ai-backend-performance-mcp
Summary: This is a read-only static analysis MCP server that inspects Node.js/TypeScript backend projects for performance anti-patterns and returns structured, evidence-backed findings.
Full project scan (
analyze_project) — runs all analyzers and returns grouped findings with a summary (total, confirmed, potential counts).Database query analysis (
analyze_database_queries) — detects N+1 query patterns, unbounded finds, and sequential query calls in MongoDB/PostgreSQL code.MongoDB index analysis (
analyze_indexes) — compares query filter/sort fields against in-repocreateIndexdefinitions to flag potential missing indexes.Async pattern analysis (
analyze_async_patterns) — findsawaitinside loops, sequential awaits that could be parallelized, and blocking sync operations.Connection pooling analysis (
analyze_connection_pooling) — flags database clients or pools created inside request handlers, loops, or other hot paths.Dependency hygiene analysis (
analyze_dependencies) — inspectspackage.jsonand lockfiles for unused packages and dev/prod misclassification.
Each tool accepts a single required projectPath argument and returns findings with category, severity, confidence score, code snippet evidence, and a recommendation. Findings are marked confirmed vs potential, and nothing is ever executed or modified — analysis is purely static and text-based, with path validation to prevent traversal outside the target project.
Note: the README also advertises a seventh tool, investigate_performance, but it is not present in the provided server schema — only the six tools above are actually exposed.
Analyzes MongoDB query patterns for performance anti-patterns such as N+1 queries and unbounded finds, and checks index coverage for filter/sort fields based on in-repo createIndex calls.
Analyzes PostgreSQL query patterns for performance anti-patterns such as N+1 queries and ineffective batching, providing evidence-backed findings for database optimization.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@ai-backend-performance-mcpanalyze my Node.js backend at /app for performance anti-patterns"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
ai-backend-performance-mcp
Static analysis MCP server for Node.js backend performance issues. AI agents can inspect a project for database query anti-patterns, async bottlenecks, connection pooling mistakes, and dependency hygiene problems — without modifying your code.
Why this project?
Backend performance issues often hide in plain sight: N+1 queries in loops, clients created per request, sequential awaits that could run in parallel, or dependencies misclassified in package.json. This MCP server exposes those patterns as structured, evidence-backed findings that AI coding assistants can reason about.
What it does
Read-only static analysis of JavaScript/TypeScript source files
Six focused MCP tools for common backend performance categories
Structured findings with severity, confidence, code snippets, and recommendations
Distinguishes confirmed evidence from potential issues
What it does not do
Execute your application or repository code
Modify files, install packages, or change indexes
Replace profiling, load testing, or database
EXPLAINanalysis
Related MCP server: CodeMore MCP Server
Architecture
flowchart TD
Client[MCP Client / AI Agent]
Server[MCP Server]
Tools[MCP Tools]
Engine[Analysis Engine]
Analyzers[Individual Analyzers]
Findings[Structured Findings]
Client --> Server
Server --> Tools
Tools --> Engine
Engine --> Analyzers
Analyzers --> Findings
Findings --> Tools
Tools --> Server
Server --> ClientSee docs/architecture.md for layer details.
Analyzers
Analyzer | Detects |
Database queries | N+1 patterns, unbounded finds/queries |
MongoDB indexes | Filter/sort fields without matching |
Async patterns |
|
Connection pooling | Client/pool creation in handlers or loops |
Dependencies | Unused deps, dev/prod misclassification, lockfile stats |
MCP Tools
Tool | Description |
| Full scan with grouped findings and summary |
| MongoDB/PostgreSQL query patterns |
| MongoDB index coverage heuristics |
| Async/await performance patterns |
| Connection lifecycle anti-patterns |
|
|
| Full scan plus code-path context, related findings, clusters, and inspect-next hints |
Tool reference: docs/tools.md
Installation
Local (primary until the package is on npm): clone, install, and build. npm install runs prepare, which compiles dist/.
git clone https://github.com/robinafaruqia/ai-backend-performance-mcp.git
cd ai-backend-performance-mcp
npm installThen start the server over stdio:
node dist/index.jsAfter npm publish:
npx -y ai-backend-performance-mcpMCP configuration
Use a local build in Cursor (or Claude Desktop) first. Replace the path with the absolute path to this repo:
{
"mcpServers": {
"backend-performance": {
"command": "node",
"args": ["/absolute/path/to/ai-backend-performance-mcp/dist/index.js"]
}
}
}After the package is published to npm:
{
"mcpServers": {
"backend-performance": {
"command": "npx",
"args": ["-y", "ai-backend-performance-mcp"]
}
}
}Usage
Invoke any tool with a projectPath pointing to a Node.js backend repository:
{
"projectPath": "/path/to/your/api"
}Example output (truncated)
{
"projectPath": "/app/examples/sample-node-api",
"technologies": ["express", "mongodb"],
"metadata": {
"packageName": "sample-node-api",
"packageVersion": "1.0.0",
"sourceFileCount": 4
},
"findings": [
{
"category": "pooling",
"severity": "critical",
"title": "Connection or client created in request handler",
"evidence": {
"kind": "confirmed",
"snippet": "const client = await MongoClient.connect(...)"
