Codebase Chat MCP server

Read from the package source without running it. The installed server may list more.

• codebase_check

  Verify your changes vs a git ref: blast radius, complexity, findings and delta vs the committed baseline (.codebase-chat/baseline.json). Deterministic, no LLM call.

• codebase_deep_audit

  Full deterministic audit (~30 analyses): git churn & bus factor, churn × complexity risk, dependency integrity (undeclared imports, dead deps, lockfile drift, broken package entries), per-function complexity, secrets & sensitive files, env-var coverage, config & README hygiene — all cited file:line. Returns findings directly — no LLM call. Set ui=true to also receive an interactive HTML dashboard

• codebase_doctor

  Installation & environment diagnostic: node version, index cache, LLM keys presence, tree-sitter, baseline staleness, MCP client integrations. Deterministic, no LLM call.

• codebase_fix

  Apply mechanical repairs for the rules where the fix is unambiguous — env-undoc (append to .env.example), dead-dep (remove from package.json), unused-export (delete or un-export), console/debugger lines (delete). Each fix re-checks: the finding disappears. Pass dry=true to preview without writing. Deterministic, no LLM call.

• codebase_health

  Deterministic static analysis: circular deps, dead code, duplication, complexity hotspots, health score. Returns findings directly — no LLM call.

• codebase_ignore

  Silence a finding with a justification (written to .codebase-chat/ignores.json — commit it). `id` may be a full finding id or a prefix like `sec:innerHTML:src/x.ts` covering every such finding in that file. Use action=list/remove to manage entries.

• codebase_impact

  Blast-radius analysis: which files transitively depend on a target file — what breaks if it changes. Deterministic, no LLM call.

• Code scan3 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancerepository archived0/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Codebase Chat: common questions

Is Codebase Chat MCP server safe?

With care: it is graded C, so read the findings first (69/100). Read the Codebase Chat safety report

How do I install Codebase Chat?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does Codebase Chat need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Codebase Chat maintained?

The last commit was 6 days ago (2026-09-14). The latest release is v0.10.1.

What can I use instead of Codebase Chat?

Servers from other publishers that do the same job: Hypermnesia MCP server.