Skip to main content
Glama
Pharaoh-so

Pharaoh - Your AI breaks things it can't see

by Pharaoh-so

@pharaoh-so/mcp

npm version license node pharaoh MCP server

MCP proxy for Pharaoh — maps codebases into queryable knowledge graphs for AI agents.

Pharaoh gives AI coding assistants a complete architectural map of your codebase: every function, dependency, module, and connection. Instead of reading files one at a time, your AI agent queries the knowledge graph and gets instant answers about blast radius, unused code, dependency chains, and more.

This package enables Claude Code to connect to Pharaoh in headless environments (VPS, SSH, containers, CI) where a browser isn't available for OAuth. It acts as a stdio-to-SSE proxy, presenting itself as a local MCP server while relaying all communication to the remote Pharaoh server.

Quick Start

Step 1 — Authenticate

Run the proxy directly to trigger the device authorization flow:

npx @pharaoh-so/mcp

This displays a device code and a URL. Open the URL on any device (phone, laptop, tablet) and enter the code to authorize. Credentials are saved to ~/.pharaoh/credentials.json and remain valid for 7 days, with automatic re-authorization when they expire.

Step 2 — Add to Claude Code

npx @pharaoh-so/mcp

Verify the connection:

claude mcp list

You should see pharaoh listed as a stdio server.

Switching from SSE

If you previously added Pharaoh as an SSE server, remove it first:

claude mcp remove pharaoh
npx @pharaoh-so/mcp

Related MCP server: Context7 MCP

How It Works

Claude Code ← stdio → @pharaoh-so/mcp ← SSE/HTTP → mcp.pharaoh.so

The proxy implements the Model Context Protocol (MCP) specification:

  1. Claude Code launches the proxy as a child process and communicates via stdio (stdin/stdout)

  2. The proxy authenticates with Pharaoh using stored credentials (or triggers device flow)

  3. All MCP messages (tool calls, responses, notifications) are relayed to the remote Pharaoh server over SSE (Server-Sent Events)

  4. Pharaoh queries the knowledge graph and returns architectural data to the proxy

  5. The proxy forwards responses back to Claude Code via stdio

Authentication uses RFC 8628 (OAuth 2.0 Device Authorization Grant) — no browser is needed on the machine running Claude Code.

Available Tools

Once connected, Pharaoh provides these MCP tools:

Orient

Tool

What it answers

get_codebase_map

What modules exist and how do they relate?

get_module_context

What does this module look like before I modify it?

search_functions

Does this function already exist somewhere?

pharaoh_recon

Map, module context, search and blast radius in one call

Investigate

Tool

What it answers

get_blast_radius

What breaks if I change this function/file/module?

Manage

Tool

What it answers

pharaoh_account

Check plan, toggle PR Guard, trigger refresh

pharaoh_admin

Org-level administration

Inspect Mode

Use --inspect to dump the full tool manifest as JSON (useful for MCP registry validation and debugging):

npx @pharaoh-so/mcp --inspect

This outputs the complete list of tools with their schemas and exits immediately, without connecting to the server.

CLI Options

Usage: pharaoh-mcp [options]

Options:
  --server <url>   Pharaoh server URL (default: https://mcp.pharaoh.so)
  --logout         Clear stored credentials and exit
  --inspect        Output tool manifest as JSON and exit
  --help           Show help
  --version        Show version number

Configuration

Credentials

Credentials are stored at ~/.pharaoh/credentials.json with 0600 permissions (owner-read/write only). The file contains:

  • Access token — used to authenticate MCP requests

  • Refresh token — used to obtain new access tokens when they expire

  • Expiry timestamp — tokens are refreshed automatically before expiration

To clear credentials:

npx @pharaoh-so/mcp --logout

Custom Server

For self-hosted Pharaoh instances or development, register manually, pinned to a version (npx @pharaoh-so/mcp --version prints the one you have):

claude mcp add --scope user pharaoh -- npx @pharaoh-so/mcp@<version> --server https://your-pharaoh-instance.com

Environment Variables

Variable

Default

Description

PHARAOH_SERVER_URL

https://mcp.pharaoh.so

Pharaoh server URL (alternative to --server)

Requirements

  • Node.js >= 18

  • Claude Code or any MCP-compatible AI client

  • A Pharaoh account — sign up at pharaoh.so

Security

  • Credentials are stored with restrictive file permissions (0600 — owner-read/write only)

  • Authentication uses the RFC 8628 device authorization flow — no secrets are embedded in the package

  • All communication with the Pharaoh server uses HTTPS/TLS

  • The proxy never reads or sends your local files. Pharaoh reads your code from GitHub through its GitHub App, maps it into a knowledge graph of structural metadata (function names, file paths, dependency relationships), and deletes the clone when mapping ends.

  • Tokens expire after 7 days and are refreshed automatically

  • Only use trusted server URLs — the proxy sends your auth token to the configured server

  • No telemetry. The proxy's only network calls are the device flow, token refresh, the MCP connection, and one registry lookup during interactive setup (below).

What the installer writes on your machine

npx @pharaoh-so/mcp in a terminal is the interactive setup. Every later proxy start (Claude Code launching the server) repeats the plugin, skill and command steps so a new version takes effect, and nothing else.

Path

Mode

When

What

~/.pharaoh/

0700, set again on every start

Always

Credentials and the Claude Code plugin marketplace

~/.pharaoh/credentials.json

0600

After sign-in

Access token, refresh token, expiry

~/.pharaoh/claude-marketplace/

—

~/.claude/ exists

The one-plugin marketplace Claude Code installs as pharaoh@pharaoh: the skills and the Grep routing hook. Rewritten when the package version changes

~/.claude/commands/plan.md, review.md

—

~/.claude/ exists

Slash commands. A file is written only when it is absent or is Pharaoh's: it carries the front-matter comment # managed-by: pharaoh-mcp, or has the exact header and $ARGUMENTS footer of a Pharaoh command from 0.3.46 or earlier. Any other file with that name is yours: it is kept, a symlink is never followed, and the setup output names it. Rename your file to keep both. 0.3.51 and earlier also wrote sessions.md; later versions delete it while it carries the marker

~/.claude.json

—

Interactive setup

Removes earlier pharaoh entries, then claude mcp add --scope user pharaoh -- npx @pharaoh-so/mcp@<version>

~/.claude/settings.json

—

Interactive setup, and only if the file already exists

Adds to permissions.allow, each by full name: mcp__pharaoh__get_codebase_map, mcp__pharaoh__get_module_context, mcp__pharaoh__search_functions, mcp__pharaoh__get_blast_radius, mcp__pharaoh__get_unused_code, mcp__pharaoh__pharaoh_recon, mcp__pharaoh__pharaoh_account. The setup prints a line saying what it did. The proxy never creates this file and never touches it on a start

~/.agents/skills/pharaoh-review/

—

~/.codex/ exists

The review skill for Codex ($pharaoh-review), rewritten on every start. Other tools share ~/.agents/skills/, so nothing else there is touched

~/.openclaw/skills/, ~/.openclaw/openclaw.json

—

~/.openclaw/ exists

Skills prefixed pharaoh-, and an mcpServers.pharaoh entry running npx @pharaoh-so/mcp@<version>. An entry that is not an npx @pharaoh-so/mcp command is left alone

Versions 0.3.46 and earlier wrote one rule, mcp__pharaoh, on every proxy start. That prefix auto-approved every Pharaoh tool, including account deletion and pharaoh_admin, so a prompt injection could run them without a human prompt. The next interactive setup replaces that rule with the list above; account deletion, pharaoh_admin and any tool not listed prompt before they run. To take the blanket rule out by hand, delete mcp__pharaoh from permissions.allow.

Pinned version and upgrades

Every registration the setup writes runs the exact version that wrote it (npx @pharaoh-so/mcp@<version>). A new release on npm changes nothing on your machine until you upgrade:

npx @pharaoh-so/mcp@latest

This signs you in again, rewrites the registration with the new version and refreshes the plugin. The interactive setup asks the npm registry for the newest version and prints a one-line hint when there is one; proxy starts never check.

Reporting Vulnerabilities

If you discover a security vulnerability, please report it responsibly by emailing security@pharaoh.so. Do not open a public issue.

Troubleshooting

"Connection refused" or "ECONNREFUSED"

The Pharaoh server may be temporarily unavailable. Check status.pharaoh.so or try again in a few minutes.

"Token expired" or "401 Unauthorized"

Re-authenticate by running the proxy directly:

npx @pharaoh-so/mcp

Or clear credentials and start fresh:

npx @pharaoh-so/mcp --logout
npx @pharaoh-so/mcp

"pharaoh" not showing in claude mcp list

Make sure you added it with the correct command:

npx @pharaoh-so/mcp

Note the -- separator between pharaoh and npx.

Device code not working

  • Ensure you're opening the URL on a device with browser access

  • The device code expires after 15 minutes — request a new one by re-running the command

  • Check that you're logged into GitHub when authorizing

Slow startup

The first run after installation may take a moment as npm downloads the package. Subsequent runs use the cached version. To pre-install globally:

npm install -g @pharaoh-so/mcp
claude mcp add --scope user pharaoh -- pharaoh-mcp

How Pharaoh Works

Pharaoh parses your repositories using tree-sitter and maps structural metadata into a Neo4j knowledge graph. The graph contains:

  • Functions — names, signatures, complexity scores, export visibility

  • Files — paths, module membership, language classification

  • Modules — logical groupings detected from directory structure

  • Dependencies — import/export relationships, call chains, module connections

  • Vision specs — PRD/spec documents linked to implementation

No source code is stored — only structural metadata. When an AI agent queries Pharaoh, it gets architectural facts in minimal tokens, not raw code dumps. This means your AI assistant can understand your entire codebase architecture without consuming its context window reading files one by one.

Supported Languages

  • TypeScript / JavaScript — full support (functions, classes, imports, exports, JSX)

  • Python — full support (functions, classes, imports, decorators)

  • More languages planned via tree-sitter grammar support

Contributing

Contributions are welcome. Please open an issue first to discuss what you'd like to change.

  1. Fork the repository

  2. Create your feature branch (git checkout -b feature/amazing-feature)

  3. Commit your changes (git commit -m 'Add amazing feature')

  4. Push to the branch (git push origin feature/amazing-feature)

  5. Open a Pull Request

License

MIT -- Pharaoh, Inc.

Available Tools

7 tools
get_blast_radiusA
Read-only

What breaks if you change a function, file or module.

CALL THIS WHEN: • You're about to change a signature, refactor or delete code • You need callers or detected endpoints a change reaches

RETURNS: Risk, production callers by module/file, endpoints, cron jobs and DB operations. Hops are the shortest detected path within the requested depth (1–5). Test-file callers are excluded.

USE INSTEAD OF: following callers by hand.

NameRequiredDescriptionDefault
repoYesRepository name — one of your connected repos.
depthNoHow many hops to trace (default: 3, range: 1–5)
entityYesFunction name, file path, or module name
entity_typeYesType of entity

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnlyHint/destructiveHint annotations, the description discloses the return payload shape (risk, production callers by module/file, endpoints, cron jobs, DB operations), the cost-limiting semantics of hops and the depth range, and the important exclusion of test-file callers. That is real behavioral context an agent cannot get from the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core question, then clearly labeled CALL THIS WHEN, RETURNS, and USE INSTEAD OF sections. Each line carries distinct information, and the hop/exclusion caveats sit inside RETURNS where they belong.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, and the description compensates by enumerating the returned fields, the depth semantics, and the test-file exclusion. For a 4-parameter read-only analysis tool, an agent has everything needed to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds meaning the schema does not: hops are the 'shortest detected path' within the requested depth, and test-file callers are filtered out. It does not clarify the entity/entity_type pairing or the repo scoping beyond what the schema says.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening line 'What breaks if you change a function, file or module' names the exact analysis performed and the entity types it accepts, so an agent can recognize impact analysis immediately. It does not explicitly distinguish itself from close siblings like get_module_context or search_functions, which keeps it short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

A dedicated 'CALL THIS WHEN' block gives the triggering conditions (about to change a signature, refactor or delete; need callers or endpoints), and 'USE INSTEAD OF: following callers by hand' names the manual alternative it replaces. Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_codebase_mapA
Read-only

A repo's architecture in one call.

CALL THIS WHEN: • You need a repo's overall structure, or which module owns something • You don't know the repo's exact name in Pharaoh

RETURNS: Modules with file counts and LOC, module dependencies with two-way ones flagged, the files changed most in 90 days, and every endpoint with its handler file.

USE INSTEAD OF: directory listings, which omit dependency relationships.

NameRequiredDescriptionDefault
repoYesRepository name — one of your connected repos.
include_metricsNoInclude LOC, complexity, change frequency

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false, so safety is covered. The description adds real value beyond that by disclosing the composition of the result set (flagged two-way dependencies, 90-day change frequency, endpoint-to-handler mapping), which tells the agent this is a single synthesized read rather than a raw listing.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded one-line summary, then labeled WHEN / RETURNS / USE INSTEAD OF sections with no filler. Every line carries actionable information and the structure lets an agent scan to the relevant part immediately.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description correctly carries the burden of describing returns and does so concretely. It leaves minor gaps around scale behavior (large repos, truncation) and the name-resolution path it advertises, but an agent has enough to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented in the schema and the baseline of 3 applies. The description does not clarify how to resolve an unfamiliar 'repo' name despite flagging that case as a use reason, and never mentions include_metrics or what omitting it costs.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb+resource ('a repo's architecture in one call') and enumerates the concrete content: modules with file counts/LOC, dependencies, hot files, endpoints with handlers. It differentiates from directory listings, but does not distinguish itself from siblings like get_module_context or get_blast_radius, which overlap on module-level questions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

An explicit 'CALL THIS WHEN' block gives two clear triggering conditions (need overall structure / which module owns something; don't know the repo's exact name), which is strong positive guidance. It names a non-tool alternative ('directory listings') but gives no exclusions or pointers to the actual sibling tools an agent should weigh it against.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_module_contextA
Read-only

One module's full profile before you change it, in about 2K tokens.

CALL THIS WHEN: • You're about to change code in a module, or plan a change to it • You need what a module exports, depends on, or who calls into it

RETURNS: Files, LOC, exported signatures with complexity, imports in and out, DB tables, endpoints, cron jobs, env vars, and callers in other modules.

USE INSTEAD OF: reading every module file; callers can live elsewhere.

NameRequiredDescriptionDefault
repoYesRepository name — one of your connected repos.
moduleYesModule name (e.g., "crons", "slack", "db")

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnlyHint=true, destructiveHint=false), so the bar is lower; the description still adds real value by quoting a cost budget (~2K tokens) and enumerating the exact payload (files, LOC, signatures with complexity, imports, DB tables, endpoints, crons, env vars, callers). It stops short of noting size limits on very large modules or whether output is truncated.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the one-line value proposition and a cost estimate, then sectioned into WHEN / RETURNS / INSTEAD OF. Every block earns its place and nothing is restated.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With only two required params, no output schema, and no nested objects, the description covers everything an agent needs: trigger conditions, a token-cost expectation, and a full enumeration of the return contents. Nothing material is left to guesswork.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% — both `repo` and `module` are documented in the schema, including an example value for module. The description adds no syntax, naming, or format guidance beyond that, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a specific resource (one module's full profile) and frames the intent around pre-change reconnaissance, which is distinct from `get_codebase_map` (whole repo) or `search_functions` (targeted lookup). However it never names a sibling tool, so an agent must infer whether `get_blast_radius` or `pharaoh_recon` overlaps. Clear purpose, but sibling differentiation is implicit rather than stated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The 'CALL THIS WHEN' block gives two concrete triggering conditions (about to change a module; need exports/deps/callers) and 'USE INSTEAD OF' rules out reading files directly. What is missing is an explicit pointer to the actual sibling tools it supersedes or defers to — 'reading every module file' is a manual workflow, not a tool, so the routing decision against `get_blast_radius` remains unstated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_unused_codeA
Read-only

Find code nothing runs: functions no production entry point (endpoint, CLI command, cron job, event handler, worker, entry file) reaches. Pass functions to check whether specific functions are wired in.

CALL THIS WHEN: • Before cleaning up a module or deleting a function • After merging new code, to confirm an entry point reaches it

RETURNS: • Dead: unreached, named in no other file, and no production file imports its file. Safe to delete. • Possibly unused: unreached, but named in other files (string dispatch, dynamic loading) or its file is imported. Listed with the files that name it; check before deleting. • Used only by tests: exported functions and class methods only test files reference. With functions: each one's status, and the call path from an entry point when it's reachable.

USE INSTEAD OF: reference searches; references do not prove code runs.

NameRequiredDescriptionDefault
repoYesRepository name — one of your connected repos.
moduleNoLimit to one module
functionsNoFunction names or Class.method names to check instead of listing everything unused

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false, so the safety profile is known. The description goes further by defining the Dead/Possibly unused/Used only by tests categories and the caveat about string dispatch and dynamic loading, which materially affects how an agent should act on results. It does not, however, discuss scale or latency for large repos, and it partially duplicates the return-value content that would normally belong to an output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose is front-loaded in the first sentence and the CALL THIS WHEN / RETURNS / USE INSTEAD OF sections make it scannable. It is slightly longer than strictly necessary, since the RETURNS section restates details that an output schema would normally carry, but nothing is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description does a good job of explaining the three result categories and the `functions`-mode response. What is missing for a repo-wide analysis tool is any sense of cost or latency on large codebases, and the `module` scoping parameter is never mentioned in prose, leaving a gap in an otherwise complete picture.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% (all three parameters are described in the schema), so the baseline is 3. The description adds meaning for `functions` by framing it as a targeted check that returns status plus a call path from an entry point, but `module` and `repo` are left entirely to the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: find functions no production entry point (endpoint, CLI command, cron job, event handler, worker, entry file) reaches. It enumerates the exact classes of entry points that count, which lets an agent distinguish this from sibling tools like search_functions or get_codebase_map without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives an explicit CALL THIS WHEN section with two concrete triggers (before cleanup, after merging), plus a USE INSTEAD OF directive that names the alternative approach (reference searches) and the reason references are insufficient. When and why-not are both stated directly.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

pharaoh_accountA

Your Pharaoh plan, live repo and refreshes.

Pick one action and provide its fields; invalid combinations are rejected.

• status: each workspace's plan and live repo, the upgrade link, the setup page • set_free_repo { repo }: change a free workspace's live repo • refresh_repo { repo, full? }: re-map one live repo now

CALL THIS WHEN: • You want to know what plan you're on or which repo is live • A repo doesn't answer because it isn't live, or you want to switch which one is • You want to upgrade so every repo is live, or manage billing • You want a repo's graph refreshed before its next push

Flag reference: full = force a full rebuild, skipping the delta refresh.

NameRequiredDescriptionDefault
fullNoUsed by: refresh_repo. Force a full rebuild, skipping the delta refresh.
repoNoUsed by: set_free_repo (required), refresh_repo (required). Repo slug (owner/repo).
actionYesWhich account action to perform

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnlyHint=false and destructiveHint=false, and the description adds real behavioral context: invalid action/field combinations are rejected, and set_free_repo changes which repo is live while refresh_repo re-maps immediately. It doesn't note permission requirements or what happens to in-flight pushes during a refresh, so it stops short of the top.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded one-line summary, a compact per-action bullet list, a when-to-use block, and a flag glossary. Every section serves a distinct purpose with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a three-action dispatcher with no output schema, the description covers what each action does, what status returns (plan, live repo, upgrade link, setup page), and the flag semantics. An agent has everything needed to pick an action and populate fields correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the schema already tags each field with 'Used by: …' and the repo slug format. The description restates the per-action field mapping and the meaning of 'full' almost verbatim from the schema, so it adds little beyond the structured data.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific resource domain (plan, live repo, refreshes) and enumerates each of the three actions with what it does: status reads plan/live repo, set_free_repo changes a free workspace's live repo, refresh_repo re-maps a repo. The sibling tools are all code-analysis utilities, so the account-management scope is unmistakably distinct.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

A dedicated 'CALL THIS WHEN' block lists four concrete triggering conditions, including the failure mode ('A repo doesn't answer because it isn't live') that selects set_free_repo. It also implies when to use refresh_repo versus status, leaving little to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

pharaoh_reconA
Read-only

Several Pharaoh queries in one call, run in parallel: codebase map, module profiles, function searches, blast radius and module dependency paths.

CALL THIS WHEN: • Planning a change, reviewing a PR or assessing architecture, when you know what to check

RETURNS: Each requested section in one response. Per call: up to 5 modules, 3 searches, 3 blast radius targets, 3 dependency pairs.

USE INSTEAD OF: separate tool calls and file reads.

NameRequiredDescriptionDefault
repoYesRepository name — one of your connected repos.
modulesNoModules to profile (max 5)
functionsNoFunction searches (max 3)
include_mapNoInclude the codebase map (default true)
blast_radiusNoBlast radius targets (max 3)
dependenciesNoModule pairs to trace a dependency path between (max 3)

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false, so the safety profile is covered. The description adds genuinely new behavioral context: queries execute in parallel, results come back as 'each requested section in one response,' and per-call caps are enumerated. It stops short of describing failure modes (e.g., what happens if one section errors) or payload size.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded one-sentence purpose, then clearly labeled CALL THIS WHEN / RETURNS / USE INSTEAD OF sections. Every sentence carries distinct information: what it does, when to fire it, what comes back, and what it replaces.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a six-parameter batch tool with no output schema, the description is nearly sufficient: it explains that each requested section returns in one response and sets per-call limits. Some ambiguity remains about what a 'module profile' or 'codebase map' section actually contains, but annotations and full schema coverage fill most of the gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so every parameter including the nested blast_radius and dependencies objects is already documented in the schema. The description's per-call caps ('up to 5 modules, 3 searches, 3 blast radius targets, 3 dependency pairs') echo the schema's max annotations rather than adding new semantics. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb+resource (batched Pharaoh queries) and enumerates exactly which five query types it runs in parallel: codebase map, module profiles, function searches, blast radius, and dependency paths. An agent can distinguish it from every sibling (get_codebase_map, get_blast_radius, search_functions, etc.) without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'CALL THIS WHEN: Planning a change, reviewing a PR or assessing architecture, when you know what to check' gives explicit activation conditions, and 'USE INSTEAD OF: separate tool calls and file reads' names the alternatives it displaces. The qualifier 'when you know what to check' implicitly routes open-ended exploration elsewhere.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_functionsA
Read-only

Find functions by name or concept across the whole codebase.

CALL THIS WHEN: • You're about to write a function, helper or utility: check it doesn't already exist • You need to know where something is implemented (e.g. "retry", "validate", "notify")

RETURNS: Matching functions with file path, line range, module, signature, export status and complexity.

USE INSTEAD OF: grep, which misses aliases and re-exports and includes comments.

NameRequiredDescriptionDefault
fileNoOnly this file (full path matches exactly, a file name as a substring)
repoYesRepository name — one of your connected repos.
limitNoMax results (default 20, max 50)
queryYesFunction name or part of one
moduleNoOnly this module
offsetNoResults to skip (default 0)
exported_onlyNoExported functions only (default false)

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false, so safety is covered; the description adds value beyond that by disclosing the exact return payload fields (file path, line range, module, signature, export status, complexity). It does not mention pagination/limit behavior or ranking/relevance ordering, which is the remaining gap for a search tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded one-line purpose followed by three short labeled blocks (when, returns, alternative). No filler sentences; every line adds decision-relevant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 7 parameters, no output schema, and only read-only annotations, the description compensates well: it explains the return shape, the intent, and the alternative tool. Nothing an agent needs to select or invoke it correctly appears to be missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so every parameter (file, repo, limit, query, module, offset, exported_only) is already documented in structured form; the description only loosely implies 'name or concept' matching for query. Baseline 3 is appropriate since the schema carries the parameter burden.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Find functions') with explicit scope ('by name or concept across the whole codebase'), and the returns line clarifies it's a semantic/keyword search rather than a structural map like get_codebase_map. An agent can distinguish it from grep and from the sibling recon tools without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The 'CALL THIS WHEN' block gives two concrete triggering scenarios (pre-writing a helper, locating an implementation) and names the concrete alternative to avoid ('USE INSTEAD OF: grep'), including the reason grep fails (misses aliases and re-exports, includes comments). That is explicit when/when-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 21 tool updatesv0.1.1
    • Removedcheck_reachability
    • Changedget_blast_radius6 fields changed
      • addedInput schema / $schema
        Added value: +"http://json-schema.org/draft-07/schema#"
      • addedInput schema / properties / depth
        Added value: +{
        +  "description": "How many hops to trace (default: 3, range: 1–5)",
        +  "maximum": 5,
        +  "minimum": 1,
        +  "type": "integer"
        +}
      • addedInput schema / properties / entity
        Added value: +{
        +  "description": "Function name, file path, or module name",
        +  "type": "string"
        +}
      • addedInput schema / properties / entity_type
        Added value: +{
        +  "description": "Type of entity",
        +  "enum": [
        +    "function",
        +    "file",
        +    "module"
        +  ],
        +  "type": "string"
        +}
      • addedInput schema / properties / repo
        Added value: +{
        +  "description": "Repository name — one of your connected repos.",
        +  "type": "string"
        +}
      • addedInput schema / required
        Added value: +[
        +  "repo",
        +  "entity",
        +  "entity_type"
        +]
    • Changedget_codebase_map4 fields changed
      • addedInput schema / $schema
        Added value: +"http://json-schema.org/draft-07/schema#"
      • addedInput schema / properties / include_metrics
        Added value: +{
        +  "description": "Include LOC, complexity, change frequency",
        +  "type": "boolean"
        +}
      • addedInput schema / properties / repo
        Added value: +{
        +  "description": "Repository name — one of your connected repos.",
        +  "type": "string"
        +}
      • addedInput schema / required
        Added value: +[
        +  "repo"
        +]
    • Removedget_consolidation_opportunities
    • Removedget_cross_repo_audit
    • Removedget_design_system
    • Changedget_module_context4 fields changed
      • addedInput schema / $schema
        Added value: +"http://json-schema.org/draft-07/schema#"
      • addedInput schema / properties / module
        Added value: +{
        +  "description": "Module name (e.g., \"crons\", \"slack\", \"db\")",
        +  "type": "string"
        +}
      • addedInput schema / properties / repo
        Added value: +{
        +  "description": "Repository name — one of your connected repos.",
        +  "type": "string"
        +}
      • addedInput schema / required
        Added value: +[
        +  "repo",
        +  "module"
        +]
    • Removedget_pharaoh_docs
    • Removedget_regression_risk
    • Removedget_test_coverage
    • Changedget_unused_code5 fields changed
      • addedInput schema / $schema
        Added value: +"http://json-schema.org/draft-07/schema#"
      • addedInput schema / properties / functions
        Added value: +{
        +  "description": "Function names or Class.method names to check instead of listing everything unused",
        +  "items": {
        +    "type": "string"
        +  },
        +  "maxItems": 20,
        +  "type": "array"
        +}
      • addedInput schema / properties / module
        Added value: +{
        +  "description": "Limit to one module",
        +  "type": "string"
        +}
      • addedInput schema / properties / repo
        Added value: +{
        +  "description": "Repository name — one of your connected repos.",
        +  "type": "string"
        +}
      • addedInput schema / required
        Added value: +[
        +  "repo"
        +]
    • Removedget_vision_docs
    • Removedget_vision_gaps
    • Removedmap_open_source_repo
    • Changedpharaoh_account5 fields changed
      • addedInput schema / $schema
        Added value: +"http://json-schema.org/draft-07/schema#"
      • addedInput schema / properties / action
        Added value: +{
        +  "description": "Which account action to perform",
        +  "enum": [
        +    "status",
        +    "set_free_repo",
        +    "refresh_repo"
        +  ],
        +  "type": "string"
        +}
      • addedInput schema / properties / full
        Added value: +{
        +  "description": "Used by: refresh_repo. Force a full rebuild, skipping the delta refresh.",
        +  "type": "boolean"
        +}
      • addedInput schema / properties / repo
        Added value: +{
        +  "description": "Used by: set_free_repo (required), refresh_repo (required). Repo slug (owner/repo).",
        +  "type": "string"
        +}
      • addedInput schema / required
        Added value: +[
        +  "action"
        +]
    • Removedpharaoh_feedback
    • Changedpharaoh_recon8 fields changed
      • addedInput schema / $schema
        Added value: +"http://json-schema.org/draft-07/schema#"
      • addedInput schema / properties / blast_radius
        Added value: +{
        +  "description": "Blast radius targets (max 3)",
        +  "items": {
        +    "properties": {
        +      "entity": {
        +        "description": "Function, file or module name",
        +        "type": "string"
        +      },
        +      "entity_type": {
        +        "description": "Default: function",
        +        "enum": [
        +          "function",
        +          "file",
        +          "module"
        +        ],
        +        "type": "string"
        +      }
        +    },
        +    "required": [
        +      "entity"
        +    ],
        +    "type": "object"
        +  },
        +  "type": "array"
        +}
      • addedInput schema / properties / dependencies
        Added value: +{
        +  "description": "Module pairs to trace a dependency path between (max 3)",
        +  "items": {
        +    "properties": {
        +      "from": {
        +        "type": "string"
        +      },
        +      "to": {
        +        "type": "string"
        +      }
        +    },
        +    "required": [
        +      "from",
        +      "to"
        +    ],
        +    "type": "object"
        +  },
        +  "type": "array"
        +}
      • addedInput schema / properties / functions
        Added value: +{
        +  "description": "Function searches (max 3)",
        +  "items": {
        +    "type": "string"
        +  },
        +  "type": "array"
        +}
      • addedInput schema / properties / include_map
        Added value: +{
        +  "description": "Include the codebase map (default true)",
        +  "type": "boolean"
        +}
      • addedInput schema / properties / modules
        Added value: +{
        +  "description": "Modules to profile (max 5)",
        +  "items": {
        +    "type": "string"
        +  },
        +  "type": "array"
        +}
      • addedInput schema / properties / repo
        Added value: +{
        +  "description": "Repository name — one of your connected repos.",
        +  "type": "string"
        +}
      • addedInput schema / required
        Added value: +[
        +  "repo"
        +]
    • Removedquery_dependencies
    • Removedrequest_upload
    • Changedsearch_functions9 fields changed
      • addedInput schema / $schema
        Added value: +"http://json-schema.org/draft-07/schema#"
      • addedInput schema / properties / exported_only
        Added value: +{
        +  "description": "Exported functions only (default false)",
        +  "type": "boolean"
        +}
      • addedInput schema / properties / file
        Added value: +{
        +  "description": "Only this file (full path matches exactly, a file name as a substring)",
        +  "type": "string"
        +}
      • addedInput schema / properties / limit
        Added value: +{
        +  "description": "Max results (default 20, max 50)",
        +  "type": "number"
        +}
      • addedInput schema / properties / module
        Added value: +{
        +  "description": "Only this module",
        +  "type": "string"
        +}
      • addedInput schema / properties / offset
        Added value: +{
        +  "description": "Results to skip (default 0)",
        +  "type": "number"
        +}
      • addedInput schema / properties / query
        Added value: +{
        +  "description": "Function name or part of one",
        +  "maxLength": 500,
        +  "type": "string"
        +}
      • addedInput schema / properties / repo
        Added value: +{
        +  "description": "Repository name — one of your connected repos.",
        +  "type": "string"
        +}
      • addedInput schema / required
        Added value: +[
        +  "repo",
        +  "query"
        +]
    • Removedsetup_environment
  2. 21 tool updatesv0.1.0
    • First observedcheck_reachability
    • First observedget_blast_radius
    • First observedget_codebase_map
    • First observedget_consolidation_opportunities
    • First observedget_cross_repo_audit
    • First observedget_design_system
    • First observedget_module_context
    • First observedget_pharaoh_docs
    • First observedget_regression_risk
    • First observedget_test_coverage
    • First observedget_unused_code
    • First observedget_vision_docs
    • First observedget_vision_gaps
    • First observedmap_open_source_repo
    • First observedpharaoh_account
    • First observedpharaoh_feedback
    • First observedpharaoh_recon
    • First observedquery_dependencies
    • First observedrequest_upload
    • First observedsearch_functions
    • First observedsetup_environment

