ashfordeou avatar

Grasp — Code Architecture & Dependency Analysis

ashfordeou/grasp

Exposes 131 tools for static codebase analysis directly to Claude and other MCP clients. You get dependency graphs, OSV.dev vulnerability scanning across five threat vectors (CVEs, container images, supply chain integrity, Socket.dev behavioral checks), architecture drift detection, DORA metrics, and git change impact analysis. Supports 35 languages from JavaScript to Ada, parses ASTs locally with zero telemetry, and stores results in a SQLite/Kuzu graph brain for instant requerying. Useful when onboarding to unfamiliar codebases, auditing security posture across dependencies and containers, or generating technical documentation from live repo structure. The toolset includes Cypher queries, test coverage gap detection, and PR impact summaries you can pipe into GitHub Actions.

GitHub stars
31
tools
80
transport
STDIO
last updated
Nov 2, 2026

Tools

80 tools

Public tool metadata for what this MCP can expose to an agent.

grasp_analyzeFull analysis of any repo or local path — returns `session_id` for follow-up queries

Full analysis of any repo or local path — returns `session_id` for follow-up queries

No parameter schema in public metadata yet.

grasp_sessionsList active sessions (persist 7 days, survive restarts)

List active sessions (persist 7 days, survive restarts)

No parameter schema in public metadata yet.

grasp_diffCompare two snapshots — what changed between analyses?

Compare two snapshots — what changed between analyses?

No parameter schema in public metadata yet.

grasp_watchRe-analyse a directory and diff against a prior run

Re-analyse a directory and diff against a prior run

No parameter schema in public metadata yet.

grasp_rules_checkRun `grasp.yml` architecture rules and report violations

Run `grasp.yml` architecture rules and report violations

No parameter schema in public metadata yet.

grasp_config_checkValidate a session against architecture rules — returns violations

Validate a session against architecture rules — returns violations

No parameter schema in public metadata yet.

grasp_file_depsWhat does this file depend on?

What does this file depend on?

No parameter schema in public metadata yet.

grasp_dependentsWhat breaks if I change this file?

What breaks if I change this file?

No parameter schema in public metadata yet.

grasp_cyclesAre there circular dependencies?

Are there circular dependencies?

No parameter schema in public metadata yet.

grasp_architectureWhat layers does this codebase have?

What layers does this codebase have?

No parameter schema in public metadata yet.

grasp_hotspotsWhich files are riskiest to touch?

Which files are riskiest to touch?

No parameter schema in public metadata yet.

grasp_metricsLines, complexity, fan-in/fan-out per file

Lines, complexity, fan-in/fan-out per file

No parameter schema in public metadata yet.

grasp_find_pathHow does file A connect to file B?

How does file A connect to file B?

No parameter schema in public metadata yet.

grasp_patternsWhat design patterns are in use?

What design patterns are in use?

No parameter schema in public metadata yet.

grasp_unusedDead code — defined but never called

Dead code — defined but never called

No parameter schema in public metadata yet.

grasp_explainPlain-English explanation of any file or function

Plain-English explanation of any file or function

No parameter schema in public metadata yet.

grasp_refactorStep-by-step refactor plan for a file or session

Step-by-step refactor plan for a file or session

No parameter schema in public metadata yet.

grasp_suggestRanked refactoring suggestions by effort-to-impact ratio

Ranked refactoring suggestions by effort-to-impact ratio

No parameter schema in public metadata yet.

grasp_onboardOrdered reading path for new engineers entering a codebase area

Ordered reading path for new engineers entering a codebase area

No parameter schema in public metadata yet.

grasp_typesType annotation coverage — prioritises high fan-in files lacking types

Type annotation coverage — prioritises high fan-in files lacking types

No parameter schema in public metadata yet.

grasp_similarityRanked duplicate clusters and code-clone groups

Ranked duplicate clusters and code-clone groups

No parameter schema in public metadata yet.

grasp_staleActive but abandoned files — low churn, high fan-in, no test counterpart

Active but abandoned files — low churn, high fan-in, no test counterpart

No parameter schema in public metadata yet.

