codetrawl-mcp

Deterministic code analysis as Model Context Protocol tools, so AI coding agents can ask computed questions about a GitHub repo — blast radius, untested hotspots, structural duplicates, a 17-signal health verdict, and "what does this change break?" simulation — instead of grepping and guessing.

Powered by CodeTrawl. Transport is stdio; the server runs as a child process of your MCP client and analyzes public repos on demand (no data leaves your machine except the repo fetch from GitHub).

Install

claude mcp add codetrawl npx codetrawl-mcp

Or globally, then point any MCP client at the codetrawl-mcp binary:

npm install -g codetrawl-mcp

GitHub token (recommended): analysis fetches the repo from GitHub. Set GITHUB_TOKEN in the server's environment to lift the 60-request/hour unauthenticated limit to 5000/hour.

Tools

• analyze_repo — entry point; returns a sessionId every other tool needs
• blast_radius — what a file or function change reaches
• untested_hotspots — complex production functions with no test caller
• find_duplicates — structurally identical functions across the repo
• signals — the full 17-signal health verdict + dimension rollup
• compare_sessions — structural diff between two analyses
• analyze_diff / review_changes — change-aware review
• simulate_change — the Conscience: the deterministic blast + gate on a proposed diff, before you commit it

Plus the conscience prompt — the agent loop that runs simulate_change and respects its gate.

License

PolyForm Noncommercial 1.0.0 — free for noncommercial use. For commercial use, contact coffeejones.