
maven-tools-mcp
io.github.arvindand/maven-tools-mcp
JVM dependency intelligence for AI assistants via Maven Central
Documentation
Maven Tools MCP Server
Dependency intelligence infrastructure for AI assistants and agents working with JVM projects.
π― Why This Exists
The Developer Problem
Traditional upgrade workflow:
- Google "Spring Boot 2.7 to 3.2 migration guide" (5 minutes)
- Read 50-page migration docs, cross-reference breaking changes (15 minutes)
- Check Maven Central for compatible dependency versions (5 minutes)
- Update pom.xml, compile, fix breaking changes (30 minutes)
- Debug mysterious runtime errors from incompatible transitive dependencies (2 hours)
Total: ~3 hours, high error rate, production risks
The Solution
AI-powered workflow:
- Ask your AI assistant: "Should I upgrade Spring Boot from 2.7.18 to 3.2.1? What will break?"
- Get instant analysis + migration plan:
- Latest stable: 3.2.1 available
- Breaking changes:
javax.*βjakarta.*, Hibernate 5β6, Security API changes - Compatible dependency versions provided
- Step-by-step migration plan with code fixes
- Documentation links for each breaking change
Total: 30 seconds for complete plan, ~30 minutes for AI-assisted implementation vs 3+ hours manual
The AI Agent Opportunity
Traditional dependency bots (Renovate, Dependabot) can update version numbers but can't fix the code when APIs break.
AI agents with Maven Tools MCP can:
- Detect outdated dependencies
- Understand breaking changes (via documentation lookup)
- Update both version numbers AND fix code changes
- Run tests and debug failures
- Create PRs with complete, working upgrades
This is infrastructure for the next generation of automated dependency management.
β‘ See It In Action
Interactive Development (Primary Use Case)

Developer β GitHub Copilot Chat (VS Code): "Check all latest versions of the dependencies in my pom.xml"
Copilot (via MCP): Instantly analyzes all dependencies and provides:
- Current version vs latest available
- Stability classification (stable/RC/beta/etc.)
- Update recommendations (major/minor/patch)
- Security and compatibility insights
- Complete upgrade guidance
Time: Seconds vs minutes of manual checking Confidence: High (real-time data from Maven Central)
AI Agent Automation (Emerging Use Case)
Developer β Aider/Claude Code: "Upgrade my Spring Boot project from 2.7 to 3.2"
AI Agent workflow:
- Scans pom.xml with Maven Tools MCP
- Identifies Spring Boot 2.7.18 β 3.2.1 available
- Fetches documentation (via Context7) for breaking changes
- Updates pom.xml versions
- Fixes code:
javax.*βjakarta.*, deprecated APIs, config changes - Runs tests, debugs failures
- Creates PR with working upgrade
Traditional bots stop at step 4. AI agents complete the job.
π¬ Real-World Examples
Starting a New Feature
Ask: "I'm building a REST API for IoT data ingestion. I need high-throughput JSON parsing, time-series data structures, and async HTTP client. What libraries should I use with Spring Boot 3.2?"
Get:
- Jackson 2.17.0 for JSON (included in Spring Boot)
- Chronicles Wire 2.25.x for time-series
- Spring WebClient (reactive, built-in)
- Complete dependency blocks with reasoning
Result: Production-ready stack in 30 seconds vs hours of research
Choosing Between Alternatives
Ask: "Should I use Redis or Caffeine for caching ~10k req/min in Spring Boot?"
Get: Comparative analysis:
- Caffeine recommended for your throughput
- In-memory, sub-millisecond latency
- Latest version: 3.1.8
- Use Redis only if multi-instance with shared state
- Complete reasoning + dependency blocks for both options
Result: Architectural decision made with confidence, not guesswork
Reviewing Upgrade PRs
Ask: "This Renovate PR upgrades Spring Boot 2.7.18 β 3.2.1. What will break?"
