# zanadir (MCP server)

> zanadir is an MCP server that adds developer tools to AI assistants such as Claude Desktop, Claude Code and Cursor. Find what a repository's CI is missing, and which security checks cannot fail the build. It has 176 GitHub stars, is released under the MIT license and runs locally with docker run -i --rm -e GITHUB_TOKEN docker.io/mustachecase/zanadir:0.21.0.

zanadir reads a repository's CI configuration and reports which security and quality controls are missing, or wired so they cannot fail a build.

## Key facts

| Fact | Value |
|---|---|
| Repository | https://github.com/MustacheCase/zanadir |
| GitHub stars | 176 |
| License | MIT |
| Language | Go |
| Transport | stdio |
| Packages | docker: docker.io/mustachecase/zanadir:0.21.0 |
| Remote URL | none |
| Needs API key | no |
| Official | no |
| Works with | Claude Desktop, Claude Code, Cursor, VS Code |
| Category | Developer tools |
| Latest release | 0.22.0 (Oct 25, 2026) |
| Last commit | Oct 26, 2026 |
| MCP registry name | io.github.MustacheCase/zanadir |

## Install

### Claude Desktop (claude_desktop_config.json)

```json
{
  "mcpServers": {
    "zanadir": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "GITHUB_TOKEN",
        "docker.io/mustachecase/zanadir:0.21.0"
      ],
      "env": {
        "GITHUB_TOKEN": "your-value"
      }
    }
  }
}
```

Settings > Developer > Edit Config. macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\. Restart Claude Desktop afterwards.

### Claude Code

```sh
claude mcp add --env GITHUB_TOKEN=your-value --transport stdio zanadir -- docker run -i --rm -e GITHUB_TOKEN docker.io/mustachecase/zanadir:0.21.0
```

### Cursor (.cursor/mcp.json)

```json
{
  "mcpServers": {
    "zanadir": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "GITHUB_TOKEN",
        "docker.io/mustachecase/zanadir:0.21.0"
      ],
      "env": {
        "GITHUB_TOKEN": "your-value"
      }
    }
  }
}
```

Project file; use ~/.cursor/mcp.json to enable it in every project.

### VS Code (.vscode/mcp.json)

```json
{
  "inputs": [
    {
      "type": "promptString",
      "id": "github_token",
      "description": "GITHUB_TOKEN",
      "password": true
    }
  ],
  "servers": {
    "zanadir": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "GITHUB_TOKEN",
        "docker.io/mustachecase/zanadir:0.21.0"
      ],
      "env": {
        "GITHUB_TOKEN": "${input:github_token}"
      }
    }
  }
}
```

Config formats checked against the official docs on 2026-10-07.

## Environment variables

- `GITHUB_TOKEN` (secret): Optional: a token for reading GitHub repositories with the repo argument without hitting the anonymous rate limit

## Similar MCP servers

- [Rubber Duck](https://appsgit.com/mcp-servers/rubber-duck): Bridge to multiple LLMs and CLI agents: councils, debates, voting, and more. (180 stars, MIT, needs API key)
- [Whoop](https://appsgit.com/mcp-servers/whoop): MCP server for WHOOP health data — recovery, sleep, workouts, cycles, and trends. (174 stars, MIT, needs API key)
- [Godot MCP](https://appsgit.com/mcp-servers/godot-mcp): Agent-driven Godot playtesting: editor control, input injection, game-time stepping, live state. (180 stars, MIT)
- [Taskade MCP](https://appsgit.com/mcp-servers/taskade-mcp): Taskade projects, tasks and AI agents. Hosted OAuth server or local stdio package. (170 stars, MIT, official, needs API key)
- [Keyline Icons](https://appsgit.com/mcp-servers/keyline-icons): Search Keyline Icons by name and get any icon's SVG source or React import. (181 stars, MIT, official)
- [MCP Confluent](https://appsgit.com/mcp-servers/mcp-confluent): An open-source MCP server that enables AI assistants to interact with Confluent Cloud, Confluent Platform, and standalone Apache Kafka deployments through natural language. (168 stars, MIT, official)

---

Canonical page: https://appsgit.com/mcp-servers/zanadir
Source: appsgit (https://appsgit.com), the app store for github. Data from the GitHub API, refreshed daily.
Machine access: JSON API https://appsgit.com/api/v1/apps (OpenAPI: https://appsgit.com/openapi.json), MCP server https://mcp.appsgit.com/mcp, full index https://appsgit.com/llms-full.txt.