Back to Browse

Tvijocode MCP Server

Developer ToolsLow Risk10.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

Pre-merge diff review and cloud assistance with explicit Tvijo spending limits.

About

Pre-merge diff review and cloud assistance with explicit Tvijo spending limits.

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (2 strong, 3 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry.

9 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

file_system

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Optional Tvijo access token; otherwise use device sign-in.Required

Environment variable: TVIJO_TOKEN

Per-request spending cap in USD (default 1, hard ceiling 5).Optional

Environment variable: TVIJO_MAX_USD_CAP

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "com-tvijo-dshrem": {
      "env": {
        "TVIJO_TOKEN": "your-tvijo-token-here",
        "TVIJO_MAX_USD_CAP": "your-tvijo-max-usd-cap-here"
      },
      "args": [
        "-y",
        "tvijo-dshrem-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Tvijo Code

Tvijo Code is a code editor built from the open-source VS Code sources (Code - OSS), with the Tvijo DSHREM extension built in.

A paid Tvijo account with sufficient balance or credits is required for paid MCP tasks. The MIT-licensed tvijo-dshrem-mcp client is free to install, but tvijo_ask and tvijo_review spend real money from your Tvijo balance or credits, up to the explicit per-call max_usd. Read-only tools require a signed-in Tvijo account and are free.

It is built by this repository's GitHub Actions from the official microsoft/vscode tag, using the VSCodium build scripts:

  • Microsoft telemetry is removed at build time (VSCodium patches).
  • Extensions come from Open VSX, not the Microsoft Marketplace.
  • Auto-update is off; new versions are published on the Releases page.
  • The Tvijo DSHREM extension is embedded as a built-in at a pinned version and SHA-256 (tvijo/extensions.lock.json).

This repository also hosts the Tvijo DSHREM MCP server in mcp/ (npm i -g tvijo-dshrem-mcp, registry name com.tvijo/dshrem) — see Tvijo DSHREM MCP server below.

Tvijo DSHREM MCP server

The server in mcp/ is published to npm as tvijo-dshrem-mcp (MIT, Node.js 20+, stdio transport) and to the open MCP Registry as com.tvijo/dshrem. This repository is its single source; the npm package is built from this directory, not from a second copy.

It lets an MCP client — VS Code, Claude Code, Codex, Cursor or any other stdio client — run a bounded Tvijo task, review a pre-merge diff, and read account and task state without leaving the chat. Every paid call carries an explicit spending limit.

Capabilities

ToolKindWhat it does
tvijo_askpaid, cappedAsk Tvijo DSHREM; spends at most an explicit max_usd.
tvijo_reviewpaid, cappedReview a supplied unified diff for evidenced findings; no repository access.
tvijo_accountread-onlyAccount, balance and limits.
tvijo_task_statusread-onlyStatus and spending of an existing task.
tvijo_cancel_taskdestructiveCancel a task; money already spent may still be charged.
tvijo_wiki_search, tvijo_wiki_contextfree readSearch and read the public Tvijo wiki, with page revisions.
tvijo_catalog_search, tvijo_catalog_getfree readPublic connector research catalog, with projection hashes.
tvijo_login_start, tvijo_login_pollauthOAuth device sign-in; no token is returned to the model.
tvijo_local_repositories, tvijo_local_test_results, tvijo_local_execution_budgetopt-in, read-onlyBounded local evidence snapshots; the budget snapshot is evidence, never permission to spend.

Full tool schemas, per-client setup and failure behaviour: mcp/README.md.

Setup

Requires Node.js 20 or newer and a Tvijo account.

npx -y tvijo-dshrem-mcp login   # OAuth device flow; token stored 0700/0600
npx -y tvijo-dshrem-mcp         # starts the stdio server

VS Code — add to .vscode/mcp.json and start the server from MCP: List Servers:

{
  "servers": {
    "tvijo": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "tvijo-dshrem-mcp"],
      "env": { "TVIJO_MAX_USD_CAP": "1" }
    }
  }
}

Claude Code: claude mcp add tvijo -- npx -y tvijo-dshrem-mcp. Codex, Cursor, terminal clients and the native Windows variants are documented in mcp/README.md.

Configuration

VariableMeaning
TVIJO_TOKENOptional access token; overrides the saved device-login token.
TVIJO_MAX_USD_CAPPer-call spending cap in USD; default 1, hard ceiling 5.
TVIJO_API_BASEOptional API base; default https://dsh.tvijo.com/api/dshrem/v1.

Spending safety

  • Every paid call needs an explicit max_usd; a request above the effective cap is rejected before any network call.
  • TVIJO_MAX_USD_CAP defaults to 1 USD per call, with an absolute ceiling of 5 USD.
  • Paid requests are never retried automatically. After a timeout the server only performs read-only lookups by idempotency key or task id, and spent_usd: null means unknown, never zero.
  • The device-flow token is stored with 0600 permissions, is never returned by a tool and is redacted from output. Provider API credentials stay on the Tvijo service.

Ownership and support

Publisher and namespace operator: Tvijo, an independently operated project maintained by Nik Bibamon (@nikbibamon). The MCP Registry record publishes this server as com.tvijo/dshrem under the DNS-verified tvijo.com namespace.

Download

Preview 1.140.07215 embeds Tvijo DSHREM 0.10.25. It includes a portable Windows x64 ZIP and per-user EXE installer, macOS ZIPs for Apple silicon and Intel, and a Linux x64 desktop TAR. Each published file has a SHA-256 and an individual native smoke receipt; the Windows EXE was also installed and uninstalled in Windows CI.

The macOS builds use ad-hoc signatures and are not verified as notarized. Windows publisher signing trust, interactive sign-in and paid-model tasks were not verified. Linux DEB/RPM installers and the standalone CLI are not included in this preview. Previous releases remain available.

Русский: предварительный выпуск 1.140.07215 содержит Windows ZIP и EXE, macOS для Apple silicon и Intel и Linux x64 TAR со встроенным Tvijo DSHREM 0.10.25. Для каждого файла опубликованы SHA-256 и отчёт нативной проверки. Нотаризация macOS и доверие к подписи издателя Windows не подтверждены; вход и задачи с платными моделями не проверялись. Пакетные установщики Linux и отдельный CLI в этот выпуск не входят.

When it does NOT work

  • You rely on Microsoft-only extensions (Remote - SSH, Live Share, the Microsoft C# and Python language servers, Copilot). Their licenses allow them only in Microsoft builds; they are not on Open VSX.
  • You need signed installers for managed or corporate machines. Wait for signed builds.
  • You need auto-update. Install new versions from Releases by hand for now.

How the build is organised

Everything Tvijo-specific lives in tvijo/; upstream VSCodium files are left as they are except one hook line in prepare_vscode.sh:

FilePurpose
tvijo/product.jsonName, application id, installer GUIDs, URLs (merged over VSCodium's)
tvijo/brand.shApplies the branding inside the vscode/ tree during prepare_vscode.sh
tvijo/make_icons.pyRegenerates every icon and installer image from one glyph (Pillow)
tvijo/embed_extensions.shDownloads pinned extensions, checks SHA-256, embeds them as built-ins
tvijo/smoke_windows.shCI check of the portable zip: name, gallery, update off, extension, --version

Updating to a new VS Code version = merge the matching VSCodium tag, keep the hook line, run the workflows.

License

MIT, see LICENSE. Tvijo Code is based on VSCodium (MIT) and Code - OSS (MIT). "Visual Studio Code" and "VS Code" are trademarks of Microsoft; this project is not affiliated with or endorsed by Microsoft or the VSCodium project.

Reviews

No reviews yet

Be the first to review this server!