Get: Breaking change analysis:
javax.*βjakarta.*namespace migration- Hibernate 5.6 β 6.4 (query syntax changes)
- Spring Security config API changes
- Compatible dependency versions provided
Result: Know before merging, not after production breaks
Security Response
Ask: "Check these dependencies for CVEs and show me safe upgrade paths: org.springframework:spring-core:5.3.20, com.fasterxml.jackson.core:jackson-databind:2.13.3"
Get:
- Spring Core 5.3.20: CVE-2023-20861 (RCE) - Upgrade to 5.3.30+
- Jackson 2.13.3: CVE-2022-42003 (DoS) - Upgrade to 2.13.5+
- Latest compatible versions with Spring Boot provided
Result: Immediate vulnerability awareness with clear remediation path
Bulk Project Analysis
Ask: "Analyze my project's dependency health" (paste pom.xml)
Get: Health report:
- 3 dependencies with CVEs (critical: 1, high: 2)
- 5 dependencies >2 years old (maintenance concern)
- 2 GPL dependencies (license risk)
- Recommended upgrades with stability classification
Result: Complete project health snapshot in <2 seconds
π Quick Setup
Claude Desktop
Prerequisites: Docker installed and running
Step 1: Locate your Claude Desktop configuration file
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%\Claude\claude_desktop_config.json - Linux:
~/.config/Claude/claude_desktop_config.json
Step 2: Add this configuration:
{
"mcpServers": {
"maven-tools": {
"command": "docker",
"args": [
"run", "-i", "--rm",
"arvindand/maven-tools-mcp:latest"
]
}
}
}
Step 3: Restart Claude Desktop
Note: The Docker image supports both AMD64 (Intel/AMD) and ARM64 (Apple Silicon) architectures.
Troubleshooting: If your network blocks https://mcp.context7.com, use: arvindand/maven-tools-mcp:latest-noc7
VS Code + GitHub Copilot
Workspace config - Create .vscode/mcp.json:
{
"servers": {
"maven-tools": {
"type": "stdio",
"command": "docker",
"args": ["run", "-i", "--rm", "arvindand/maven-tools-mcp:latest"]
}
}
}
Usage: Open Chat view (Ctrl+Alt+I), enable Agent mode, use Tools button to enable Maven tools.
Native Binary (No Docker)
For JVM environments or Docker-restricted systems, build the JAR locally:
# Clone and build
git clone https://github.com/arvindand/maven-tools-mcp.git
cd maven-tools-mcp
./mvnw clean package -DskipTests
# Configure Claude Desktop
{
"mcpServers": {
"maven-tools": {
"command": "java",
"args": ["-jar", "/absolute/path/to/target/maven-tools-mcp-2.0.0.jar"]
}
}
}
See Build from Source for detailed build options.
π― When To Use This
β Perfect For
Interactive Development:
- Starting new projects (get complete dependency stack recommendations)
- Adding features (instant library recommendations while coding)
- Technology decisions (expert comparison between alternatives)
- Upgrade planning (understand breaking changes before starting)
- Security audits (CVE detection before adoption)
- License compliance (avoid GPL surprises)
AI Agent Automation:
- Automated dependency upgrades with code fixes (Aider, Claude Code)
- Intelligent dependency selection in code generation
- Breaking change analysis and remediation
- Security vulnerability remediation workflows
Enterprise Use Cases:
- Bulk dependency analysis across projects
- Security compliance reporting
- License audit automation
- Dependency health monitoring
β Not For
- Non-JVM projects (currently Maven Central only)
- Private repositories (Maven Central only)
- Simple version lookups if you just need maven.org search (overkill)
π§ Supported Build Tools
Working with any build tool that uses Maven Central Repository:
| Build Tool | Dependency Format | Example Usage |
|---|---|---|
| Maven | groupId:artifactId:version | org.springframework:spring-core:6.2.8 |
| Gradle | implementation("group:artifact:version") | Uses same Maven coordinates |
| SBT | libraryDependencies += "group" % "artifact" % "version" | Same groupId:artifactId format |
| Mill | ivy"group:artifact:version" | Same Maven Central lookup |
All tools use standard Maven coordinates - just provide groupId:artifactId and we handle the rest.