},
"confidence": 0.9,
"recommendation": "Create a shared client/pool at module scope and reuse it."
}
],
"summary": {
"totalFindings": 6,
"confirmedCount": 3,
"potentialCount": 3
}
}Try the included demo project at examples/sample-node-api.
Safety
Read-only: never writes to analyzed projects
Path validation: prevents traversal outside
projectPathNo code execution: parses source text only; does not run repository code
Untrusted input: treat analyzed repos as untrusted
Limitations
Static analysis only; findings that depend on cluster state stay
potentialDynamic
require()/ runtime-generated queries are not fully trackedIndex analysis compares in-repo
createIndexcalls only (not Atlas/ops-managed indexes) and stays silent when the repo defines noneArray.find, batched$in/ANY(),_idlookups, and module-scope DB clients are not treated as issuesSequential awaits are flagged only when they do not consume prior bindings;
Promise.allis never reported as a findingDependency unused detection is import-scan based
Redis-specific rules are planned but not implemented in v0.1.0
Development
git clone https://github.com/robinafaruqia/ai-backend-performance-mcp.git
cd ai-backend-performance-mcp
npm install
npm run typecheck
npm run lint
npm test
npm run buildSee docs/development.md.
Testing
npm testFixture projects under tests/fixtures/ pair problematic and valid code for N+1 queries, indexes, async, pooling, and dependencies so analyzers do not fire on every await, query, loop, or connection.
Roadmap
Redis/cache analyzer
Prisma/TypeORM-specific query rules
ProjectContext caching
SARIF/JSON report export
Configurable severity thresholds
Contributing
Contributions are welcome! See CONTRIBUTING.md and CODE_OF_CONDUCT.md.
License
MIT — see LICENSE.
Available Tools
6 toolsanalyze_async_patternsB
Detect async performance issues including await in loops, sequential awaits, and blocking operations.
| Name | Required | Description | Default |
|---|---|---|---|
| projectPath | Yes | Absolute or relative path to the Node.js project to analyze |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It states what the tool detects but does not clarify whether it is read-only, what it returns (e.g., a report, a list of issues), or whether it modifies the project. The verb 'Detect' implies analysis, but without explicit confirmation, the agent cannot be certain of side effects or output format.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, focused sentence that front-loads the purpose with specific examples. It contains no filler or redundancy, and every word contributes to explaining the tool's function.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with a single parameter and no output schema, the description is moderately complete. It explains what the tool detects but omits details about the return format, whether the analysis is non-destructive, and any prerequisites or limitations. Given the absence of annotations and output schema, additional context would improve agent confidence, but the simplicity of the tool mitigates the gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema fully documents the single parameter (projectPath) with a clear description and minimal length constraint. The tool description adds no extra meaning about the parameter format, validation, or usage nuances, so it matches the baseline of 3 for high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific verb ('Detect') and resource ('async performance issues'), and enumerates concrete examples (await in loops, sequential awaits, blocking operations). This distinguishes it from sibling analyzers like analyze_database_queries or analyze_indexes, which target different problem domains.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit guidance on when to use this tool versus its siblings. The description does not mention alternatives or conditions for selection. While the name implies a focus on async patterns, the absence of any comparative context leaves the agent to infer usage, which may lead to choosing the wrong analyzer.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
analyze_connection_poolingB
Detect database client or pool creation inside request handlers, loops, or other hot paths.
