Stores and manages code audit data (projects, files, signatures, dependencies, findings) in a PostgreSQL database, enabling persistent import, status, and briefing operations.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
An MCP server that indexes your codebase into a local SQLite database, so an AI coding agent can query symbols, call sites, imports, comments, diagnostics and file text instead of reading files one by one.
Rust is the only tested language.
Other languages are parsed with tree-sitter grammars that are downloaded the
first time a repo contains them. They usually work, but they are untested:
treat their results as best-effort. When a repo contains an untested language,
SlugAudit says so in its tool responses (the notices field), so the agent
knows which answers to double-check.
If you hit a problem with a language other than Rust, please open an issue, or contribute a tested adapter for it.
Related MCP server: Code Expert MCP Server
Before every tool call, SlugAudit re-hashes every file in the project and updates anything that changed, so every answer reflects the code on disk at the moment of the call. There is no file watcher and no cached answer that can go stale. The database is disposable: if it is damaged or out of date, SlugAudit deletes it and rebuilds it.
curl -fsSL https://raw.githubusercontent.com/SlugThugLabs/slugaudit/main/install.sh | bashThen connect it to your agent:
slugaudit connect claude # or: cursor, gemini, agy
slugaudit menu # interactive setup
slugaudit update # update to the latest releaseTool | What it does |
| Project snapshot: file and language counts, skipped files, import resolution, notices |
| Read-only SQL over the index (files, evidence, dependency edges) |
| Tree-sitter pattern search over one file or the whole project |
| Counts and file/line rows for mechanical facts (unwrap/expect/panic calls, TODO markers, diagnostics) |
| Record, read and clear this session's review findings, tied to a file's current content |
| Register your own tree-sitter counters |
| Turn indexing on or off for a project |
| Server and database state |
Start at docs/README.md. Main pages:
See LICENSE.
This server cannot be deployed
AI-powered codebase analysis — call graphs, security, dead code, complexity. 150+ tools.
Codebase intelligence for AI agents — dead code, blast radius, ownership.
Give your AI agent a persistent map of your project's structure, dependencies, and bugs.
Search indexed code, trace dependencies, assess change impact, and recall repository memory.