π Available Tools (10 Tools)
Core Maven Intelligence Tools (8 tools)
| Tool | Purpose | Key Features |
|---|---|---|
get_latest_version | Get newest version by type with stability preferences | stabilityFilter parameter (ALL/STABLE_ONLY/PREFER_STABLE) |
check_version_exists | Verify if specific version exists with type info | Version type classification |
check_multiple_dependencies | Bulk lookup (NO versions in input) | stabilityFilter parameter, bulk operations |
compare_dependency_versions | Bulk upgrade check (versions REQUIRED) | includeSecurityScan (OSV.dev), Context7 guidance |
analyze_dependency_age | Classify dependencies as fresh/current/aging/stale | maxAgeInDays threshold, Context7 guidance |
analyze_release_patterns | Analyze maintenance activity and predict releases | monthsToAnalyze parameter, velocity trends |
get_version_timeline | Enhanced version timeline with temporal analysis | versionCount parameter, release gap detection |
analyze_project_health | Bulk project health audit (PREFERRED for full audits) | includeSecurityScan (OSV.dev), includeLicenseScan |
Raw Context7 Documentation Tools (2 tools - Enabled by Default)
| Tool | Purpose | Key Features |
|---|---|---|
resolve-library-id | Search for library documentation | Requires query and libraryName parameters |
query-docs | Get library documentation by ID | Uses libraryId and query parameters |
Tool Parameters
Stability Filter (v2.0.0+):
stabilityFilter- Unified stability filtering with enum values:ALL- Include all version types (default for most operations)STABLE_ONLY- Filter to production-ready versions onlyPREFER_STABLE- Prioritize stable versions, include others too (default for get_latest_version)
Analytical Parameters:
maxAgeInDays- Set acceptable age threshold for dependenciesmonthsToAnalyze- Specify analysis period for release patterns (default: 24)versionCount- Number of recent versions to analyze in timeline (default: 20)
Security & License Parameters:
includeSecurityScan- Include OSV.dev vulnerability scanning (default: true)includeLicenseScan- Include license detection/analysis (default: true)
Context7 Integration:
Context7 integration is enabled by default (context7.enabled=true). Maven tools automatically include explicit orchestration instructions in response models when upgrades or modernization are needed. Additionally, the server acts as an MCP client to expose raw Context7 tools (resolve-library-id, query-docs) directly to your AI assistant. When disabled, responses contain only core dependency analysis without orchestration instructions or Context7 tools.
Detailed Tool Documentation
For complete parameter documentation and examples for each tool, see the current README sections 201-406.
π‘ Key Capabilities
π Intelligence, Not Just Lookup
Stability Classification:
- Automatically classifies versions:
stable/rc/beta/alpha/milestone/snapshot - Configurable filtering: show only stable, prefer stable, or show all
- Production-safe defaults
Comparative Analysis:
- Compare current vs latest versions
- Understand upgrade impact (major/minor/patch)
- Breaking change awareness via documentation integration
Temporal Analysis:
- Age classification: fresh (<6mo), current (<1yr), aging (<2yr), stale (>2yr)
- Release velocity trends (accelerating/stable/declining)
- Maintenance health indicators
π Security & Compliance
CVE Vulnerability Scanning:
- Powered by OSV.dev (Google's Open Source Vulnerabilities database)
- Scans against known CVEs in Java ecosystem
- Severity ratings and remediation guidance
- Bulk scanning for entire projects
License Compliance:
- Automatic license detection
- GPL/LGPL identification (legal risk flagging)
- License compatibility analysis
- Enterprise compliance reporting
β‘ Performance
Production-Ready Speed:
- Single dependency: <100ms (cached)
- Bulk 20+ dependencies: <500ms
- Native image startup: <50ms
- Zero warm-up time (Spring AOT + GraalVM)
Intelligent Caching:
- Maven metadata cached with smart invalidation
- Context7 results cached
