is a one-time setup step that cannot be automated via API.
Manual Activation Process
To activate a repository for coverage tracking:
- Log in to your Codecov instance (e.g., codecov.io)
- Navigate to your organization/user account
- Find the repository you want to activate
- Click the "Activate" button to enable coverage tracking
- Once activated, you can upload coverage reports from your CI/CD pipeline
Why manual activation is required: The Codecov API v2 does not provide a /activate endpoint. Repository activation must be done through the web UI or happens automatically on first coverage upload (depending on your Codecov configuration).
Verification and Troubleshooting
Common Issues
1. 401 Unauthorized Error
- Check token type: Ensure you're using an API token (from Settings → Access), not an upload token
- Verify the token is valid and has access to the repository
- For self-hosted instances, confirm you're using the correct
CODECOV_BASE_URL
2. Environment Variable Not Expanding
- Make sure the variable is exported in your shell (check
~/.zshrcor~/.bashrc) - Restart Claude Code after setting environment variables
- Verify the variable exists:
echo $CODECOV_TOKEN
3. Connection Failed
- Restart Claude Code or Claude Desktop
- Verify environment variables are set correctly:
echo $CODECOV_TOKEN - Check the configuration:
claude mcp get codecov
4. HTTP vs HTTPS
Always use https:// for the CODECOV_BASE_URL, not http://:
- Correct:
https://your-codecov-instance.com - Incorrect:
http://your-codecov-instance.com
Advanced Configuration
Self-Hosted Codecov
For self-hosted Codecov instances, use your instance URL:
Claude Desktop Setup
Add to your Claude Desktop configuration file:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
Manual Configuration (Claude Code)
Add to ~/.claude.json:
Notes:
- Environment variable expansion is supported using
${VAR}syntax - Variables like
${CODECOV_TOKEN}will be read from your shell environment - The
-yflag for npx automatically accepts the package installation prompt
Docker (no Node.js required)
Pull and run the official multi-platform image from GitHub Container Registry:
Platforms: linux/amd64 and linux/arm64 (Apple Silicon, AWS Graviton)
Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):
With self-hosted Codecov:
Available tags: latest, 2, 2.1, 2.1.0 (full semver)
stdio bridge with socat:
The Docker image includes socat, which allows MCP clients that communicate over stdio to connect to the server running inside a container via a TCP socket:
Note:
socatmust also be installed on the host machine running the bridge command. Install withbrew install socat(macOS),apt install socat(Debian/Ubuntu), orapk add socat(Alpine).
Installing from npm Globally
Benefits:
- Simple one-command installation
- Automatic updates with
npm update -g @egulatee/mcp-codecov - No manual build steps required
- Works across all projects
Verify installation:
Development Installation (Source)
Only use this method if you're contributing to the project:
Then configure with the built path:
Claude Code CLI:
Manual (~/.claude.json):
Claude Desktop:
Testing
This project maintains 97%+ code coverage with comprehensive unit tests using Vitest.
For detailed testing documentation, including how to run tests, coverage requirements, CI integration, and writing tests, see TESTING.md.
Development
Release Process
This project uses an automated release workflow via GitHub Actions. Releases are published to npm automatically when you push a version tag.
For detailed release instructions, including prerequisites, creating releases, manual releases, and version numbering, see RELEASE.md.
API Compatibility
This server uses Codecov's API v2. The API endpoints follow this pattern:
- File coverage:
/api/v2/gh/{owner}/repos/{repo}/file_report/{file_path} - Commit coverage:
/api/v2/gh/{owner}/repos/{repo}/commits/{commit_sha} - Repository coverage:
/api/v2/gh/{owner}/repos/{repo} - Pull request coverage:
/api/v2/gh/{owner}/repos/{repo}/pulls/{pull_number} - Coverage comparison:
/api/v2/gh/{owner}/repos/{repo}/compare/{base}...{head}
Currently supports GitHub repositories (gh). Support for other providers (GitLab, Bitbucket) can be added by modifying the API paths.
Resources
- 📝 Building the Codecov MCP Server in 2 Hours - A detailed walkthrough of developing this server using AI-augmented development techniques
License
MIT
Source: README.md at commit e5049d1
Tools
0Version history
1- v1.1.0LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts