token-context-mcp
Token Context MCP
token-context-mcp — это локальный read-only MCP-сервер, который индексирует зарегистрированные репозитории и возвращает небольшие пакеты контекста кода с хешем исходного кода. Он предназначен для сокращения масштабного сканирования репозиториев, не претендуя на то, что синтаксический анализ является полной семантической моделью.
Что реализовано в версии 0.1.0
явная регистрация репозиториев; инструменты MCP получают
repo_id, а не произвольный путь;разбор Tree-sitter для Python, JavaScript и TypeScript/TSX;
SQLite-снимки с файлами, символами, лексическими связями, манифестами и хешами исходников;
карты репозиториев с токен-бюджетом, скелеты на основе исходного кода, контекст символов и ограниченные срезы влияния;
строго read-only набор инструментов поверх MCP
stdio;жёсткие правила запрета для секретов/метаданных, проверки обхода путей/точек повторной обработки (reparse points) и лимиты ресурсов;
стенды безопасности, интеграции и бенчмарков, которые приводят доказательства, а не заявляют об универсальной экономии.
Related MCP server: io.github.pmgarg/cgraphy
Не-цели и граница безопасности
Этот сервер не редактирует файлы, не выполняет shell-команды, не слушает HTTP, не вызывает сетевые API и не принимает произвольные пути к репозиториям. stdio — это не песочница ОС: если требуется принудительная сетевая граница, разворачивайте сервер с политикой no-egress/минимальных привилегий. Результаты инструментов всё равно могут попадать в LLM-контекст хоста MCP.
Быстрый старт
uv sync --extra dev
uv run token-context register --repo-id demo --root D:\AI\some-repo
uv run token-context index --repo-id demo
uv run token-context status --repo-id demo
uv run token-context serveПо умолчанию реестр является глобальным для текущего пользователя Windows и находится в %APPDATA%\token-context-mcp\repos.toml; он не зависит от текущей рабочей директории. Установите TOKEN_CONTEXT_CONFIG, чтобы использовать явный общий/переносимый путь к TOML. Для Codex запускайте пакет через настроенную MCP-команду stdio. Используйте только read-only инструменты, перечисленные сервером.
Безопасная регистрация репозиториев
Регистрация — это явное локальное решение о добавлении в список разрешённых (allowlist), а не загрузка, операция Git или изменение исходного кода. --repo-id — это стабильный идентификатор, используемый в MCP-запросах; --root — единственная каноническая директория репозитория, которую серверу разрешено читать.
Set-Location D:\AI\token-context-mcp
uv run token-context register --repo-id video-lecturer --root D:\AI\video_lecturer
uv run token-context index --repo-id video-lecturer
uv run token-context status --repo-id video-lecturerИспользуйте конкретный корень проекта, а не широкую родительскую директорию вроде D:\AI. Повторно запускайте index после значимых изменений; он переиспользует неизменённые результаты разбора. Существующие регистрации и базы данных индекса являются общими для всех MCP-процессов, запущенных под тем же пользователем Windows.
Чтобы использовать другое расположение реестра для одного терминала или переносимого развёртывания, укажите его до регистрации, индексации и запуска MCP-сервера:
$env:TOKEN_CONTEXT_CONFIG = 'D:\trusted-shared-config\repos.toml'
uv run token-context register --repo-id myrepo --root D:\projects\myrepo
uv run token-context index --repo-id myrepoИспользование из кодинг-агентов
Это локальный MCP-сервер stdio. Он работает с клиентом, который умеет запускать локальные процессы и у которого uv доступен в PATH. Каждый клиентский процесс, запущенный под тем же пользователем Windows, автоматически читает тот же глобальный реестр репозиториев. После изменения реестра или его политики перезапустите клиент.
Клиент | Поддержка локального | Статус настройки |
Codex CLI / IDE | Да | Установлен и протестирован по полному циклу (end-to-end) на этой машине. |
Claude Code | Да | Поддерживается; добавьте его на уровне пользователя или проекта. |
GitHub Copilot CLI | Да | Поддерживается через пользовательскую конфигурацию CLI или конфигурацию проекта. |
GitHub Copilot Chat in VS Code | Да | Поддерживается через |
Google Antigravity IDE / CLI | Да | Поддерживается через глобальный |
Claude Desktop | Условно | Поддерживает локальный MCP через Desktop Extensions, но этот проект пока не публикует пакет |
Облачные/веб-агенты не могут запустить этот сервер на этой машине с Windows. Им требуется отдельно развёрнутый аутентифицированный HTTP MCP-сервис; этот проект намеренно поставляет только локальный транспорт stdio.
Codex
Подключить Codex к token-context-mcp можно двумя способами:
Способ A: через Codex CLI
codex mcp add token-context -- uv run --directory D:\AI\token-context-mcp token-context serve --transport stdio
codex mcp get token-contextСпособ B: прямой файл конфигурации (~/.codex/config.toml)
Если команда codex недоступна в вашем PowerShell PATH, добавьте сервер напрямую в %USERPROFILE%\.codex\config.toml:
[mcp_servers.token-context]
command = "uv"
args = ["run", "--directory", "D:\\AI\\token-context-mcp", "token-context", "serve", "--transport", "stdio"]Совет для GUI: Если Codex не может найти
uv, замените"uv"абсолютным путём:"C:\\Users\\<YourUser>\\AppData\\Roaming\\Python\\Python312\\Scripts\\uv.exe".
Claude (Claude Code & Claude Desktop)
1. Claude Code (CLI)
claude mcp add --transport stdio --scope user token-context -- uv run --directory D:\AI\token-context-mcp token-context serve --transport stdio
claude mcp get token-context2. Claude Desktop (приложение Windows)
Откройте или создайте %APPDATA%\Claude\claude_desktop_config.json (например, C:\Users\<YourUser>\AppData\Roaming\Claude\claude_desktop_config.json) и добавьте:
{
"mcpServers": {
"token-context": {
"command": "uv",
"args": [
"run",
"--directory",
"D:\\AI\\token-context-mcp",
"token-context",
"serve",
"--transport",
"stdio"
]
}
}
}Регистрация и использование task2-demo
1. Регистрация и индексация репозитория
Выполните следующие команды в PowerShell (регистрация происходит глобально в %APPDATA%\token-context-mcp\repos.toml):
# Register repository
uv run --directory D:\AI\token-context-mcp token-context register --repo-id task2-demo --root D:\AI\video_lecturer\task\task2_demo
# Build index
uv run --directory D:\AI\token-context-mcp token-context index --repo-id task2-demo
# Check status
uv run --directory D:\AI\token-context-mcp token-context status --repo-id task2-demo2. Пример промпта для Codex / Claude / Antigravity
После перезапуска Codex, Claude или Antigravity отправьте этот промпт в чат:
Use token-context for repo_id "task2-demo".
Start with get_repo_map at 512 tokens to inspect the project structure,
then use get_file_skeleton for "src/lecturer_demo/cli.py".Если клиенту не удаётся запустить сервер, сначала выполните в PowerShell uv run --directory D:\AI\token-context-mcp token-context serve --transport stdio, чтобы проверить его окружение Python. GUI-клиенты иногда не наследуют PATH терминала; в этом случае укажите command как абсолютный путь к uv.exe, затем перезапустите клиент.
Официальные справочники по настройке клиентов: OpenAI Codex, Claude Code, GitHub Copilot CLI, GitHub Copilot in IDEs, Antigravity и Claude Desktop.
Лимиты токенов и ресурсов
В глобальном реестре действует принудительно применяемая политика [server]. Чтобы применить изменение, отредактируйте TOML и перезапустите Codex:
[server]
max_request_bytes = 65536
max_result_tokens = 2048
max_graph_nodes = 75
max_symbol_results = 15
network_policy = "declared-deny-not-enforced"max_result_tokensограничивает вывод карт, скелетов и контекста символов. Это основной регулятор потребления контекста модели.max_graph_nodesограничивает обход срезов влияния.max_symbol_resultsограничивает результаты поиска.max_request_bytesотклоняет слишком большие входные данные MCP.
Меньшие значения сокращают количество токенов, но приводят к большему усечению и дополнительным вызовам. Сервер ограничивает только возвращаемый им контекст; он не может наложить жёсткий лимит биллинга провайдера на всю сессию Codex/модели.
Команды
register: добавляет канонический корень репозитория, не являющийся ссылкой, в локальный TOML-реестр.index: создаёт атомарный SQLite-снимок и JSON-манифест.status: проверяет сохранённый снимок и обнаруживает файлы, изменённые после индексации.serve: запускает MCP-серверstdio.benchmark-report: вычисляет сводную статистику из инструментированного JSONL-журнала выполнения.release-materials: создаёт стартовый артефакт SBOM/происхождения (provenance); подписание и подтверждение песочницы ОС остаются обязанностями развёртывания.
Контракт инструментов
get_repo_mapfind_symbolsget_file_skeletonget_symbol_contextget_impact_sliceget_index_status
Каждый результат — это JSON-конверт с index_run_id, freshness, бюджетом, предупреждениями и подтверждением из исходного кода. Лексическая связь явно помечается как ambiguous; неразрешённая связь не является доказательством отсутствия отношения.
Разработка
uv run pytest
uv run token-context release-materials --output supply-chainМодель угроз, инструкции по интеграции и протокол бенчмарков см. в SECURITY.md и docs/.
Available Tools
10 toolsfind_symbolsFind symbolsC
Find source-backed symbols by name or qualified-name pattern. Returns IDs and spans, never arbitrary files.
| Name | Required | Description | Default |
|---|---|---|---|
| kind | No | ||
| limit | No | ||
| pattern | Yes | ||
| profile | No | ||
| repo_id | Yes | ||
| max_tokens | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, but it does add real behavioral context: results are "source-backed" and return "IDs and spans, never arbitrary files," which tells the agent the result shape and constraints. It omits read-only nature, pagination, and any failure/empty-result behavior for a 6-param tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences, front-loaded with the core action and followed by the return-value constraint. No wasted words, though the extreme brevity is part of why parameter detail is missing.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 6-parameter tool with no annotations, no output schema, and 0% schema description coverage, the definition is under-specified. It states return contents but leaves parameter meaning and usage boundaries to inference.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate — but it only hints at the pattern parameter. kind, profile, limit, max_tokens, and repo_id are undocumented anywhere, leaving half the parameter surface opaque (e.g., what kind values are valid, what profile selects).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
"Find source-backed symbols by name or qualified-name pattern" gives a specific verb (find) and resource (symbols) plus the lookup key. It clearly distinguishes a symbol search from file-level siblings like search_source, though it never names an alternative explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when the tool is useful (name/qualified-name lookup) but offers no explicit when-to-use, when-not-to-use, or routing guidance among the many symbol-related siblings (inspect_symbol, get_symbol_context, search_source). An agent must infer the boundary itself.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_file_skeletonFile skeletonC
Imports and source-backed headers from one file. Function bodies elided by default.
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | ||
| profile | No | ||
| repo_id | Yes | ||
| max_tokens | No | ||
| include_private | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It usefully discloses that function bodies are elided by default, which is a meaningful behavioral trait, but says nothing about permissions, whether the operation is read-only, truncation behavior from max_tokens, or what the profile parameter alters.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no filler, and the core output (imports and headers) is front-loaded. The phrasing 'Imports and source-backed headers' is slightly awkward but compact.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter tool with no annotations, no output schema, and 0% schema description coverage, this description is far too thin. It omits parameter meanings, privacy behavior, truncation behavior, and any sense of output shape beyond the elision default.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across 5 parameters, so the description must compensate but largely does not. 'One file' weakly implies path/repo_id, and 'by default' weakly hints at profile or include_private configurability, but max_tokens, include_private, and the profile semantics remain entirely undocumented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states the specific resource (one file) and what is returned (imports and source-backed headers), and distinguishes the resource from siblings like search_source or inspect_symbol by naming the skeleton concept. It is clear but does not explicitly differentiate itself from the sibling set.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to use this tool versus alternatives such as inspect_symbol, get_symbol_context, or search_source. The agent must infer that a file skeleton is preferred over symbol-level or source-text tools, which is not stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_impact_sliceImpact candidate sliceC
Traverse observed caller/callee edges from a symbol. Candidate impact slice, not complete blast radius.
| Name | Required | Description | Default |
|---|---|---|---|
| depth | No | ||
| profile | No | ||
| repo_id | Yes | ||
| direction | No | both | |
| max_nodes | No | ||
| symbol_id | Yes | ||
| max_tokens | No | ||
| min_confidence | No | ||
| filter_ambiguous | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full behavioral burden. It usefully discloses that edges are 'observed' and the result is a 'candidate impact slice, not complete blast radius,' but omits permissions, return behavior, and limits for its 9 parameters.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short, front-loaded sentences with no wasted words. The scope caveat is placed immediately after the core action, making the description easy to scan.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 9 parameters, no output schema, and no annotations, the description is too thin. It gives the core purpose and a scope caveat but leaves parameter behavior and invocation guidance almost entirely undocumented.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% for 9 parameters, and the description adds no meaning beyond 'from a symbol' and 'caller/callee edges.' It does not explain depth, profile, max_nodes, max_tokens, min_confidence, or filter_ambiguous.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific action: traverse observed caller/callee edges from a symbol. The added caveat 'Candidate impact slice, not complete blast radius' clarifies scope, though it does not name sibling alternatives like get_module_dependents.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit when-to-use guidance or alternatives are provided. The caveat 'not complete blast radius' hints at a limitation but does not route the agent to another tool or condition.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_index_statusIndex statusB
Active snapshot metadata and paths changed since indexing. Run before relying on graph results.
| Name | Required | Description | Default |
|---|---|---|---|
| repo_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses the timing guidance and that it reports index freshness/changed paths, but it does not explicitly state read-only safety, side effects, permissions, or freshness semantics, leaving behavioral traits partly implicit.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no filler and usage guidance front-loaded after the return summary. The first sentence is a fragment, but the description avoids bloat.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no annotations, no output schema, and no parameter descriptions, the description is under-informative: it covers return content at a high level but omits repo_id semantics and safety/profile details. It is not complete enough for an agent to call without additional assumptions.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must define repo_id, but it never mentions the parameter. The single required parameter's meaning, format, and scope are left to inference from its name alone.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description supplies the data returned (active snapshot metadata, changed paths since indexing) but never uses a clear verb and does not differentiate this status check from the graph-query siblings. An agent can infer it is a read, but the purpose is not stated as explicitly as a 'returns X' statement would be.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives a clear trigger: run before relying on graph results. No when-not condition or alternative tool is named, so it stops short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_module_dependentsModule dependentsC
Lexical import relationships for indexed path or module. Dynamic imports flagged. Not semantic resolution.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | ||
| module | No | ||
| profile | No | ||
| repo_id | Yes | ||
| max_tokens | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does disclose meaningful caveats: results are lexical rather than semantic, and dynamic imports are flagged separately. However, it never clarifies directionality (do dependents mean files that import this module, or its imports?), nor result format, limits, or indexing requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short fragments, front-loaded with the core purpose and the caveat, with no filler. It is telegraphic to the point of strain but every clause carries information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter tool with no schema descriptions, no annotations, and no output schema, the description leaves too much unaddressed: required repo_id, profile, max_tokens, and the direction of the relationship. An agent could not invoke this reliably without guessing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across 5 parameters and the description only addresses two of them (path, module). repo_id is required yet unexplained, and profile and max_tokens are never mentioned, so the description does not compensate for the schema gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific resource (lexical import relationships) and scopes it to an indexed path or module, which is enough to tell it apart from siblings like get_repo_map or find_symbols. The verb is implicit ('get' in the name), but the returned concept is clearly identified.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use guidance, no prerequisites, and no reference to sibling alternatives such as get_impact_slice or get_symbol_context. The phrase 'for indexed path or module' hints at applicability but does not guide tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_repo_mapRepository mapB
Ranked definitions for a repo_id within budget. Compact entries are [id, path:line, kind/name]; format='full' adds signatures and evidence. For orientation, not proof of full coverage.
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | ||
| format | No | ||
| profile | No | ||
| repo_id | Yes | ||
| budget_tokens | No | ||
| include_tests | No | ||
| include_omitted_ids | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description carries the full burden. It usefully discloses the entry format, the budget constraint ('within budget'), and a coverage caveat, but says nothing about auth, performance, or how budget truncation interacts with include_omitted_ids.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three dense sentences, front-loaded with the core purpose and output contract, with the caveat last. No filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 7-parameter tool with no annotations and no output schema, leaving four parameters unexplained and omitting any routing guidance to the many sibling discovery tools is a substantial gap, even though the format and coverage caveat are handled well.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% with 7 parameters. Only format='full' vs compact is explained and budget_tokens is hinted at via 'within budget'. query, profile, include_tests, and include_omitted_ids are entirely undocumented in both schema and description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a concrete verb+resource ('Ranked definitions for a repo_id') and the two output shapes, which distinguishes it from siblings like get_file_skeleton and get_symbol_context. It does not explicitly name the sibling it complements, so it stops short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'For orientation, not proof of full coverage' implies when the tool is appropriate, but there is no explicit when-to-use versus alternatives such as get_file_skeleton or inspect_symbol. Usage is suggested rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_symbol_contextSymbol contextC
Bounded source packet for indexed symbol and observed edges. Check freshness and ambiguity warnings. A body larger than max_tokens is read in windows with body_offset_line.
| Name | Required | Description | Default |
|---|---|---|---|
| depth | No | ||
| profile | No | ||
| repo_id | Yes | ||
| symbol_id | Yes | ||
| max_tokens | No | ||
| include_body | No | ||
| body_offset_line | No | ||
| include_omitted_ids | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It usefully discloses that the result is bounded and that large bodies are read in windows via max_tokens and body_offset_line, but it omits permissions, error behavior, and freshness/ambiguity warning semantics.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loads the core purpose, then adds two relevant behavioral notes. It avoids repetition, though the wording is terse enough that some important details feel compressed rather than clarified.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For an 8-parameter tool with no annotations, no output schema, and 0% schema description coverage, the description is materially incomplete. It covers the surface purpose and windowing behavior but leaves most parameters, return structure, and alternative-tool selection unexplained.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and there are 8 parameters, so the description must compensate. It explains only max_tokens and body_offset_line indirectly; depth, profile, include_body, include_omitted_ids, repo_id, and symbol_id remain undocumented beyond their titles.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description identifies a specific resource: a bounded source packet for an indexed symbol plus observed edges. It communicates what the tool returns, but it does not distinguish the tool from siblings such as inspect_symbol or get_file_skeleton, so an agent must infer the boundary.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives output-related advice ('Check freshness and ambiguity warnings') but does not state when to choose this tool over alternatives like inspect_symbol or find_symbols. No prerequisites, exclusions, or selection criteria are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
inspect_symbolInspect symbol (composite)C
Resolve a symbol and its immediate graph in one call. view='full' returns a context packet: body, callee/caller signatures, related tests. Use before editing a symbol.
| Name | Required | Description | Default |
|---|---|---|---|
| view | No | normal | |
| query | Yes | ||
| repo_id | Yes | ||
| budget_tokens | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It doesn't state whether this is read-only, whether there are rate limits or caching behavior, what 'immediate graph' means in practice, or how the view modes affect behavior. The token budget implication is only hinted at.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences, front-loaded with purpose. No wasted words, though the 'view=full' detail would be better placed after establishing the baseline behavior.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 4-param composite tool with no annotations and no output schema, the description is thin. It doesn't explain the return packet shape beyond a partial list, doesn't document the budget_tokens interaction, and leaves view semantics mostly opaque.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must compensate for undocumented params. It mentions view='full' but doesn't explain what 'minimal' or 'normal' return, doesn't clarify the required 'query' semantics (symbol name? pattern?), and never mentions repo_id or budget_tokens.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource: 'Resolve a symbol and its immediate graph in one call.' Clear on what the tool does, though it doesn't distinguish itself from sibling get_symbol_context, which likely overlaps significantly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Says 'Use before editing a symbol,' which implies a workflow context. But it gives no explicit when-not-to-use guidance and doesn't differentiate from close siblings like get_symbol_context or find_symbols.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_repositoriesRegistered repositoriesA
List registered repository IDs. Call this first; roots are never exposed.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the burden. It adds one useful behavioral fact ('roots are never exposed'), which tells the agent something about result scoping. However it omits return volume, ordering, and whether an index must exist, leaving the safety/behavioral profile thin for a tool with zero annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, purpose front-loaded, followed by the usage cue and the scoping note. Every clause earns its place with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
A zero-param read tool with no output schema is largely self-describing; the description names what is returned (IDs) and a scope caveat. It could have mentioned whether an index must be built first, but nothing essential to invoking it is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so per the rubric the baseline is 4. There is nothing for the description to clarify beyond confirming it is a no-argument listing call.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('List registered repository IDs') and even specifies the return granularity (IDs, not full repo objects). It doesn't explicitly differentiate from siblings like get_repo_map or get_index_status, but the resource is distinct enough that confusion is unlikely.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'Call this first' gives a clear ordering cue for the workflow, which is meaningful for a discovery tool. It does not name an alternative or a when-not condition, so it falls short of a full 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_sourceSearch sourceB
Full-text search ranked by enclosing symbol. expand='graph' (default for profile 'locate') adds resolved callers/callees as neighbors. Call before reading files.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| query | Yes | ||
| expand | No | auto | |
| profile | No | ||
| repo_id | Yes | ||
| expand_k | No | ||
| max_tokens | No | ||
| expand_hops | No | ||
| min_confidence | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose two real behaviors: symbol-based ranking and graph expansion that adds resolved callers/callees as neighbors. It says nothing about permissions, cost/latency, ranking fallback, or what happens with the non-enum parameters, so transparency is partial.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with the core purpose, then the expand behavior, then a usage cue. No padding, though the parameter detail sentence is dense and cryptic without surrounding context.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
A 9-parameter tool with no annotations, no output schema, and 0% schema description coverage needs considerably more from the description. It explains only one parameter interaction and omits the meaning, defaults, and effects of most arguments, leaving an agent under-equipped to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and there are 9 parameters, so the description must compensate. It only clarifies expand='graph' and its interaction with profile 'locate', leaving limit, max_tokens, expand_k, expand_hops, and min_confidence completely undocumented in both schema and description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ("Full-text search") and adds a distinguishing behavioral detail: results are ranked by enclosing symbol. It does not, however, differentiate itself from siblings like find_symbols or inspect_symbol, so an agent cannot tell from the text alone which search tool to pick.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