- Reduces Maven Central load
- Sub-second responses for repeated queries
π€ AI-Optimized Responses
Structured for AI Consumption:
- Clean JSON responses (no HTML parsing needed)
- Explicit orchestration instructions (guides AI tool usage)
- Rich metadata (downloads, licenses, CVEs, age, stability)
- Comparative analysis built-in
Guided Delegation Pattern:
Maven Tools MCP provides explicit instructions:
"If you need Hibernate documentation, use Context7:
1. Call resolve-library-id with 'hibernate'
2. Use returned ID to call query-docs
3. If Context7 unavailable, fall back to web_search"
Result: AI assistants orchestrate tools effectively
π Why This Is Different
vs Manual Googling / StackOverflow
| Aspect | Manual Search | Maven Tools MCP |
|---|---|---|
| Time for single dependency | 3-10 minutes | 10 seconds |
| Data freshness | Varies (often outdated) | Always current (direct from Maven Central) |
| Compatibility verification | Manual cross-checking | Automatic for your framework version |
| Security awareness | Manual CVE lookup | Built-in OSV.dev scanning |
| License compliance | Manual license reading | Automatic detection + risk flagging |
| Context switching | Leave IDE β Browser | Stay in AI assistant |
vs IDE Dependency Search
| Capability | IDE Search | Maven Tools MCP |
|---|---|---|
| Find dependency | β Basic search | β Intelligent search |
| Version recommendations | β Show all versions | β Recommend best version with reasoning |
| Comparative analysis | β | β Compare alternatives (Redis vs Caffeine) |
| Breaking change awareness | β | β Via documentation integration |
| Security scanning | β οΈ Limited | β Full CVE scanning |
| Bulk operations | β | β Analyze 20+ deps in <500ms |
| AI-friendly | β GUI only | β Structured API for AI |
vs Dependency Management Bots
Traditional bots (Renovate, Dependabot):
Automated PR Creation:
- β Scan existing pom.xml for outdated dependencies
- β Update version numbers
- β Create PR
- β Fix broken code
- β Interactive during development
- β Technology selection advice
- β Comparative analysis
Use case: Automated maintenance of existing dependencies
AI Agents + Maven Tools MCP:
Intelligent Automation:
- β Scan dependencies
- β Update versions
- β Fix breaking code changes (javaxβjakarta, deprecated APIs)
- β Debug test failures
- β Interactive during development
- β Technology recommendations
- β Comparative analysis
Use case: Complete automation + developer assistance
They're different categories:
- Dependency bots = Automation (no human in loop after setup)
- Maven Tools MCP = Intelligence infrastructure (enables human + AI decisions)
Can coexist. Or AI agents may replace bots for complex upgrades. Both valid strategies.
β¨ Advanced Examples
Dependency Age Analysis
Usage: "How old is my Spring Boot dependency and should I update it?"
Tool: analyze_dependency_age
{
"dependency": "org.springframework.boot:spring-boot-starter",
"age_classification": "current",
"days_since_release": 45,
"recommendation": "Actively maintained - consider updating if needed"
}
Release Pattern Analysis
Usage: "What's the maintenance pattern for Jackson? When might the next release be?"
Tool: analyze_release_patterns
{
"dependency": "com.fasterxml.jackson.core:jackson-core",
"maintenance_level": "active",
"release_velocity": 1.2,
"next_release_prediction": "Expected in 3 weeks"
}
Project Health Check
Usage: "Give me a health assessment for all my key dependencies"
Tool: analyze_project_health
{
"overall_health": "good",
"average_health_score": 78,
"age_distribution": {"fresh": 2, "current": 8, "aging": 3, "stale": 1}
}
Version Timeline Intelligence
Usage: "Show me the recent release timeline for JUnit with gap analysis"
Tool: get_version_timeline
{
"insights": ["High release frequency indicates active development"],
"recent_activity": {"activity_level": "active", "releases_last_quarter": 4}
}
π§ Custom Commands & Prompts
This project includes pre-built commands and prompts for common dependency management tasks.
