← Back to search

codeatlas-mcp-server

giauphan Scanned 23d ago

Local-first MCP server for CodeAtlas — AST analysis, codebase intelligence, semantic memory, and A2A orchestration.

npm
C
66.4 / 100

Versions

3.0.1latest
Jul 18, 2026
2.21.12
Jul 5, 2026
2.20.12
Jun 27, 2026
2.20.11
Jun 26, 2026
2.20.10
Jun 26, 2026
+ show 7 moreshow less
2.20.8
Jun 25, 2026
2.20.7
Jun 25, 2026
2.20.6
Jun 25, 2026
2.20.5
Jun 25, 2026
2.20.4
Jun 25, 2026
2.20.3
Jun 25, 2026
2.20.2
Jun 24, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 36

generate_system_flow
annotations: none low

Auto-generate a Mermaid flowchart diagram showing how modules, classes, and functions connect in the system. Returns a Mermaid diagram string that AI can read to understand the full system flow without reading every file.

feature string project string maxNodes number
analyze
annotations: none low

Perform deep code analysis on a local project directory. Generates AST analysis in memory and syncs to CodeAtlas Cloud.

path string maxFiles number
list_projects
annotations: none low

List all projects that have been analyzed by CodeAtlas. Returns project names, paths, and last analysis time.

get_project_structure
annotations: none low

Get all modules, classes, functions, and variables in the analyzed project. Returns entity type, name, file path, and line number.

limit number project string
get_dependencies
annotations: none low

Get import/call/containment/implements relationships between entities. Shows how modules, classes, and functions are connected.

limit number source string target string project string
get_insights
annotations: none low

Get AI-generated code insights including refactoring suggestions, security issues, and maintainability analysis.

search_entities
annotations: none low

Search for functions, classes, modules, or variables by name. Supports fuzzy matching.

query string project string
get_file_entities
annotations: none low

Get all entities (classes, functions, variables) defined in a specific file.

project string filePath string
sync_system_memory
annotations: none low

Create or update the .agents/memory/ folder with auto-generated system documentation. This folder serves as AI

project string businessRule string changeDescription string enableEnterpriseSync boolean
get_system_memory
annotations: none low

Retrieve the auto-generated system documentation and episodic memories (business rules and change logs) for a project from CodeAtlas Cloud / Oracle 26ai.

project string
save_dream_memory
annotations: none low

Save a dream memory (mistake, preference, knowledge, or pattern) to CodeAtlas Cloud for long-term AI recall. The AI uses this to persist learnings across conversations.

scope string content string project string importance number session_id string
query_dream_memories
annotations: none low

Query previously saved dream memories from CodeAtlas Cloud. Uses semantic search to find relevant memories based on the query text. Returns memories with relevance scores.

limit number query string scope string project string
sync_dreams
annotations: none low

Check dream memory sync status. Returns count of stored dreams grouped by type and project. Use this to verify dreams are syncing to the cloud correctly. Can be called from any AI IDE, CLI, or Hermes cron.

project string
search_genome
annotations: none low

Search CodeAtlas Genome for relevant genes. Uses semantic search to find the most relevant genes.

limit number query string project string
get_gene
annotations: none low

Get a specific gene by ID from the CodeAtlas Genome.

geneId string
scan_immune_genes
annotations: none low

Scan the CodeAtlas Immune System for previously encountered failures matching a problem description. Returns prevention context to inject into prompts.

problem string project string
save_immune_gene
annotations: none low

Record a failure pattern as an immune gene in CodeAtlas Genome. This helps prevent future agents from repeating the same mistake.

failure string problem string project string prevention string
trace_feature_flow
annotations: none low

Trace the complete flow of a feature through the codebase. Given a keyword (e.g.

depth number keyword string project string
generate_feature_flow_diagram
annotations: none low

Generate a Mermaid diagram showing the EXECUTION FLOW of a feature. Unlike generate_system_flow (which shows module imports), this traces the actual call chain: entry point → controller → service → model → database. Given a keyword, it finds all related functions and classes, then builds a flowchart or sequence diagram showing how they call each other at runtime. This is the best tool for understanding HOW a feature works step-by-step.

depth number keyword string project string maxNodes number
detect_architectural_smells
annotations: none low

