MCP Server

Developer intelligence, on demand.

Coverage analysis, test generation, security audits, and refactoring suggestions — all accessible as MCP tools from your AI coding assistant.

Get started Read the Handbook

Install

pip install dev-brain

Run

dev-brain

Audit

await client.call_tool("security_audit", {...})

What it does

9 tools that turn raw code into actionable developer insights.

Security Audits

OWASP-style scanning detects SQL injection, command injection, hardcoded secrets, path traversal, and insecure crypto — with CWE references.

Smart Test Generation

AST-based pytest generation with proper mocks, fixtures, and imports that actually compile and run.

Coverage Analysis

Compare observed behavior patterns against test coverage to surface the gaps that matter most.

Refactoring Suggestions

Spot complexity hotspots, duplicated logic, and naming inconsistencies across your codebase.

UX Insights

Extract UX signals — dropoff points, error clusters, and behavior anomalies — from usage patterns.

Documentation Gaps

Find missing docstrings and generate templated documentation stubs for undocumented code.

Usage

Install

pip install dev-brain

Claude Desktop config

{
  "mcpServers": {
    "dev-brain": {
      "command": "dev-brain"
    }
  }
}

Security audit

result = await client.call_tool("security_audit", {
    "symbols": [{
        "name": "execute_query",
        "file_path": "db.py",
        "line": 10,
        "source_code": "cursor.execute(f\"SELECT ...\")"
    }],
    "severity_threshold": "medium"
})

Generate tests

result = await client.call_tool(
    "smart_tests_generate",
    { "file_path": "/path/to/module.py" }
)
# Returns complete pytest file

Security Patterns Detected

Vulnerability classes the security auditor catches out of the box.

All Tools

The complete brain-dev toolkit.

Tool