Claude Code Slash Commands
Located in .claude/commands/, these commands work with Claude Code CLI:
| Command | Description |
|---|---|
/deps-check | Quick version lookup for dependencies |
/deps-health | Full health audit with security + license analysis |
/deps-upgrade | Upgrade recommendations with breaking change warnings |
/deps-age | Freshness and maintenance activity analysis |
Usage Examples:
# Check versions for specific dependencies
/deps-check org.springframework:spring-core,com.google.guava:guava
# Full health audit of your project
/deps-health
# Get upgrade plan for current dependencies
/deps-upgrade org.springframework:spring-core:6.0.0,junit:junit:4.13.2
GitHub Copilot Prompts
Located in .github/prompts/, these work with GitHub Copilot Chat:
| Prompt | Description |
|---|---|
dependency-audit.md | Comprehensive dependency audit with health scoring |
security-scan.md | CVE vulnerability scanning with remediation plan |
upgrade-plan.md | Phased upgrade plan with breaking change analysis |
Usage: Reference these prompts in Copilot Chat or use them as templates for your own dependency management workflows.
π€ Frequently Asked Questions
General
Q: What problem does this solve? A: Eliminates the time-consuming, error-prone process of manually researching dependencies. Provides instant, expert recommendations through your AI assistant so you stay in flow instead of context-switching to Google/Maven Central/documentation sites.
Q: Who should use this? A: Java/Kotlin/Scala developers using AI assistants (Claude, Copilot, Cursor) for development. Especially valuable when starting projects, adding features, making technology decisions, or working with AI agents for automation.
Q: Does this replace my IDE's dependency management? A: No. Your IDE still manages the actual dependencies in your project. This provides intelligent recommendations and analysis through conversational AI interfaces. Think of it as an expert consultant, not a replacement for your build tool.
Technical
Q: How is the data so current? A: Direct integration with Maven Central Repository. We fetch maven-metadata.xml files directly from repo.maven.apache.org in real-time. No database, no stale data. Cached intelligently to reduce load.
Q: Does it work with private Maven repositories? A: Currently Maven Central only. Private repository support is on the roadmap. For internal libraries, you can still use web search as fallback.
Q: What about Gradle/SBT/other build tools? A: Works with all JVM build tools because they all use Maven Central as the canonical repository. The tool speaks Maven coordinates (groupId:artifactId), which are universal across JVM build systems.
Q: How accurate is the CVE scanning? A: Powered by OSV.dev (Google's Open Source Vulnerabilities database), which aggregates CVE data from NVD, GitHub Security Advisories, and other sources. High accuracy, but always verify critical findings through official channels.
Q: Can I self-host this? A: Yes. Docker image available, or run the JAR/native binary directly. No external dependencies except Maven Central and optional OSV.dev/Context7. See deployment docs for details.
AI Agents & Automation
Q: Can this replace Renovate/Dependabot? A: Different use cases. Traditional bots excel at automated PR creation for routine updates. AI agents with Maven Tools MCP excel at complex upgrades requiring code changes. Both valid approaches. Some teams may prefer AI agents for everything, others use both. Your choice.
Q: What AI agents work with this? A: Any MCP-compatible agent: Aider, Claude Code (via Claude Desktop), Cursor, or custom agents using the MCP protocol. Integration requires MCP support.
Q: How do AI agents use this for automated upgrades? A: Agents use the tools to scan dependencies, check versions, understand breaking changes (via Context7), then update both version numbers and code. Example: javaxβjakarta migration during Spring Boot 2β3 upgrade. The agent fixes both.
Usage & Workflow
Q: Do I need to use this for every dependency lookup? A: No. Use it when you need intelligent recommendations or bulk analysis. For trivial lookups (you already know exactly what you want), just add the dependency directly. This is for decision-making scenarios.
Q: How much time does this actually save? A: Conservative estimate: 5-10 minutes per dependency decision (research, compatibility check, security verification). Heavy users report saving hours per week. The real win is staying in flow vs context-switching.
Q: Does it work offline? A: No. Requires internet access to Maven Central. Cached results work offline for previously-queried dependencies, but first query requires network access.
Q: What's the Context7 integration about? A: Context7 provides up-to-date library documentation and code examples. Maven Tools MCP includes guided orchestration - it tells your AI assistant when and how to use Context7 for documentation needs. Falls back to web search if Context7 is unavailable.
π’ Enterprise Considerations
Security
- β No credentials required - read-only access to public Maven Central
- β TLS for all connections - encrypted communication
- β No data persistence - stateless, no storage of queries or results
- β CVE scanning - proactive vulnerability detection
- β License compliance - automated legal risk flagging
Performance & Scale
- β Sub-second responses - <100ms cached, <500ms fresh
- β Horizontal scaling - stateless design, run multiple instances
- β Efficient caching - reduces Maven Central load
- β Native images - <50ms startup, lower resource usage
- β Production-proven - Spring Boot battle-tested infrastructure
Compliance & Governance
- β License detection - automatic GPL/LGPL flagging
- β Audit trail - Spring Boot logging integration
- β Corporate proxy support - works behind firewalls
- β Custom certificates - SSL inspection compatibility
- β Self-hostable - no SaaS dependency
π§ Troubleshooting
Context7 Connection Issues
Symptom: Spring stack trace on startup, MCP handshake fails Cause: Corporate network blocks https://mcp.context7.com Solution: Use Context7-free native image:
{
"mcpServers": {
"maven-tools": {
"command": "docker",
"args": ["run", "-i", "--rm", "arvindand/maven-tools-mcp:latest-noc7"]
}
}
}
SSL Inspection / Corporate Certificates
Symptom: SSL handshake failures, certificate errors Cause: Corporate MITM proxy with custom CA certificates Solution: Build custom image with corporate certificates - see CORPORATE-CERTIFICATES.md
Slow First Query
Symptom: First query takes 2-3 seconds Cause: Cold start + uncached Maven Central request Expected behavior: Subsequent queries <100ms (cached). This is normal.
Docker Permission Issues
Symptom: "permission denied" when running Docker command Solution:
# Linux: Add user to docker group
sudo usermod -aG docker $USER
# Then logout/login
# Windows/Mac: Ensure Docker Desktop is running
π¬ Technical Architecture
Design Principles
1. Zero External State
- Stateless Spring Boot application
- All data from Maven Central (no database)
- Idempotent operations
- Horizontally scalable
2. Fail-Fast with Graceful Degradation
- Context7 unavailable? Provide fallback instructions
- OSV.dev timeout? Return results without CVE data
- Network issues? Clear error messages
- No silent failures
3. Production-Ready Performance
- Spring AOT + GraalVM native images
- HTTP client connection pooling
- Smart caching strategies
- <50ms startup time (native)
How It Works
AI Assistant β MCP Protocol β Maven Tools MCP Server
Workflow:
1. AI assistant parses user request and extracts dependency coordinates
2. AI assistant calls MCP tool with coordinates (groupId:artifactId)
3. Server fetches maven-metadata.xml from Maven Central
4. Server parses XML, classifies versions by stability
5. Optionally: Server queries OSV.dev for CVEs
6. Optionally: Server fetches license from POM
7. Server returns structured JSON to AI assistant
8. AI assistant interprets results and responds to user
Response time: <100ms (cached), <500ms (fresh)
Deployment Options
Docker (Recommended):
