HefestoAI

Release truth engine for AI-generated code. Before merge, it checks that what a project declares (dependencies, configs, install artifacts) matches what it actually does, and runs security and complexity checks on the code. Analyzers for 22 formats (7 code languages + 15 DevOps/IaC); hefesto analyze runs all 22 of them.

Skills

• Analyze code
  MCP tool analyze: runs the open-source hefesto-ai engine (hefesto analyze --no-config, free tier) on the files you send and returns findings with rule id, severity, file, line, message and SARIF fingerprint. Limits: 20 files, 100 KB per file, 256 KB in total, 20 seconds, 10 requests per minute per IP. Nothing is stored. For a whole repository, run hefesto analyze . locally.
  code-analysissecuritysarifciai-generated-code
• Install
  MCP tool install: returns the install commands for the open-source package (pip install hefesto-ai, Python 3.10+). Installs nothing.
  installpip
• Pricing
  MCP tool pricing: returns current prices (Free $0, PRO: $8/month, OMEGA: $19/month). Static text.
  pricing
• Compare tools
  MCP tool compare: returns a short static comparison with sonarqube, snyk, github-advanced-security, semgrep or claude-code-security. No live lookup; no code is inspected.
  comparison

How to call

https://hefestoai.narapallc.com/api/mcp-protocol

Listed in

Directories this entry was found in.