# Synvoya/CodeInspectus

Source: https://glimind.com/server/glama%2Fsynvoya%2Fcodeinspectus
Registry id: `glama/synvoya/codeinspectus`
Status: unknown

## Tools (10)

- `codeinspectus_apply_cleanup`: Apply one explicitly approved exact plan with managed backups, atomic bounded edits/copy-only media cleanup, same-validator verification and a content-free audi
- `codeinspectus_compliance_report`: Per-framework code-level control coverage (not certification).
- `codeinspectus_explain_finding`: Deep explanation + full remediation for one finding.
- `codeinspectus_generate_sbom`: CycloneDX/SPDX SBOM using Trivy plus native Pub inventory/fallback (written to the managed dir by default, or an absolute .json path you choose; never replaces 
- `codeinspectus_list_rules`: Active detectors, native-pack inventory/rule ownership, engine versions, detection-DB + Trivy/Pub DB provenance and freshness, and structured machine setup/repa
- `codeinspectus_plan_cleanup`: Fresh read-only V3.3 plan for exact verified repository-trust artifact IDs, including preimage hashes, transformations, blockers and approval requirements.
- `codeinspectus_rescan`: Re-scan after fixes; diffs vs a prior scan → resolved / remaining / introduced, with fresh technology and pack coverage.
- `codeinspectus_rollback_cleanup`: Restore an applied cleanup only when current bytes still match the recorded post-clean state.
- `codeinspectus_scan`: Full local scan of a path (engines + AI checks). Returns CWE-keyed findings, detected technologies, exact native-pack and Pub dependency coverage, remediations,
- `codeinspectus_setup`: Offline setup plan, saved decline choices, or approval-gated verified downloads to ~/.codeinspectus; never writes to the target repository.

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.