- Multi-arch support (AMD64 + ARM64)
- Automatic platform selection
- Isolated environment
docker run -i --rm arvindand/maven-tools-mcp:latest
Native Image:
- <50ms startup
- Lower memory footprint (~100MB vs 500MB JVM)
- Platform-specific binaries
- Download from Releases
JVM JAR:
- Maximum compatibility
- Dynamic configuration
- ~200ms startup
java -jar maven-tools-mcp.jar
Network Requirements
Outbound HTTPS to:
repo1.maven.org(Maven Central metadata)api.osv.dev(CVE vulnerability data)mcp.context7.com(optional documentation)
Corporate Networks:
- Proxy configuration supported
- Custom CA certificates supported (see CORPORATE-CERTIFICATES.md)
- Context7-free builds available (
arvindand/maven-tools-mcp:latest-noc7)
Alternative Setup Methods
Using Docker Compose
Alternative Claude Desktop configuration (if you prefer compose):
Download docker-compose.yml and configure:
{
"mcpServers": {
"maven-tools": {
"command": "docker",
"args": [
"compose", "-f", "/absolute/path/to/docker-compose.yml",
"run", "--rm", "maven-tools-mcp"
]
}
}
}
For development/testing only:
docker compose up -d # Runs server in background for testing
Build from Source (for contributors)
Prerequisites:
- Java 24
- Maven 3.9+
# Clone the repository
git clone https://github.com/arvindand/maven-tools-mcp.git
cd maven-tools-mcp
# Quick build (CI-friendly - unit tests only)
./mvnw clean package -Pci
# Full build with all tests (requires network access)
./mvnw clean package -Pfull
# Run the JAR
java -jar target/maven-tools-mcp-2.0.0.jar
Claude Desktop configuration for JAR:
{
"mcpServers": {
"maven-tools": {
"command": "java",
"args": [
"-jar",
"/absolute/path/to/maven-tools-mcp-2.0.0.jar"
]
}
}
}
Build Scripts
For easier builds, use the provided scripts in the build/ folder:
Linux/macOS:
cd build
./build.sh # Complete build helper
./build-docker.sh # Docker-focused helper
Windows:
cd build
build.cmd # Complete build helper
build-docker.cmd # Docker-focused helper
Configuration
The server can be configured via application.yaml:
# Cache configuration
spring:
cache:
type: caffeine
# Maven Central Repository settings
maven:
central:
repository-base-url: https://repo1.maven.org/maven2
timeout: 10s
max-results: 100
# Logging (minimal for MCP stdio transport)
logging:
level:
root: ERROR
Technical Details
- Framework: Spring Boot 3.5.9 with Spring AI MCP
- MCP Protocol: 2025-06-18
- Java Version: 24
- Transport: stdio
- HTTP Client: OkHttp 5.3.2 with HTTP/2 support
- Cache: Caffeine (24-hour TTL, 2000 entries max)
- Resilience: Circuit breaker, retry, and rate limiter patterns
- Data Source: Maven Central Repository (maven-metadata.xml files)
References & Resources
Model Context Protocol (MCP)
- Official Website: modelcontextprotocol.io
- GitHub Repository: modelcontextprotocol/specification
- Protocol Documentation: MCP Specification
Spring AI MCP
- Documentation: Spring AI MCP Reference
- GitHub: spring-projects/spring-ai
Maven Central Repository
- Repository: repo1.maven.org
- Metadata Format: Maven Metadata XML Reference
- Search API: search.maven.org (not used in v1.4.0+)
Context7 MCP Server
- GitHub Repository: upstash/context7
- NPM Package: @upstash/context7-mcp
- Documentation: Upstash Context7 Blog
π Community & Discussion
Blog Posts:
- How I Connected Claude to Maven Central (and Why You Should Too)
- Guided Delegation: Adding Context7 Documentation to My Maven Tools MCP Server
Get Involved
- π¬ Discuss: Share your experiences and ask questions on dev.to
- π Issues: Report bugs or request features
- β Support: Star this repo if it improves your workflow
License
This project is licensed under the MIT License - see the LICENSE file for details.
Author
Arvind Menon
- GitHub: @arvindand
- Version: 2.0.0
docker.io/arvindand/maven-tools-mcp:latestdocker pull docker.io/arvindand/maven-tools-mcp:latest:undefined