CodeQL MCP Server

Example Use Cases

• 1

  Run CodeQL queries and retrieve structured results (including decoding .bqrs to JSON) as part of automated security analysis workflows.

• 2

  Locate predicate or class symbol positions within a codebase to support code navigation, suggestions, or automated patch reasoning.

• 3

  Integrate CodeQL query execution into conversational tools like Cursor, enabling natural-language-driven query runs and database registration.

Description

This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server, allowing tools like Cursor or AI agents to interact with CodeQL via structured commands and doc search. It supports registering CodeQL databases, running full queries or quick symbol evaluations, decoding .bqrs files to JSON, and locating predicate/class symbol positions. The server is intended for integration with agent workflows and tools that need programmatic access to CodeQL analysis results.