Model Context Protocol moderate risk

React Analyzer

Analyzes React component files to extract information about components and their props, enabling documentation generation and code understanding.

Connections & Capabilities

Connects To

GitHub

Capabilities

read

Quickstart

Install

npm install

vim

Config

{
    "react-analyzer-mcp": {
      "command": "node",
      "args": [
        "/Users/azer/code/sandbox/react-analyzer-mcp/build/index.js"
      ]
    }
}

Exposed MCP Tools (3)

safe

analyze-react

Analyzes a single React component from source code and extracts its properties.

Read-only operation on a single file.

safe

analyze-project

Generates documentation for all React components within a specified project folder.

Primarily read operations; generates documentation based on code analysis.

safe

list-projects

Lists all projects located under the configured root folder.

Read-only operation; lists directories.

Safety Assessment

This tool is relatively safe for analyzing React codebases. However, ensure the `PROJECT_ROOT` is properly configured to prevent unauthorized file access. Be mindful of sensitive information potentially exposed in the generated documentation.

Primarily read operations on code files.
No direct execution of code.
Limited network exposure.
Focuses on static analysis.

Potential for path traversal if PROJECT_ROOT is not properly sanitized.
Information disclosure if sensitive data is present in code comments or props.
Dependency on external libraries (react-analyzer) which could introduce vulnerabilities.
Lack of built-in rate limiting or access controls.