| Name | Required | Description | Default |
|---|---|---|---|
| projectPath | Yes | Absolute or relative path to the Node.js project to analyze |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It states only the detection action but does not mention side effects, read-only nature, performance implications, or output format. The lack of behavioral detail is a significant gap for an analysis tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, focused sentence that conveys the core purpose immediately. No unnecessary wording or redundancy, making it highly concise and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with a single parameter and no output schema, the description is adequate but incomplete. It does not mention expected output, return format, or how results are presented, nor does it provide guidance on alternatives. An agent might need additional context to use it effectively.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already fully describes the single parameter 'projectPath' with 100% description coverage. The tool description adds no extra meaning or context for the parameter, so baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'detect' and specific resource 'database client or pool creation' within defined contexts ('request handlers, loops, or other hot paths'). It distinguishes itself from siblings like analyze_database_queries by focusing on connection pooling patterns, though it does not explicitly reference siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use the tool (when you want to detect connection pooling issues in hot paths) but provides no explicit guidance on when not to use it or mention of alternative tools. Usage is implied but not fully elaborated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
analyze_database_queriesA
Detect MongoDB/PostgreSQL query anti-patterns such as N+1 queries, unbounded finds, and sequential query calls.
| Name | Required | Description | Default |
|---|---|---|---|
| projectPath | Yes | Absolute or relative path to the Node.js project to analyze |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full disclosure burden. It states what is detected but not how the tool behaves — whether it performs static code scanning or connects to live databases, whether credentials or a running instance are required, or what the return format looks like. 'Detect' implies a read-only analysis, but the mechanism, prerequisites, and side-effect profile are undisclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, tightly-packed sentence that leads with the verb and detection scope, then supplies concrete anti-pattern examples. There is zero filler and the most important information is front-loaded. Efficient and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Adequate but gapped. The purpose and single parameter are fully covered, but for a detection tool with no output schema and no annotations, the agent is left without guidance on what the analysis returns, what prerequisites exist (a Node.js project using these databases), or what the tool's behavior is at runtime. These gaps matter more given the absence of structured annotations and an output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with projectPath fully documented as 'Absolute or relative path to the Node.js project to analyze'. The description adds no additional parameter meaning beyond what the schema provides, so the baseline of 3 applies — the schema carries the weight adequately.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Detect') plus a clear resource ('MongoDB/PostgreSQL query anti-patterns') and enumerates concrete examples (N+1 queries, unbounded finds, sequential query calls). This clearly differentiates it from its siblings — analyze_indexes targets indexes, analyze_connection_pooling targets connections, analyze_async_patterns targets async code — leaving no ambiguity about what this tool covers.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The purpose implies the usage context (use when analyzing database access patterns in a Node.js project), but the description never explicitly states when to choose this tool over its overlapping siblings, particularly analyze_indexes which lives in the same database-performance domain. There is no when-not-to-use guidance or named alternative, leaving the agent to infer the boundary.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
analyze_dependenciesA
Analyze package.json and lockfile for dependency hygiene issues including unused and misclassified packages.
| Name | Required | Description | Default |
|---|---|---|---|
| projectPath | Yes | Absolute or relative path to the Node.js project to analyze |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It states the action ('Analyze') but does not explicitly disclose whether the operation is read-only or has side effects (e.g., modifies files, requires network access). For a tool that likely only reads files, this is a gap in transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, front-loaded sentence with no filler. It immediately states the target and the value, making it easy for an agent to grasp the tool's purpose at a glance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (one parameter, no nested objects, no output schema), the description adequately explains what the tool does and what it analyzes. It does not cover the output format, but since no output schema is provided, that is not required. The description alone is sufficient for an agent to decide when to call this tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides a clear description for projectPath ('Absolute or relative path to the Node.js project to analyze'), and schema coverage is 100%. The description does not add extra meaning beyond the schema—it only contextualizes the parameter by mentioning the files that will be examined, which is marginal.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description specifies a clear verb ('Analyze'), a precise resource ('package.json and lockfile'), and a concrete goal ('dependency hygiene issues including unused and misclassified packages'). It distinguishes itself from sibling tools like analyze_project or analyze_database_queries by naming the exact files and intent, leaving no ambiguity about scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly implies when to use this tool (when dependency hygiene is the concern), but it does not explicitly state exclusions or reference alternative tools. There is no 'use this instead of X when...' guidance, so usage context is implied rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
analyze_indexesB
Analyze MongoDB query patterns against createIndex definitions to surface potential missing indexes.
