npm JavaScript analyzed 0.1.3

@joecwales/cartographer-mcp

v0.1.3

Deterministic, rule-tiered capability oracle and MCP server for high-density A-MEM agent workflows.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 5 tools

transport stdio verified reported listed in the official MCP registry counts 5 tools · 0 res · 0 prompts permission surface via code analysis

code evidence v0.1.3 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 9

net package/dist/cartographer-ai-pass.js :95 const response = await withTimeout(fetch(config.summaryEndpoint, {

secrets package/dist/cartographer-ai-pass.js :150 summaryApiKey: userConfig?.summaryApiKey ?? process.env.CARTO_SUMMARY_API_KEY ?? process.env.XAI_API_KEY,

db package/dist/cartographer-cli.js :4 import Database from "better-sqlite3";
db package/dist/cartographer-db-init.js :3 import Database from "better-sqlite3";
db package/dist/cartographer-mcp.js :4 import Database from "better-sqlite3";

prepublishOnly package/package.json :39 npm run build
postinstall (suspicious) package/package.json :40 node -e "console.log('✅ Cartographer MCP installed. Run: cartographer --help')"