Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Codacy (BYOK) — connector documentation

  • MCP endpoint: https://byok-codacy.connectorbay.com/mcp
  • REST API: POST https://byok-codacy.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-codacy.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Codacy account API token, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-codacy.connectorbay.com/health · Tool schemas: https://byok-codacy.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-codacy · agent@connectorbay.com

What Codacy (BYOK) is for

Codacy (BYOK) lets an AI assistant read your own Codacy data through the Codacy API with a key you supply (account API token). Read-only: 7 tools (get_user, list_user_organizations, list_repositories, get_repository_analysis, list_pull_requests, list_branches, list_security_items). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.codacy.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Codacy. Codacy and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which Codacy user is my token connected to?"
  • "Which Codacy organizations do I belong to?"
  • "Which of my Codacy repositories have the worst grade?"
  • "What is the Codacy grade and coverage of my repository?"
  • "Do my open pull requests pass the Codacy quality gate?"
  • "Which branches of my repository does Codacy analyze?"

What it does

  • get_user: Show the Codacy user the account API token belongs to: id, name, admin flag and creation date. Emails are not returned.
  • list_user_organizations: List the Codacy organizations the user belongs to with provider, type and creation date. Page with the cursor.
  • list_repositories: List an organization's repositories with Codacy grade, issue count, lines of code, complexity, duplication and coverage. Page with the cursor.
  • get_repository_analysis: Get one repository's Codacy analysis: grade, issues, lines of code, complexity, duplication, coverage and last analysed commit, for the default or a chosen branch.
  • list_pull_requests: List a repository's pull requests with Codacy results: whether they meet standards, new and fixed issues, complexity and coverage change. Page with the cursor.
  • list_branches: List a repository's branches known to Codacy with default and enabled flags and last commit. Page with the cursor.
  • list_security_items: List an organization's security and risk management findings with title, repository, priority, status, category, CVE and due date. Page with the cursor.

BYOK key

You bring your own Codacy account API token (https://docs.codacy.com/codacy-api/api-tokens/#account-api-tokens). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.codacy.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Codacy API (api.codacy.com) with a BYOK key; documentation: https://api.codacy.com/api/api-docs. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Codacy. Codacy and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Codacy account.

Built for: Worldwide. Languages: English.