← Back to search

Corral

sebastienrousseau Scanned 2h ago

Query your Corral-organised local mirror of cloned GitHub repositories. Zero network calls.

B
85.8 / 100

Versions

0.0.10latest
first seen Jul 2, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 18

corral_list_repos
annotations: none low

List local clones in the Corral-organised workspace, optionally filtered by visibility (Public/Private), language, repository-name substring, or whether a sync sidecar is present. Results are paginated: the response carries total_matched, returned and next_offset; pass next_offset back as 'offset' to continue. Use response_format 'concise' (the default) unless you specifically need origin URLs and sync timestamps — 'detailed' is roughly ten times larger per repository.

corral_find_repo
annotations: none low

Resolve a fuzzy repository name (bare name, relative path, or path suffix) to a single local clone in the Corral workspace. Returns the matched repository, or an error listing all candidate paths when the query is ambiguous.

corral_get_repo_metadata
annotations: none low

Return full metadata for a single local clone: repository entry, current branch, and parsed sync state. The branch lookup spawns one git subprocess per call; prefer corral_list_repos for bulk queries.

corral_status_summary
annotations: none low

High-level workspace summary: total repository count and breakdowns by visibility and language. Cheap to compute; the right opening call for orienting in an unfamiliar workspace.

corral_workspace_index
annotations: none low

Return a whole-workspace summary plus a bounded page of repositories. Prefer corral_list_repos when you can filter — this returns everything and is the most expensive read here. Paginated: pass next_offset back as 'offset'. Defaults to the concise projection; 'detailed' adds origin URLs and sync state.

corral_graph_dependencies
annotations: none low

Analyze package dependencies across all repositories in the Corral workspace (Go modules, Rust crates, Node/TypeScript packages, Python projects). Returns the directed dependency graph, topological build and test execution order, detected cycles, and reverse dependent lookups.

corral_doctor
annotations: none low

Audit local repository clones in the Corral workspace for uncommitted changes, unpushed commits, detached heads, and linked worktrees. Returns workspace health summary and counts.

corral_discover_repos
annotations: none low

Scan the filesystem under base_dir (defaults to workspace root) to find local Git repositories that are untracked or unmanaged by Corral. Returns candidate paths, detected primary languages, and remote status with aggressive boundary pruning.

corral_search_code
annotations: none low

Search the contents of source and documentation files across every repository in the Corral workspace at once. Use this for where something is *used* — call sites, configuration keys, error strings — and corral_find_symbol for where something is *declared*. Returns file, line and the matching line's text, not whole files: read the file at the location it gives you. Only files the file resource would serve are searched, so credential files never match. Test files are excluded unless include_tests is set. Narrow with repo, language or path_glob on a large workspace; the response reports whether any bound was reached. When a name is spelled differently per language — MaxAttempts in Go, MAX_ATTEMPTS in Python, maxAttempts in TypeScript — a literal search finds only one of them; use regex for those, e.g. \"max_?attempts\".

corral_find_symbol
annotations: none low

Find where a function, method, type, interface, constant or variable is defined, across every repository in the Corral workspace — not just one. This is the tool to reach for when you know a name but not which repository it lives in. Returns file and line, not source: read the file at the location it gives you. Indexed languages:

corral_repo_overview
annotations: none low

Orient in a single repository in one call: its location and origin, how many source files it has, its declaration counts by kind, and its most significant exported types and functions. Cheaper and far smaller than listing the tree and reading files. Use it before corral_find_symbol when you do not yet know what a repository contains.

corral_sync_repo
annotations: verified low

Run `git pull --rebase --autostash` against one clone in the Corral workspace. Requires --enable-mutations. Reuses corral's non-interactive git environment (no credential prompts, no signing pinentry) and honours smart-sync via the sync sidecar. Refuses when the repo isn't in the index or resolves outside the configured sandbox root.

readOnlyHint false idempotentHint true
corral_clone_repo
annotations: verified low

Clone a repository into the Corral workspace. Requires --enable-mutations. Refuses when the target already exists (never overwrites) or would escape the sandbox root.

readOnlyHint false idempotentHint false
corral_create_worktree
annotations: verified low