"Call before reading files" gives an implied usage context, suggesting this is a discovery/entry-point tool. But there is no when-not guidance and no explicit routing to alternatives such as find_symbols for symbol lookups, so the guidance stays at implication level.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
v0.3.3- Changed
get_symbol_context1 field changed- added
Input schema / properties / body_offset_lineAdded value: +{ + "anyOf": [ + { + "type": "integer" + }, + { + "type": "null" + } + ], + "default": null, + "title": "Body Offset Line" +}
3 tool updates
v0.2.0- Changed
get_impact_slice2 fields changed- added
Input schema / properties / filter_ambiguousAdded value: +{ + "default": true, + "title": "Filter Ambiguous", + "type": "boolean" +} - added
Input schema / properties / min_confidenceAdded value: +{ + "anyOf": [ + { + "type": "number" + }, + { + "type": "null" + } + ], + "default": null, + "title": "Min Confidence" +}
- Added
inspect_symbol - Changed
search_source4 fields changed- added
Input schema / properties / expandAdded value: +{ + "default": "auto", + "enum": [ + "auto", + "none", + "graph" + ], + "title": "Expand", + "type": "string" +} - added
Input schema / properties / expand_hopsAdded value: +{ + "default": 1, + "title": "Expand Hops", + "type": "integer" +} - added
Input schema / properties / expand_kAdded value: +{ + "default": 3, + "title": "Expand K", + "type": "integer" +} - added
Input schema / properties / min_confidenceAdded value: +{ + "default": 0.6, + "title": "Min Confidence", + "type": "number" +}
9 tool updates
v0.1.0- First observed
find_symbols - First observed
get_file_skeleton - First observed
get_impact_slice - First observed
get_index_status - First observed
get_module_dependents - First observed
get_repo_map - First observed
get_symbol_context - First observed
list_repositories - First observed
search_source
TDQS
Scored across 10 tools
Most tools target distinct phases (list repos, index status, search, orient, read context, traverse graph), but boundaries blur in places: get_symbol_context and inspect_symbol both return source packets plus edges for a symbol, and get_impact_slice, get_module_dependents, and search_source(expand='graph') all traverse relationships. Descriptions attempt to differentiate via 'one call', 'lexical vs semantic', and 'candidate vs complete', but an agent could still misselect among them.
Every tool follows a consistent verb_noun snake_case pattern (get_*, find_*, list_*, search_*, inspect_*). Prefixes map cleanly to intent: get for retrieval, find/list/search for discovery. No mixed conventions.
Ten tools is well-scoped for a code-context/index server. Each tool earns its place across discovery, search, orientation, symbol reading, and graph traversal, with no redundant filler.
Coverage spans repository listing, index freshness, symbol search, orientation maps, file skeletons, bounded source context, and impact traversal — a solid read-only surface with no obvious dead ends. Minor gaps like direct line-range/file-read or cross-repo comparison are workable around via existing tools.
Maintenance
Related MCP Connectors
Cache source-backed repository context so coding agents can reuse knowledge across sessions.
Hosted code graph over MCP: exact callers, dependencies, and cross-repo blast radius for AI agents.
Codebase intelligence for agents: 152 structured artifacts across 21 programs, one call.
Team memory for AI coding agents and code reviews, reviewed by humans and served over MCP.
Related MCP Servers
- AlicenseAqualityAmaintenanceLocal, read-only MCP server for coding agents. Indexes repeated implementations in your repository (FastAPI routes, pytest fixtures, Pydantic and SQLAlchemy models) and returns source-backed examples with a bounded read plan, or a typed UNKNOWN when evidence is insufficient. No LLM or network calls.13 npmMIT
- AlicenseNot gradedqualityCmaintenanceEnables AI coding agents to query a codebase as a knowledge graph, providing token-budgeted context, search, and impact analysis via MCP tools.33 PyPIMIT
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to locally search, query, and understand codebases with token-efficient context, dependency graphs, history, architecture diagrams, and metrics through MCP.15 npm3MIT
- AlicenseNot gradedqualityBmaintenanceEnables AI coding agents to retrieve token-budgeted project context, search code symbols, look up definitions, and access project memory and cross-project learnings through local MCP tools. It reduces redundant exploration by supplying the smallest useful context from a deterministic, local-first index.MIT