Back to Browse

Code Graph MCP Server

Developer ToolsModerate5.1MCP RegistryLocal
Free

Server data from the Official MCP Registry

Local dependency graph: callers, entry points and file:line evidence for what a change affects.

About

Local dependency graph: callers, entry points and file:line evidence for what a change affects.

Security Report

5.1
Moderate5.1Moderate Risk

The visible portion is a local code-graph MCP server that reads a SQLite graph, serves read-only query tools over stdio, and writes an index database. It shows no data exfiltration, shell execution, or hardcoded credentials. The main concerns are that the source is truncated, so the rest of the server cannot be verified, and that the README describes host-config modification and extractor dependencies installed at runtime. Supply chain analysis found 8 known vulnerabilities in dependencies (0 critical, 6 high severity). Package verification found 1 issue.

12 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

database

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cyberchronos00-cg-code-graph": {
      "args": [
        "-y",
        "local-sockets-node"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!