Create an isolated Git worktree for an agent under .git/corral-worktrees/<branch> linked to a repository clone. Requires --enable-mutations. Protects the developer's working directory by keeping agent branching and edits isolated. Refuses when the target worktree already exists or would escape the repository.

readOnlyHint false idempotentHint false
corral_release_worktree
annotations: verified low

Remove a linked agent worktree created under .git/corral-worktrees. Requires --enable-mutations. Refuses when uncommitted or untracked changes exist in the worktree unless force=true is passed. Prunes stale worktree administrative metadata.

readOnlyHint false idempotentHint false
corral_prune_worktrees
annotations: verified low

Prune stale, detached, or temporary agent worktrees across workspace repositories. Requires --enable-mutations. Skips main repository worktrees and refuses removal of modified worktrees unless force=true is passed.

readOnlyHint false idempotentHint false
corral_adopt_repo
annotations: verified low

Adopt a local repository into the Corral workspace, optionally relocating it into layout taxonomy, provisioning a matching remote repository on a forge (GitHub, GitLab, Gitea, Bitbucket), and linking the remote origin. Requires --enable-mutations.

readOnlyHint false idempotentHint false
corral_delete_repo
annotations: verified low

Remove one clone from the Corral workspace. Requires --enable-mutations AND --enable-destructive-mutations. Refuses when the clone holds uncommitted, unpushed, stashed, gitignored or submodule work, or when it resolves to the workspace root itself. Every attempt is written to the audit log.

readOnlyHint false idempotentHint false

Permissions 2

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), pathlib

Scan Findings 44

low
Tool 'corral_list_repos' has no annotations annotation_checker · 100%
low
Tool 'corral_find_repo' has no annotations annotation_checker · 100%
low
Tool 'corral_get_repo_metadata' has no annotations annotation_checker · 100%
low
Tool 'corral_status_summary' has no annotations annotation_checker · 100%
low
Tool 'corral_workspace_index' has no annotations annotation_checker · 100%
low
Tool 'corral_graph_dependencies' has no annotations annotation_checker · 100%
low
Tool 'corral_doctor' has no annotations annotation_checker · 100%
low
Tool 'corral_discover_repos' has no annotations annotation_checker · 100%
low
Tool 'corral_search_code' has no annotations annotation_checker · 100%
low
Tool 'corral_find_symbol' has no annotations annotation_checker · 100%
low
Tool 'corral_repo_overview' has no annotations annotation_checker · 100%
info
Tool 'corral_sync_repo' annotations are consistent annotation_checker · 80%
info
Tool 'corral_clone_repo' annotations are consistent annotation_checker · 80%
info
Tool 'corral_create_worktree' annotations are consistent annotation_checker · 80%
info
Tool 'corral_release_worktree' annotations are consistent annotation_checker · 80%
info
Tool 'corral_prune_worktrees' annotations are consistent annotation_checker · 80%
info
Tool 'corral_adopt_repo' annotations are consistent annotation_checker · 80%
info
Tool 'corral_delete_repo' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
Tool: corral_list_repos manifest_parser · 85%
info
Tool: corral_find_repo manifest_parser · 85%
info
Tool: corral_get_repo_metadata manifest_parser · 85%
info
Tool: corral_status_summary manifest_parser · 85%
info
Tool: corral_workspace_index manifest_parser · 85%
info
Tool: corral_graph_dependencies manifest_parser · 85%
info
Tool: corral_doctor manifest_parser · 85%
info
Tool: corral_discover_repos manifest_parser · 85%
info
Tool: corral_search_code manifest_parser · 85%
info
Tool: corral_find_symbol manifest_parser · 85%
info
Tool: corral_repo_overview manifest_parser · 85%
info
Tool: corral_sync_repo manifest_parser · 85%
info
Tool: corral_clone_repo manifest_parser · 85%
info
Tool: corral_create_worktree manifest_parser · 85%
info
Tool: corral_release_worktree manifest_parser · 85%
info
Tool: corral_prune_worktrees manifest_parser · 85%
info
Tool: corral_adopt_repo manifest_parser · 85%
info
Tool: corral_delete_repo manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (12) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
info
SBOM generated: 41 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%