Skip to content
appsgit

zanadir

zanadir is an MCP server that adds developer tools to AI assistants such as Claude Desktop, Claude Code and Cursor. Find what a repository's CI is missing, and which security checks cannot fail the build. It has 176 GitHub stars, is released under the MIT license and runs locally with docker run -i --rm -e GITHUB_TOKEN docker.io/mustachecase/zanadir:0.21.0.

github.com/MustacheCase/zanadir (opens in a new tab)

Data as of from the GitHub API and the official MCP registry; description from the project's repository. Report an error

View on GitHub (opens in a new tab)Website (opens in a new tab)

Install zanadir

Generated from the server's MCP registry entry. Replace your-value with your own values.

Claude Desktop

claude_desktop_config.json
{
  "mcpServers": {
    "zanadir": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "GITHUB_TOKEN",
        "docker.io/mustachecase/zanadir:0.21.0"
      ],
      "env": {
        "GITHUB_TOKEN": "your-value"
      }
    }
  }
}

Settings > Developer > Edit Config. macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\. Restart Claude Desktop afterwards.

Claude Code

claude mcp add --env GITHUB_TOKEN=your-value --transport stdio zanadir -- docker run -i --rm -e GITHUB_TOKEN docker.io/mustachecase/zanadir:0.21.0

Cursor

.cursor/mcp.json
{
  "mcpServers": {
    "zanadir": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "GITHUB_TOKEN",
        "docker.io/mustachecase/zanadir:0.21.0"
      ],
      "env": {
        "GITHUB_TOKEN": "your-value"
      }
    }
  }
}

Project file; use ~/.cursor/mcp.json to enable it in every project.

VS Code

.vscode/mcp.json
{
  "inputs": [
    {
      "type": "promptString",
      "id": "github_token",
      "description": "GITHUB_TOKEN",
      "password": true
    }
  ],
  "servers": {
    "zanadir": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "GITHUB_TOKEN",
        "docker.io/mustachecase/zanadir:0.21.0"
      ],
      "env": {
        "GITHUB_TOKEN": "${input:github_token}"
      }
    }
  }
}

Config formats checked against the official docs on Oct 7, 2026: modelcontextprotocol.io (opens in a new tab), code.claude.com (opens in a new tab), cursor.com (opens in a new tab), code.visualstudio.com (opens in a new tab).

Environment variables

Variables the server reads at startup.

NameRequiredDescription
GITHUB_TOKENsecretNoOptional: a token for reading GitHub repositories with the repo argument without hitting the anonymous rate limit

About zanadir

zanadir reads a repository's CI configuration and reports which security and quality controls are missing, or wired so they cannot fail a build.

  • ci-cd
  • cli
  • code-quality
  • devops
  • devsecops
  • github-actions
  • golang
  • pipeline-security
  • sarif
  • sast

Similar MCP servers

More developer tools MCP servers

All Developer tools

FAQ

zanadir FAQ

Still curious? Email info@appsgit.com.

How do I install the zanadir MCP server?

Add the command docker run -i --rm -e GITHUB_TOKEN docker.io/mustachecase/zanadir:0.21.0 to your MCP client: put it in claude_desktop_config.json for Claude Desktop, run claude mcp add for Claude Code, or add it to .cursor/mcp.json (Cursor) or .vscode/mcp.json (VS Code). The snippets on this page are ready to paste.

Is zanadir free?

The server is open source under the MIT license, so running it is free. It does not declare any required API key.

Is zanadir actively maintained?

The most recent commit was on Oct 26, 2026. The latest release is 0.22.0, published Oct 25, 2026. appsgit only lists MCP servers with a commit in the last six months.