| Name | Required | Description | Default |
|---|---|---|---|
| projectPath | Yes | Absolute or relative path to the Node.js project to analyze |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of disclosure. While 'Analyze' implies a read-only operation, the description does not explicitly state that no files are modified, whether a MongoDB connection is required, or what the output format looks like beyond 'surface potential missing indexes'. It fails to disclose any side effects or operational requirements, which is a significant gap given the lack of annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, dense sentence with no filler. It front-loads the action ('Analyze') and immediately specifies the subject and intended outcome. Every word earns its place; there is no redundancy or irrelevant detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple with one fully documented parameter and a clear outcome in the description. It explains what the tool does and what it surfaces, which is adequate for a read-only analysis tool. However, it does not mention any limitations, prerequisites, or how results are presented, which would improve completeness. Given the simplicity, a 4 is slightly generous but defensible as it covers the core use case.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with projectPath fully described as 'Absolute or relative path to the Node.js project to analyze'. The description adds no additional meaning to the parameter – it merely mentions 'MongoDB query patterns' without tying it to the parameter. Per the rubric, a baseline of 3 is appropriate when the schema already covers the parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Analyze'), a clear resource ('MongoDB query patterns against createIndex definitions'), and an explicit outcome ('surface potential missing indexes'). It clearly distinguishes itself from siblings by focusing specifically on index analysis, whereas siblings like analyze_database_queries cover broader query behavior.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus the alternatives. It does not mention any conditions, prerequisites, or scenarios where this tool is preferable to analyze_database_queries or analyze_project. Without this, an agent cannot confidently decide when to invoke it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
analyze_projectB
Analyze a Node.js backend project for performance issues across database, async, pooling, and dependencies.
| Name | Required | Description | Default |
|---|---|---|---|
| projectPath | Yes | Absolute or relative path to the Node.js project to analyze |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of disclosing behavioral traits. It only says 'analyze' implying a read-only operation, but does not state whether it executes code, whether it requires network access, what output format is returned, or if any side effects occur. For a tool that ostensibly scans a codebase, this is a significant gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, tight sentence that leads with the verb and scope, and enumerates the analysis dimensions. It contains no filler or redundancy, earning a high score for efficiency. A slight deduction because it is almost too terse, omitting useful details that would not hurt conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of five specialized sibling tools, the description should clarify the relationship (e.g., that this is an aggregate analysis and that more focused tools exist). It also does not mention what the output contains, how long it might take, or any prerequisites. The one-parameter input is simple, but the tool's purpose is broad, so the description is under-specified for an agent to confidently call it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%: the single parameter, projectPath, already has a clear description ('Absolute or relative path to the Node.js project to analyze'). The tool description adds no further meaning about the parameter beyond what the schema provides, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Analyze') and resource ('Node.js backend project'), with a clear scope: performance issues across database, async, pooling, and dependencies. This distinguishes it from the specialized sibling tools, which each target a single concern. The purpose is unambiguous and immediately actionable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this is the broad, comprehensive analysis tool compared to siblings like analyze_database_queries or analyze_async_patterns, but it does not explicitly state when to use this versus those alternatives, nor does it provide any 'when not to use' guidance. The usage context is inferred from the scope listed rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
6 tool updates
v0.1.0- First observed
analyze_async_patterns - First observed
analyze_connection_pooling - First observed
analyze_database_queries - First observed
analyze_dependencies - First observed
analyze_indexes - First observed
analyze_project
TDQS
Scored across 6 tools
Each tool targets a clearly distinct performance concern: project-wide analysis, database queries, indexes, async patterns, connection pooling, and dependencies. There is no overlap or ambiguity in their purposes.
All tool names follow the identical 'analyze_<topic>' pattern, making it predictable and easy to infer the function of each tool from its name. No mixed conventions or inconsistent verbs.
Six tools is well-scoped for a performance analysis server. Each tool addresses a distinct aspect of backend performance without redundancy, and the count feels neither thin nor overwhelming.
The tool covers major performance domains: database queries, indexes, async patterns, connection pooling, dependencies, and a project overview. Minor potential gaps like memory or caching analysis are absent, but the core performance concerns are well represented.
Maintenance
Related MCP Connectors
Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…
Code intelligence platform for AI agents. 20 tools for architecture, security & impact analysis.
Read-only AI coding tools for change verification, release readiness, capacity, and guidance.
AI-powered codebase analysis — call graphs, security, dead code, complexity. 150+ tools.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceEnables MCP-compatible clients to inspect Next.js codebases, analyze App Router and Pages Router structure, discover API routes, and audit build performance through controlled tools.7 npmMIT
- AlicenseNot gradedqualityAmaintenanceEnables AI agents to scan code for security and quality issues and receive machine-readable reports with suggested fixes and verification criteria.51 npm2MIT
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants to analyze code health in TypeScript/JavaScript projects, providing tools to run analysis, start a dashboard, and get summaries.7 npm3MIT
- FlicenseBqualityCmaintenanceEnables AI agents to perform comprehensive, zero-infrastructure codebase analysis through 24 MCP tools, covering security, quality, architecture, type safety, git history, and dead code detection with high precision and local privacy.45-