MCP Observatory
5m ago Tracked 52,796 Last 5m ago 24h 2,807
github analyzed 489ccf1

codegraph-ai/CodeGraph

github

Semantic code graph: 42 tools, 38 languages. Callers, impact, AI context, memory, PR review.

maintainer
codegraph-ai
license
—
first seen
2026-08-12
last seen
2026-08-12
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 28 tools
transport stdio · http verified reported listed in the official MCP registry counts 28 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • codegraph_analyze_complexity
  • codegraph_analyze_impact
  • codegraph_find_by_imports
  • codegraph_find_by_signature
  • codegraph_find_entry_points
  • codegraph_find_implementors
  • codegraph_find_related_tests
  • codegraph_get_ai_context
  • codegraph_get_call_graph
  • codegraph_get_callees
  • codegraph_get_callers
  • codegraph_get_curated_context
  • codegraph_get_dependency_graph
  • codegraph_get_detailed_symbol
  • codegraph_get_edit_context
  • codegraph_get_symbol_info
  • codegraph_index_directory
  • codegraph_index_files
  • codegraph_memory_context
  • codegraph_memory_get
  • codegraph_memory_invalidate
  • codegraph_memory_list
  • codegraph_memory_search
  • codegraph_memory_stats
  • codegraph_memory_store
  • codegraph_reindex_workspace
  • codegraph_symbol_search
  • codegraph_traverse_graph
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 489ccf1 · analyzer v33 · 16h ago

danger signals4

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 627

filesystem 14

  • fs codegraph-ai-CodeGraph-489ccf1/mcp-package/bin/codegraph-daemon.js :17 const fs = require("fs");
  • fs codegraph-ai-CodeGraph-489ccf1/mcp-package/bin/codegraph-mcp.js :7 const fs = require("fs");
  • fs codegraph-ai-CodeGraph-489ccf1/mcp-package/bin/fetch-engine.js :23 const fs = require("fs");
  • fs codegraph-ai-CodeGraph-489ccf1/mcp-package/bin/install-hooks.js :22 const fs = require("fs");
  • fs codegraph-ai-CodeGraph-489ccf1/mcp-package/bin/postinstall.js :6 const fs = require("fs");
  • fs (weak) codegraph-ai-CodeGraph-489ccf1/mcp-package/test/fetch-engine.test.js :21 const fs = require("fs");
  • fs (weak) codegraph-ai-CodeGraph-489ccf1/mcp-package/test/wrapper-args.test.js :23 const fs = require("fs");
  • fs codegraph-ai-CodeGraph-489ccf1/vscode/src/engineDownload.ts :17 import * as fs from 'fs';
  • fs codegraph-ai-CodeGraph-489ccf1/vscode/src/extension.ts :6 import * as fs from 'fs';
  • fs (weak) codegraph-ai-CodeGraph-489ccf1/vscode/src/server.test.ts :6 import * as fs from 'fs';
  • fs codegraph-ai-CodeGraph-489ccf1/vscode/src/server.ts :6 import * as fs from 'fs';
  • fs codegraph-ai-CodeGraph-489ccf1/vscode/src/telemetry/machineProfile.ts :17 import * as fs from 'fs';
  • fs codegraph-ai-CodeGraph-489ccf1/vscode/src/views/graphPanel.ts :157 await vscode.workspace.fs.writeFile(uri, encoder.encode(svgContent));
  • fs (weak) codegraph-ai-CodeGraph-489ccf1/vscode/src/vsforge-host.integration.test.ts :18 import * as fs from 'fs';

shell / exec 8

  • shell codegraph-ai-CodeGraph-489ccf1/mcp-package/bin/codegraph-daemon.js :14 const { spawn } = require("child_process");
  • shell codegraph-ai-CodeGraph-489ccf1/mcp-package/bin/codegraph-mcp.js :4 const { spawn } = require("child_process");
  • shell codegraph-ai-CodeGraph-489ccf1/mcp-package/bin/postinstall.js :7 const { execFileSync } = require("child_process");
  • shell (weak) codegraph-ai-CodeGraph-489ccf1/mcp-package/test/wrapper-args.test.js :22 const { execFileSync, spawnSync } = require("child_process");
  • shell codegraph-ai-CodeGraph-489ccf1/vscode/src/extension.ts :8 import * as cp from 'child_process';
  • shell codegraph-ai-CodeGraph-489ccf1/vscode/src/server.ts :8 import { execSync } from 'child_process';
  • shell codegraph-ai-CodeGraph-489ccf1/vscode/src/telemetry/machineProfile.ts :19 import { execFile } from 'child_process';
  • shell (weak) codegraph-ai-CodeGraph-489ccf1/vscode/src/vsforge-host.integration.test.ts :15 import { spawn, ChildProcess } from 'child_process';

