Code Pattern Risk Scanner

io.github.lazymac2xPublished by GitHub account lazymac2xv1.0.0Updated Oct 25, 2026

Cloudflare Workers MCP server: code-pattern-risk-scanner

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

A remote MCP server that scans JavaScript and TypeScript code for security and performance patterns, scores risk, and suggests refactors.

What you can do
Scan JS/TS code for 26 security and performance patterns, with a security-focused check returning vulnerable, at-risk or secure status. Detect antipatterns, optionally filtered by severity. Calculate a 0-100 risk score with a severity breakdown. Get prioritized step-by-step refactoring suggestions.
When to use it
Useful when reviewing or auditing JavaScript and TypeScript code and you want an assistant to flag risky patterns, quantify risk, and propose refactoring steps without setting up local tooling.
Requirements
A remote streamable HTTP endpoint at api.lazy-mac.com; no packages, environment variables, headers or authentication are declared. Network access is required, and the code you submit is sent to that third-party service.
Before you install
Code you submit is sent to an external service, so avoid sending proprietary or secret-bearing source. Results are heuristic pattern matches and scores, not a substitute for a full security review. No authentication is declared, so do not assume submissions are private.

Installation

In SourceWeft

  1. Open Code Pattern Risk Scanner in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.lazymac2x%2Fcode-pattern-risk-scanner/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "code-pattern-risk-scanner": {
      "type": "http",
      "url": "https://api.lazy-mac.com/code-pattern-risk-scanner/mcp"
    }
  }
}

README

This repository has no README.

Tools

5

scan_patterns

Scan JS/TS code for 26 security and performance patterns

Parameterscoderequiredlanguage

detect_antipatterns

Detect antipatterns with optional severity filter

Parameterscoderequiredlanguageseverity

risk_score

Calculate 0-100 risk score with severity breakdown

Parameterscoderequiredlanguage

suggest_refactor

Get prioritized step-by-step refactoring suggestions

Parameterscoderequiredlanguage

security_check

Security-focused scan returning vulnerable | at-risk | secure status

Parameterscoderequiredlanguage

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.