HefestoAI
Release truth engine for AI-generated code: checks AI-written code before merge with security rules, SARIF output, and a CI gate.
Visit narapallc.com →DocsPricingSource
HefestoAI is a CLI, pre-commit hook, GitHub Action, and MCP server that analyzes code changes — especially those produced by AI assistants — before they merge. It runs 22 format analyzers covering security antipatterns (hardcoded secrets, SQL injection, command injection, pickle usage), complexity checks, and drift checks between what a project declares (pyproject.toml, README, CHANGELOG, CI configs, action.yml, Dockerfile) and what it actually does. One run produces a terminal report, a SARIF 2.1.0 file for GitHub code scanning, and a CI gate that exits 1 on findings at the configured severity (--fail-on high). Output formats include text, JSON, HTML, and SARIF. Runs as an MCP server (JSON-RPC 2.0, streamable-http) at /api/mcp-protocol for Claude Code, Cursor, and other MCP clients, and is listed on the Official MCP Registry and Smithery. Open-source core under MIT; PRO and OMEGA tiers add API server, enrichment, scope gating, hefesto-swarm security pipeline, and IRIS. Requires Python 3.10+.
- Category
- Security
- Pricing
- freemium · from $0
- Free tier
- yes
- API
- yes
- MCP server
- yes
- SDK
- no
- Open source
- yes
Listed 2026-10-29 · last verified 2026-10-29 · extracted by @cf/zai-org/glm-5.3-flash · confidence 0.95
Your product? Claim this listing · Report a problem · Badge
API
curl https://toolgrep.com/api/products/hefestoai