Ext Ops Panel
Open dashboard

What it can do: com.knitli/codeweaver

MCP server · knitli.com

What com.knitli/codeweaver declares, asks for and runs, according to the marketplaces we read. Runs on your machine: the AI tool starts this PyPI package locally: code-weaver. Environment variables it asks for: 57, secrets among them: 14. As of our marketplace pass on 2026-10-12.

This is not a security audit. We list what the marketplaces publish about this plugin: what it declares, what it asks for and what it runs. We do not run or inspect its code, and a verified mark is the marketplace's statement, not ours.

Where it runs

  • Runs on your machine: the AI tool starts this PyPI package locally: code-weaverAs declared on: Official MCP Registry.

What it declares

None of the marketplaces we read publishes a list of tools for it.

Prompts and resources: the marketplaces we read do not publish them.

What it asks for

Environment variables it asks for: 57, secrets among them: 14. As declared on: Official MCP Registry.

  • AI_GATEWAY_API_KEY secret
  • AWS_ACCOUNT_ID
  • AWS_REGION
  • AWS_SECRET_ACCESS_KEY secret
  • AZURE_COHERE_API_KEY secret
  • AZURE_COHERE_ENDPOINT
  • AZURE_COHERE_REGION
  • AZURE_OPENAI_API_KEY secret
  • AZURE_OPENAI_ENDPOINT
  • AZURE_OPENAI_REGION
  • CODEWEAVER_CONFIG_FILE
  • CODEWEAVER_DEBUG
Show the remaining 45
  • CODEWEAVER_EMBEDDING_API_KEY secret
  • CODEWEAVER_EMBEDDING_MODEL
  • CODEWEAVER_EMBEDDING_PROVIDER
  • CODEWEAVER_HOST
  • CODEWEAVER_LOG_LEVEL
  • CODEWEAVER_MCP_PORT
  • CODEWEAVER_PORT
  • CODEWEAVER_PROFILE
  • CODEWEAVER_PROJECT_NAME
  • CODEWEAVER_PROJECT_PATH
  • CODEWEAVER_RERANKING_API_KEY secret
  • CODEWEAVER_RERANKING_MODEL
  • CODEWEAVER_RERANKING_PROVIDER
  • CODEWEAVER_SPARSE_EMBEDDING_MODEL
  • CODEWEAVER_SPARSE_EMBEDDING_PROVIDER
  • CODEWEAVER_VECTOR_STORE_API_KEY secret
  • CODEWEAVER_VECTOR_STORE_PORT
  • CODEWEAVER_VECTOR_STORE_PROVIDER
  • CODEWEAVER_VECTOR_STORE_URL
  • CODEWEAVER__TELEMETRY__DISABLE_TELEMETRY
  • CODEWEAVER__TELEMETRY__TOOLS_OVER_PRIVACY
  • COHERE_API_KEY
  • CO_API_URL
  • DEEPSEEK_API_KEY secret
  • GEMINI_API_KEY
  • GOOGLE_API_KEY
  • HF_HUB_VERBOSITY
  • HF_TOKEN
  • HTTPS_PROXY
  • INFERENCE_KEY secret
  • INFERENCE_URL
  • MISTRAL_API_KEY
  • OPENAI_API_KEY secret
  • OPENAI_LOG
  • QDRANT__LOG_LEVEL
  • QDRANT__SERVICE__API_KEY secret
  • QDRANT__SERVICE__ENABLE_TLS
  • QDRANT__SERVICE__HOST
  • QDRANT__SERVICE__HTTP_PORT
  • QDRANT__TLS__CERT
  • SSL_CERT_FILE
  • TAVILY_API_KEY
  • TOGETHER_API_KEY secret
  • VERCEL_OIDC_TOKEN secret
  • VOYAGE_API_KEY secret

Names only: we keep no values, examples or descriptions of these variables. OAuth scopes and install-time settings are not published by the marketplaces we read.

What it runs besides MCP

None of the marketplaces we read lists hooks, commands, agents or language servers for it.

Who answers for it

knitli.com

  • No marketplace we read marks it or its publisher as verified.
  • No marketplace we read states its license.

How it has changed

Its tools, settings, hooks and composition have not changed since we started watching it.

In context

  • Median number of secrets an MCP server asks for on the marketplaces we read: 0.0. This one asks for: 14.
  • Share of MCP servers that run on a remote server: 63%.

Where it is published and how its figures have moved

Compare it side by side with similar plugins

Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.

Where the data comes from: how the catalog is built