TDQS

A4.2/5.0

Scored across 7 tools

Disambiguation4/5

Most tools target clearly distinct questions: architecture map, module profile, blast radius, function search, dead code, account. The only real overlap is pharaoh_recon, which bundles codebase map, module profiles, searches, and blast radius, so an agent might hesitate between it and the individual tools. The descriptions do mitigate this with explicit 'call this when' guidance, but the batch wrapper is inherently a superset of other tools.

Naming Consistency4/5

Mostly consistent snake_case with a verb-first pattern (get_codebase_map, get_module_context, get_blast_radius, search_functions, get_unused_code). The two pharaoh_-prefixed tools (pharaoh_recon, pharaoh_account) break the verb_noun convention slightly, but remain readable and logically clustered as server-management operations.

Tool Count5/5

Seven tools is well-scoped for a codebase-intelligence server, and each tool earns its place: map, module context, impact analysis, function search, dead-code detection, batch recon, and account management. No padding or obviously trivial tool.

Completeness4/5

Coverage is strong for architecture understanding, change impact, function discovery, and unused-code cleanup. The notable gap is that none of the tools return actual source code bodies or line contents—agents can locate and assess functions but cannot read the implementation, which may force a fallback to another file-access mechanism.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    A remote Model Context Protocol server acting as middleware to the Sentry API, allowing AI assistants like Claude to access Sentry data and functionality through natural language interfaces.
    7
    44 npm
    949
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    A Model Context Protocol server that fetches up-to-date, version-specific documentation and code examples from libraries directly into LLM prompts, helping developers get accurate answers without outdated or hallucinated information.
    8
    2
    394,752 npm
    63,897
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    This read-only MCP Server allows you to connect to GitHub data from Claude Desktop through CData JDBC Drivers. For full CRUD support, check out the first managed MCP platform: CData Connect AI (https://www.cdata.com/ai/).
    MIT
  • A
    license
    Not graded
    quality
    F
    maintenance
    Provides AI-enhanced code search capabilities by integrating with Sourcegraph, allowing AI assistants to search across multiple repositories and codebases with advanced query syntax.
    42
    MIT