jCodeMunch
Score = points from our five tests (install, handshake, maintenance, docs, license). Not a quality or security rating. Methodology
- Install20/20
- Handshake30/30
- Maintenance25/25
- Docs15/15
- License3/10
Tested PyPI jcodemunch-mcp 1.108.434 (repo jgravelle/jcodemunch-mcp, 2,841 GitHub stars when checked). License: the PyPI metadata names a custom dual-use license (free for non-commercial use, paid license for commercial use), not an OSI license. Stdio, 6 tools in the default tier; most of its 91 actions run through the `order` tool. Real calls on a small local test folder: order index_folder (builds a local index, needs allow_state_change), then search_symbols and search_text found the planted function and string. menu (action catalog) is a self-check and does not count.
Tool-call test (2026-11-11, direct MCP stdio client, no LLM): pass. 3 of 3 function calls passed (index, symbol search, text search) on a local test folder. Evidence: local test run, Nov 11, 2026.
Transport (tested 2026-11-11): stdio
Token cost (estimate): approx. 913 tokens, cl100k estimate (6 tools, measured 2026-11-11, version 1.108.434). This is an estimate from our testing of the tool names, descriptions and input schemas, counted with cl100k_base.
Permissions: 2 read, 4 write (state-changing), 0 unclassified · Auth: none · Rate limit: unknown · Pricing unit: unknown
Auth: none. Rate limit: unknown. Pricing unit: unknown.
announce_model— write (state-changing)jcodemunch_guide— readmenu— readorder— write (state-changing)route— write (state-changing)set_tool_tier— write (state-changing)
handshake and tools listed without a recorded key or OAuth
Score 93/100 · Tools 6 · Token cost approx. 913 tokens · Compare · Last tested 2026-11-11 · Version tested 1.108.434 · Package jcodemunch-mcp · Repo jgravelle/jcodemunch-mcp
Summary: jCodeMunch completed an MCP handshake without credentials and exposed 6 tools.
Evidence summary
- Handshake
- pass
- Tools listed
- 6
- Context cost
- approx. 913 tokens, cl100k estimate (6 tools, measured 2026-11-11, version 1.108.434; an estimate) ranking · add up your servers' context cost
- API key
- No key needed for the tools we called
- Tested
- 2026-11-11
Test results
| Test | Result | Points | Evidence |
|---|---|---|---|
| install | pass | 20 | uv pip install jcodemunch-mcp (Python venv, Linux) succeeded in 1s. |
| handshake | pass | 30 | MCP initialize + tools/list over stdio succeeded with no credentials; 6 tools listed in 1.6s. |
| maintenance | pass | 25 | Repo pushed 0 days before test; 2,841 GitHub stars. |
| docs | pass | 15 | README over 3,000 chars; install instructions present; mcpServers config example present. Check of the package's own README (PyPI long_description (package README)). |
| license | partial | 3 | License not machine-detected as OSI (LicenseRef-jCodeMunch-Dual-Use-1). |
Local-model readiness
Token cost (estimate): approx. 913 tokens, cl100k estimate for 6 tools · about 11% of an 8k context. This is an estimate from our testing (counted with cl100k_base).
Small-model friendly (schema heuristic, not a model result): unknown.
Not tested
Small-model task runs: Not yet tested.
What we tested and what we didn't
Tested on 2026-11-11
- Install from the registry
- We connected with no credentials and asked for its tool list: it listed 6 tools (Method details: MCP
initializethentools/list) - Maintenance signals (last push, archived/deprecated status)
- Docs (README length, install and config example)
- License (OSI-approved or not)
- Token cost (estimate)
Not tested
- Security: not audited (no code review, no permission or data-flow analysis)
- Real tasks (no functional task runs yet)
- Behaviour with real credentials or a real account
- Performance, rate limits or load
- Correctness of results beyond the listed tasks
Methodology: how we test. A high score means it installs and responds, not that giving it access to your data carries no risk.
Known security issues
Checked on 2026-11-11 for version 1.108.434 against OSV, GitHub advisories, GitHub repository advisories. Scope: the package itself; dependencies not scanned.
No published advisories found in OSV and GitHub advisories whose affected range includes jcodemunch-mcp 1.108.434 as of 2026-11-11. This is not a security audit.
Other advisories we checked (3)
- Tested version 1.108.434 is not in the affected range of GHSA-xxx4-frv5-chp2.
- Tested version 1.108.434 is not in the affected range of GHSA-876x-crhg-hp8h.
- Tested version 1.108.434 is not in the affected range of GHSA-whmf-f8j7-c3fv.
Monthly roundup: MCP security issues, October 2026.
Tool list changes
Baseline recorded from the 2026-11-11 test run; changes appear after the next test.
Snapshot hash (fingerprint of the tool list)
5fc3311fba25: SHA-256 of the canonical tool names, descriptions and input schemas. If it changes, the tool list changed.
Raw test record (JSON)
{
"name": "jcodemunch-mcp",
"version": "1.108.434",
"registry": "pypi",
"status": "working",
"tested": "2026-11-11",
"tools_count": 6,
"deprecated": false,
"archived": false,
"tests": {
"install": [
"pass",
20,
"`uv pip install jcodemunch-mcp` (Python venv, Linux) succeeded in 1s."
],
"handshake": [
"pass",
30,
"MCP `initialize` + `tools/list` over stdio succeeded with no credentials; 6 tools listed in 1.6s."
],
"maintenance": [
"pass",
25,
"Repo pushed 0 days before test; 2,841 GitHub stars."
],
"docs": [
"pass",
15,
"README over 3,000 chars; install instructions present; `mcpServers` config example present. Check of the package's own README (PyPI long_description (package README))."
],
"license": [
"partial",
3,
"License not machine-detected as OSI (LicenseRef-jCodeMunch-Dual-Use-1)."
]
}
}Install
uvx jcodemunch-mcp
Pin the version we tested
uvx jcodemunch-mcp==1.108.434
pip install jcodemunch-mcp==1.108.434
tested 2026-11-11. Newer versions may differ and were not tested by us.
{
"mcpServers": {
"jcodemunch": {
"command": "uvx",
"args": [
"jcodemunch-mcp==1.108.434"
]
}
}
}Tools listed
announce_model, jcodemunch_guide, menu, order, route, set_tool_tier
Tool history: captured Nov 11, 2026. All tool history.
Quick config
{
"mcpServers": {
"jcodemunch": {
"command": "uvx",
"args": [
"jcodemunch-mcp"
]
}
}
}Add to config Opens the config generator with this server selected.
Setup
- Install. Run
uv pip install jcodemunch-mcp(Python venv). This is the exact command we ran on 2026-11-11. - Configure. Add the mcpServers entry below to your MCP client config.
- Verify. Restart the client and check that tools/list returns tools (6 in our test).
{
"mcpServers": {
"jcodemunch": {
"command": "uvx",
"args": [
"jcodemunch-mcp"
]
}
}
}Test history
- 2026-11-11: New
Related: Best dev MCP servers
FAQ
Is jCodeMunch deprecated?
No. jcodemunch-mcp was not deprecated or archived when we last tested it on 2026-11-11.
What replaces jCodeMunch?
Nothing; jCodeMunch is not deprecated as of 2026-11-11.
Does jCodeMunch need an API key?
No. It completed an MCP handshake with no credentials and listed 6 tools.
Embed the badge
Every tested server gets a free embeddable badge. It shows the current score and test date and expires after 90 days. Testing is free; payment never changes a score.