Mmcp.market

Koragraph MCP server

by koragraph.in·in.koragraph/koragraph·v0.1.4
No reviews yet

Local multi-repo code graph over MCP. Blast radius, call graphs, and memory anchored to code.

C58/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C58/100

full report

Adoption
Growing

14 stars153 downloads/wk

Reviews

Write one

Nobody has reviewed Koragraph yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Koragraph tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

1 high2 medium
  • Code scan181 source files scanned3/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 6 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; website matches verified namespace8/10

Findings (3)

  • mediumnpm install lifecycle script presentinstall.script
  • mediumnpm install lifecycle script presentinstall.script
    package.json: … "node": ">=22" }, "scripts": { "postinstall": "node scripts/postinstall.js || true" …
  • highShell command built from a string (injection risk)exec.shell-concat
    src/services/vcs/local-provider.js: …d */ function git(cmd, cwd) { return execSync(`git ${cmd}`, { cwd, stdio: ['pipe', 'p…
Overall 58/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the Koragraph repository's README, as published. We do not edit it. Read it on GitHub

The ultimate context layer for your AI coding agent.

Completely free. Runs entirely on your machine.

A local knowledge graph of every repo you point it at, plus a memory layer that knows when the code it remembers has changed.

Install

npm install -g koragraphmcp
koragraph ingest /path/to/repo        # point it at as many repos as you like
claude mcp add koragraph -s user -- koragraph mcp

koragraph doctor checks the whole chain and prints the exact line for any editor.

Two ways to use it from here: your agent calls the tools over MCP, or you (or a script, or a Claude Code hook) run them straight from the shell, for example koragraph explore "how does checkout work" or koragraph blast src/pay.js. Same graph either way.

Then run KORAINIT in your editor

This is the step that lights up the memory layer, so don't skip it. In your coding agent (Claude Code, Cursor, Windsurf, whatever you use), tell it:

### "Read KORAINIT.md and follow it."

It imports your existing CLAUDE.md / AGENTS.md into koragraph's memory, anchored to the code each rule is about, flags any rule that points at code that's already gone, and finishes wiring koragraph into the session. Run it once per project.

Prefer zero setup? Hand the whole thing to your agent instead. Paste this from the repo you want indexed, and it installs, indexes, wires itself in, and runs KORAINIT for you:

Install koragraph and set it up for this repo, then report back:
1. npm install -g koragraphmcp
2. koragraph ingest .
3. koragraph doctor, then run the `claude mcp add …` line it prints (or wire `koragraph mcp` into
   my editor's MCP config).
4. Find KORAINIT.md in the installed package (`npm root -g`, then koragraphmcp/KORAINIT.md) and
   follow it: it imports my existing CLAUDE.md / AGENTS.md into memory, verified against the code.
Report: nodes/edges indexed, whether the MCP connected, and KORAINIT's summary.

Works with                                    

Adoption is highest on Claude Code: its hooks let koragraph put the graph in front of the agent on every turn, so it actually gets used instead of falling back to grep. Other editors reach koragraph over MCP, where the agent decides when to call it.

One map of everything you've built

Koragraph turns every repo you point it at into one live graph: a resolved structure, with an edge only where there really is one.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

Runs npx -y koragraphmcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add koragraph -- npx -y koragraphmcp
Add to Cursor

Koragraph: common questions

Is Koragraph MCP server safe?
With care: it is graded C, so read the findings first (58/100). Read the Koragraph safety report
How do I install Koragraph?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Koragraph need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Koragraph maintained?
The last commit was 6 days ago (2026-09-14). The latest release is v0.1.4.
What can I use instead of Koragraph?
Servers from other publishers that do the same job: Codebase Memory MCP server, Deja Vu MCP server and State Memory MCP server. Compare all Koragraph alternatives.

Alternatives to Koragraph

Same job from other publishers: the closest match first, then the best rated.

All Koragraph alternatives →
  • Codebase Memory
    Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.
    C
  • Deja Vu
    deja-vu: local memory over the session histories of thirty-three coding agents.
    A
  • State Memory MCP
    Deterministic, persistent graph server for tracking workflow state, decisions, and blockers.
    A
  • Plur
    Open, local-first engram memory for AI agents: read, correct, delete; shared over MCP.
    A

More from koragraph.in →