Dvalincode MCP server

Read from the package source without running it. The installed server may list more.

• delete_filewrite action

  Delete a file inside the workspace. Used internally by undo for file removal.

• dvalin_begin_verification

  Scan a workspace and persist a compact local verification workflow. Call this only after dvalin_scan reports a finding

• dvalin_get_evidence

  Render the Markdown audit evidence for a DvalinCode run (defaults to the latest run).

• dvalin_get_finding

  Read one compact finding from a persisted security workflow by fingerprint.

• dvalin_get_session

  Get a durable DvalinCode session summary and its latest audit anchor.

• dvalin_list_scanners

  List built-in and optional scanner engines, availability, and reviewable install commands.

• dvalin_run_taskwrite action

  Run a complete governed coding task inside DvalinCode. Long calls are expected; callers should use a generous timeout.

• dvalin_scan

  Scan a workspace for injection, hardcoded secrets, XSS, dynamic code execution, and unsafe shell use.

• dvalin_verify_findings

  Re-scan a persisted workflow and independently verify that the blocked targets are gone and no new severe findings were introduced.

• dvalin_verify_fix

  Re-derive a Verified Fix Record offline. Recomputes the record hash and re-checks that its verdict follows from its own evidence,

• edit_file

  Replace exact text in a file. Reports a diff of the change.

• git_diff

  Show the current git diff, optionally scoped to one workspace file. Use before reviewing or summarizing changes.

• git_status

  Show the current git branch, last 5 commits, and changed files. Use this to understand the git state before making changes.

• list_files

  List files in the current workspace using a glob pattern.

• list_remediation_cases

  List local remediation cases for the current workspace.

• list_skills

  List installed DvalinCode skills and the tools they recommend.

• memory_deletewrite action

  Delete a stale or incorrect local memory entry by id.

• memory_import

  Import memory from Claude Code, Hermes, or a Markdown file/directory into DvalinCode local memory. Use dryRun first to preview candidates.

• memory_search

  Search local user/project memory for preferences, project facts, decisions, workflows, and lessons.

• memory_updatewrite action

  Update an existing local memory entry by id. Use to correct stale or imprecise memories.

• memory_writewrite action

  Store a curated local memory entry. Use for durable preferences, project facts, decisions, workflows, or lessons worth carrying into future sessions.

• prepare_remediation_worktreewrite action

  Create an isolated git worktree for a remediation case and update the case status.

• project_scripts

  List known project scripts and checks from package.json, Makefile, and common Python project files.

• read_file

  Read a UTF-8 text file from inside the workspace.

• read_skill

  Read an installed DvalinCode skill, including its SKILL.md instructions.

• run_checkwrite action

  Run a project check such as test, typecheck, build, or lint with structured output. Prefer this over shell for standard validation.

• run_security_scanwrite action

  Run DvalinCode local security scan on the current workspace and optionally persist findings as remediation cases.

• run_security_suitewrite action

  Run the Dvalin white-box security suite (built-in rules plus installed Semgrep, Trivy, and OSV-Scanner) and persist remediation cases.

• search_text

  Search text files in the workspace and return matching lines.

• shellwrite action

  Run a command in the workspace using the native host shell (cmd.exe on Windows, /bin/sh on Linux and macOS). Git pull/push/fetch/clone and GitHub CLI (gh) operations automatically request outbound network access.

• write_filewrite action

  Write content to a file inside the workspace. Reports a diff if the file already exists.

• Code scan281 source files scanned20/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 2 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Dvalincode: common questions

Is Dvalincode MCP server safe?

Yes, by our scan: it is graded A (85/100). Read the Dvalincode safety report

How do I install Dvalincode?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does Dvalincode need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Dvalincode maintained?

The last commit was 2 days ago (2026-09-18). The latest release is v0.19.0.

What can I use instead of Dvalincode?

Servers from other publishers that do the same job: SkillTotal MCP server, Ausca MCP server and HOL Guard MCP server. Compare all Dvalincode alternatives.