Knowledge Graph Reasoning: Use Oracle 26ai Graph features to automatically detect architectural weaknesses, circular dependencies, God objects, and dead code.

project string
scan_enterprise_vulnerabilities
annotations: none low

Enterprise Scanner: Automatically scan all analyzed projects for bugs, security vulnerabilities (hardcoded secrets, unsafe functions), and architectural problems. Features Admin Insights and Security Scoring.

maxProjects number
code_search
annotations: none low

Search source FILE CONTENTS across the entire project for any text string. Unlike

query string project string maxResults number filePattern string contextLines number
get_callers
annotations: none low

Find ALL functions, methods, or classes that call or reference a specific symbol. The

depth number symbol string project string maxResults number
get_callees
annotations: none low

Find everything a function, method, or class calls or depends on. The

depth number symbol string project string maxResults number
impact_analysis
annotations: none low

Full BLAST RADIUS analysis for changing a symbol. Traces BOTH callers (what depends on this) AND callees (what this depends on) in one view. Also finds related test files. Use BEFORE any significant code change.

depth number symbol string project string
project_context
annotations: none low

Get a comprehensive overview of a project in ONE call: package.json (name, version, scripts, deps, devDeps), config files detected, README summary, test framework, git branch. Saves 5-10 individual read_file calls when starting work.

project string
run_script
annotations: none low

Run an npm/pnpm/yarn script from package.json. Returns exit code, stdout/stderr, and duration. Handles cd to project dir automatically.

args string script string project string timeout number
git_changes
annotations: none low

Get recent git changes: last N commits (hash, author, date, message, files changed), uncommitted changes (modified/added/deleted), branch status (ahead/behind). Saves multiple git commands.

commits number project string
setup_second_brain
annotations: none low

Configure CodeAtlas Second Brain for any MCP client (Hermes, Claude Code, Gemini CLI).

apiKey string autoPlugin boolean
check_second_brain_status
annotations: none low

Check the current Second Brain configuration status for all MCP clients.

manage_adr
annotations: none low

Manage Architecture Decision Records (ADRs) — persistent decisions that survive context resets. Use when documenting architecture choices, listing past decisions, updating status, or checking what was decided and why. ADRs persist at ~/.codeatlas/adr/<project>/.

id string title string context string project string decision string consequences string supersededBy string
get_code_snippet
annotations: none low

Read source code of a specific function/class/module by its qualified name. Returns the exact file path, line range, and raw source. Use when you need to see the actual implementation — not just that it exists.

symbol string project string contextLines number
index_coverage
annotations: none low

Check what files and entity types are indexed for a project. Returns: file count, entity distribution, files with most entities, and files that might be missing (not indexed). Use after

project string
detect_code_similarities
annotations: none low

Find near-duplicate or semantically similar functions/classes in a project. Uses token-based Jaccard similarity to find code that looks different but does the same thing. Returns groups of similar functions with similarity scores. Use before refactoring to consolidate duplicated logic.

limit number project string threshold number
export_team_artifact
annotations: none low

Export a compressed snapshot of the project

project string
sync_skills_inventory
annotations: none low

Scan all installed skills (from ~/.agents/skills/ and ~/.claude/skills/) and save a complete inventory to CodeAtlas Second Brain. This lets the AI remember what skills are available, query them, and reference them by name. Run after installing new skills or on first setup.

limit number query string

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops, fs.promises
shell high
Server uses shell capabilities via: child_process, spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 89