network 3

  • net codegraph-ai-CodeGraph-489ccf1/mcp-package/bin/fetch-engine.js :27 const https = require("https");
  • net (weak) codegraph-ai-CodeGraph-489ccf1/mcp-package/test/fetch-engine.test.js :22 const http = require("http");
  • net codegraph-ai-CodeGraph-489ccf1/vscode/src/views/codeLensProvider.ts :79 const symbols = this.fetch(document).catch(() => {

secrets 1

  • secrets codegraph-ai-CodeGraph-489ccf1/vscode/esbuild.js :42 __POSTHOG_KEY__: JSON.stringify(process.env.CODEGRAPH_POSTHOG_KEY ?? ''),

tool registrations 28

  • codegraph_get_dependency_graph codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :318
  • codegraph_get_call_graph codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :353
  • codegraph_analyze_impact codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :398
  • codegraph_get_ai_context codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :440
  • codegraph_get_edit_context codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :511
  • codegraph_get_curated_context codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :545
  • codegraph_find_related_tests codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :576
  • codegraph_get_symbol_info codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :643
  • codegraph_analyze_complexity codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :732
  • codegraph_symbol_search codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :772
  • codegraph_find_by_imports codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :810
  • codegraph_find_entry_points codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :856
  • codegraph_traverse_graph codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :892
  • codegraph_get_callers codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :938
  • codegraph_get_callees codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :978
  • codegraph_get_detailed_symbol codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :1018
  • codegraph_find_by_signature codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :1059
  • codegraph_memory_store codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :1111
  • codegraph_memory_search codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :1156
  • codegraph_memory_get codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :1193
  • codegraph_memory_context codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :1223
  • codegraph_memory_invalidate codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :1259
  • codegraph_memory_list codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :1289
  • codegraph_memory_stats codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :1329
  • codegraph_reindex_workspace codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :1356
  • codegraph_index_files codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :1387
  • codegraph_index_directory codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :1408
  • codegraph_find_implementors codegraph-ai-CodeGraph-489ccf1/vscode/src/ai/toolManager.ts :1429

install hooks 1

  • postinstall codegraph-ai-CodeGraph-489ccf1/mcp-package/package.json :50 node bin/postinstall.js

declared dependencies 64

  • posthog-node@^4.18.0
  • serde@1.0
  • serde_json@1.0
  • thiserror@1.0
  • rocksdb@0.22
  • libz-sys@=1.1.25
  • fs2@0.4
  • log@0.4
  • uuid@1.0
  • tower-lsp@0.20
  • tokio@1
  • dashmap@5
  • notify@6
  • tracing@0.1
  • tracing-subscriber@0.3
  • lru@0.12
  • regex@1
  • glob@0.3
  • globset@0.4
  • clap@4
  • codegraph@0.2.0
  • codegraph-parser-api@0.2.1
  • codegraph-python@*
  • codegraph-rust@*
  • codegraph-typescript@*
  • codegraph-go@*
  • codegraph-c@*
  • codegraph-cpp@*
  • codegraph-java@*
  • codegraph-kotlin@*
  • codegraph-csharp@*
  • codegraph-php@*
  • codegraph-ruby@*
  • codegraph-swift@*
  • codegraph-tcl@*
  • codegraph-verilog@*
  • codegraph-cobol@*
  • codegraph-fortran@*
  • codegraph-dart@*
  • codegraph-zig@*
  • codegraph-lua@*
  • codegraph-bash@*
  • codegraph-groovy@*
  • codegraph-hcl@*
  • codegraph-elixir@*
  • codegraph-r@*
  • codegraph-scala@*
  • codegraph-haskell@*
  • codegraph-julia@*
  • codegraph-yaml@*
  • codegraph-ocaml@*
  • codegraph-perl@*
  • codegraph-toml@*
  • codegraph-css@*
  • codegraph-objc@*
  • codegraph-elm@*
  • codegraph-clojure@*
  • codegraph-solidity@*
  • codegraph-erlang@*
  • codegraph-dockerfile@*
  • codegraph-memory@*
  • junit:junit@4.13.2
  • Microsoft.VisualStudio.SDK@17.12.*
  • Microsoft.VSSDK.BuildTools@17.12.*

jetbrains-plugin 1

  • opaque (low) codegraph-ai-CodeGraph-489ccf1/jetbrains/src/main/resources/META-INF/plugin.xml bundled JetBrains plugin "unnamed" (codegraph-ai-CodeGraph-489ccf1/jetbrains/src/main/resources/META-INF/plugin.xml) — presence-detected; review the plugin descriptor