Back to Browse

Qualityclouds MCP Server

Developer ToolsLow Risk10.0MCP RegistryRemote
Free

Server data from the Official MCP Registry

Secure MCP runtime server for scanning and autofixing code issues

About

Secure MCP runtime server for scanning and autofixing code issues

Remote endpoints: streamable-http: https://mcp.qualityclouds.com/mcp sse: https://mcp.qualityclouds.com/mcp

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Imported from the Official MCP Registry.

Endpoint verified · Requires authentication · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Found in Source Code

Found by scanning the linked source code. This listing connects to a hosted endpoint, so none of this runs on your machine: it describes what the server software does where it is hosted.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Connect

Remote Plugin

No local installation needed. Your AI client connects to the remote endpoint directly.

Add this to your MCP configuration to connect:

{
  "mcpServers": {
    "com-qualityclouds-mcp-server-qualityclouds": {
      "url": "https://mcp.qualityclouds.com/mcp"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Quality Clouds

The code governance layer for enterprise platforms and AI-generated code, in any Git repository. This repository is the index of everything Quality Clouds publishes on GitHub.

Docs Website

What we do

Quality Clouds turns an organization's governance, security, and quality standards into machine-readable rules, then applies those rules where code is written and before it reaches production. Human-written code and AI-generated code go through the same rules.

We have been doing this since 2017 on enterprise SaaS platforms, where a bad change is expensive and hard to reverse. That rule library and the scan data behind it are what the products run on.

Two product lines, two different problems.

Norma by Quality Clouds reviews any Git repository the way a senior engineer would, in two layers. Findings are an AI review that asks the same architecture, database, and performance questions on every repository, such as whether the database has the indexes it needs or whether the app keeps a client-server split. Checks are rule-based and deterministic, the same verdict every time, and every check leaves an audit record. Norma runs inside the agent loop through the Norma MCP server (Claude Code, Cursor, Lovable, Replit, and any MCP client), on every pull request through the Norma GitHub App, and in VS Code. Stacks covered include JavaScript, TypeScript, Python, PHP, and Dart and Flutter. The repository's Production-Ready Score is a diagnostic and never blocks anything. Permanent free tier.

Quality Clouds for ServiceNow, Salesforce, Microsoft Dynamics 365, and Adobe governs the platform itself: Full Scan for a complete instance audit, Livecheck for real-time validation in the editor, and Quality Gates in CI to stop non-compliant changes.

Start here

If you areStart withSign up
Building in a Git repository, with or without an AI editornorma-mcpnorma.qualityclouds.com
Running ServiceNow, Salesforce, Dynamics 365, or Adobeaction-full-scan and platform-mcpid.qualityclouds.com/sign-up
Curious how AI-generated code actually scoresstate-of-ai-code-2026No account needed

Everything we publish

Install and run

RepositoryWhat it isPlatform
norma-mcpRemote MCP server for Norma at https://api.qualityclouds.ai/mcp. Governance rules in the model's context at generation time, and a record of what was checked, fixed, and prevented.Any stack
Norma GitHub AppReviews every pull request and posts the result as a review comment. Asks for one permission: read and write on pull requests. Comments only; it has no access to repository contents.Any stack
Norma for VS CodeLivecheck on the active file, results in the Problems panel, and a "Fix with AI" action that hands a prompt to your editor's AI chat. Also on Open VSX for Cursor and VSCodium.Any stack
action-full-scanGitHub Action that runs a Quality Clouds scan on every pull request, with inline results.Salesforce, ServiceNow
platform-mcpMCP server for ServiceNow and Salesforce: instance and scan visibility, real-time component validation, and rule lookups.ServiceNow, Salesforce
Skill-production-ready-checkFree Agent Skill that scores a codebase 0 to 100 for production readiness. No account, no network calls, read-only.Any stack

Data and research

RepositoryWhat it is
state-of-ai-code-2026Open dataset from scanning AI-generated public projects built with Lovable, Bolt, v0, and AI-assisted GitHub repositories. Methodology, ruleset, and charts included. CC-BY-4.0.

Community and examples

RepositoryWhat it is
communityAnnouncements, feature requests, bug reports, questions, and roadmap. This is the only place we run discussions.
Norma-byQualityClouds-demo-repoSample application we scan in Norma demos. Deliberately imperfect. Not a starter template.
ai-summit-barcelona-2026Materials for "When code is cheap, governance is the hard part", Workshop 2 of the AI Foundations track at AI Summit Barcelona 2026.
.githubSecurity policy, code of conduct, contributing guide, and issue templates for the organization.

Support

About Quality Clouds

Quality Clouds is a UK-headquartered company with offices in Barcelona and New York, governing enterprise platforms since 2017. ISO 27001:2022 certified and SOC 2 Type II attested.

Website · LinkedIn · X · YouTube

Reviews

No reviews yet

Be the first to review this server!