low
Tool 'analyze' has no annotations annotation_checker · 100%
low
Tool 'list_projects' has no annotations annotation_checker · 100%
low
Tool 'get_project_structure' has no annotations annotation_checker · 100%
low
Tool 'get_dependencies' has no annotations annotation_checker · 100%
low
Tool 'get_insights' has no annotations annotation_checker · 100%
low
Tool 'search_entities' has no annotations annotation_checker · 100%
low
Tool 'get_file_entities' has no annotations annotation_checker · 100%
low
Tool 'generate_system_flow' has no annotations annotation_checker · 100%
low
Tool 'sync_system_memory' has no annotations annotation_checker · 100%
low
Tool 'get_system_memory' has no annotations annotation_checker · 100%
low
Tool 'save_dream_memory' has no annotations annotation_checker · 100%
low
Tool 'query_dream_memories' has no annotations annotation_checker · 100%
low
Tool 'sync_dreams' has no annotations annotation_checker · 100%
low
Tool 'search_genome' has no annotations annotation_checker · 100%
low
Tool 'get_gene' has no annotations annotation_checker · 100%
low
Tool 'scan_immune_genes' has no annotations annotation_checker · 100%
low
Tool 'save_immune_gene' has no annotations annotation_checker · 100%
low
Tool 'trace_feature_flow' has no annotations annotation_checker · 100%
low
Tool 'generate_feature_flow_diagram' has no annotations annotation_checker · 100%
low
Tool 'detect_architectural_smells' has no annotations annotation_checker · 100%
low
Tool 'scan_enterprise_vulnerabilities' has no annotations annotation_checker · 100%
low
Tool 'code_search' has no annotations annotation_checker · 100%
low
Tool 'get_callers' has no annotations annotation_checker · 100%
low
Tool 'get_callees' has no annotations annotation_checker · 100%
low
Tool 'impact_analysis' has no annotations annotation_checker · 100%
low
Tool 'project_context' has no annotations annotation_checker · 100%
low
Tool 'run_script' has no annotations annotation_checker · 100%
low
Tool 'git_changes' has no annotations annotation_checker · 100%
low
Tool 'setup_second_brain' has no annotations annotation_checker · 100%
low
Tool 'check_second_brain_status' has no annotations annotation_checker · 100%
low
Tool 'manage_adr' has no annotations annotation_checker · 100%
low
Tool 'get_code_snippet' has no annotations annotation_checker · 100%
low
Tool 'index_coverage' has no annotations annotation_checker · 100%
low
Tool 'detect_code_similarities' has no annotations annotation_checker · 100%
low
Tool 'export_team_artifact' has no annotations annotation_checker · 100%
low
Tool 'sync_skills_inventory' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.1 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.19.2 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.27 (GHSA-54fx-42gc-7vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.27 (GHSA-79qm-7rj5-m7r9) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.27 (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.27 (GHSA-f23p-vx2j-j53r) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: analyze manifest_parser · 70%
info
Tool: list_projects manifest_parser · 70%
info
Tool: get_project_structure manifest_parser · 70%
info
Tool: get_dependencies manifest_parser · 70%
info
Tool: get_insights manifest_parser · 70%
info
Tool: search_entities manifest_parser · 70%
info
Tool: get_file_entities manifest_parser · 70%
info
Tool: generate_system_flow manifest_parser · 70%
info
Tool: sync_system_memory manifest_parser · 70%
info
Tool: get_system_memory manifest_parser · 70%
info
Tool: save_dream_memory manifest_parser · 70%
info
Tool: query_dream_memories manifest_parser · 70%
info
Tool: sync_dreams manifest_parser · 70%
info
Tool: search_genome manifest_parser · 70%
info
Tool: get_gene manifest_parser · 70%
info
Tool: scan_immune_genes manifest_parser · 70%
info
Tool: save_immune_gene manifest_parser · 70%
info
Tool: trace_feature_flow manifest_parser · 70%
info
Tool: generate_feature_flow_diagram manifest_parser · 70%
info
Tool: detect_architectural_smells manifest_parser · 70%
info
Tool: scan_enterprise_vulnerabilities manifest_parser · 70%
info
Tool: code_search manifest_parser · 70%
info
Tool: get_callers manifest_parser · 70%
info
Tool: get_callees manifest_parser · 70%
info
Tool: impact_analysis manifest_parser · 70%
info
Tool: project_context manifest_parser · 70%
info
Tool: run_script manifest_parser · 70%
info
Tool: git_changes manifest_parser · 70%
info
Tool: setup_second_brain manifest_parser · 70%
info
Tool: check_second_brain_status manifest_parser · 70%
info
Tool: manage_adr manifest_parser · 70%
info
Tool: get_code_snippet manifest_parser · 70%
info
Tool: index_coverage manifest_parser · 70%
info
Tool: detect_code_similarities manifest_parser · 70%
info
Tool: export_team_artifact manifest_parser · 70%
info
Tool: sync_skills_inventory manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (14) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 216 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%