grasp_change_riskRisk score 0–100 for a set of changed files

Risk score 0–100 for a set of changed files

No parameter schema in public metadata yet.

grasp_securityHardcoded secrets, injection risks, dangerous patterns

Hardcoded secrets, injection risks, dangerous patterns

No parameter schema in public metadata yet.

grasp_sbomSBOM in CycloneDX 1.4 or SPDX 2.3 JSON

SBOM in CycloneDX 1.4 or SPDX 2.3 JSON

No parameter schema in public metadata yet.

grasp_sarifSARIF 2.1.0 export for GitHub Code Scanning

SARIF 2.1.0 export for GitHub Code Scanning

No parameter schema in public metadata yet.

grasp_licenseDependency licenses — flags copyleft and unknown

Dependency licenses — flags copyleft and unknown

No parameter schema in public metadata yet.

grasp_pii_traceBFS trace from PII source files to all consumers

BFS trace from PII source files to all consumers

No parameter schema in public metadata yet.

grasp_dutiesSeparation of duties — files that both initiate and approve

Separation of duties — files that both initiate and approve

No parameter schema in public metadata yet.

grasp_reg_impactRegulatory change blast radius (GDPR/HIPAA/SOX/PCI-DSS)

Regulatory change blast radius (GDPR/HIPAA/SOX/PCI-DSS)

No parameter schema in public metadata yet.

grasp_env_varsAll env var reads — flags undocumented and test-only vars

All env var reads — flags undocumented and test-only vars

No parameter schema in public metadata yet.

grasp_feature_flagsAll feature flag reads (LaunchDarkly, GrowthBook, env-var flags)

All feature flag reads (LaunchDarkly, GrowthBook, env-var flags)

No parameter schema in public metadata yet.

grasp_pr_commentGenerate PR health comment with blast radius for changed files

Generate PR health comment with blast radius for changed files

No parameter schema in public metadata yet.

grasp_pr_reviewPost inline review comments on a GitHub PR at high-severity lines

Post inline review comments on a GitHub PR at high-severity lines

No parameter schema in public metadata yet.

grasp_commitsCommit counts for last 7d and 30d

Commit counts for last 7d and 30d

No parameter schema in public metadata yet.

grasp_ci_statusLatest GitHub Actions run — passing/failing/in-progress

Latest GitHub Actions run — passing/failing/in-progress

No parameter schema in public metadata yet.

grasp_doraDORA metrics — Deployment Frequency, Lead Time, CFR, MTTR

DORA metrics — Deployment Frequency, Lead Time, CFR, MTTR

No parameter schema in public metadata yet.

grasp_adrAI-powered MADR-format Architecture Decision Record

AI-powered MADR-format Architecture Decision Record

No parameter schema in public metadata yet.

grasp_embedGenerate iframe, README badge, React snippet for sharing

Generate iframe, README badge, React snippet for sharing

No parameter schema in public metadata yet.

grasp_timelineLast N commits with per-commit changed files + co-change matrix

Last N commits with per-commit changed files + co-change matrix

No parameter schema in public metadata yet.

grasp_contributorsPer-file ownership, bus-factor, top contributors

Per-file ownership, bus-factor, top contributors

No parameter schema in public metadata yet.

grasp_coverageTest coverage overlay — which files lack tests?

Test coverage overlay — which files lack tests?

No parameter schema in public metadata yet.

grasp_issuesMap GitHub Issues to the files they mention

Map GitHub Issues to the files they mention

No parameter schema in public metadata yet.

grasp_jira_issuesMap Jira issues to source files via project key

Map Jira issues to source files via project key

No parameter schema in public metadata yet.

grasp_service_graphService-level dependency graph from OTEL / custom trace JSON

Service-level dependency graph from OTEL / custom trace JSON

No parameter schema in public metadata yet.

grasp_deps_devEcosystem dependents via deps.dev — how many packages depend on this repo

Ecosystem dependents via deps.dev — how many packages depend on this repo

No parameter schema in public metadata yet.

grasp_brain_indexAnalyse and persist a repo to the local SQLite brain

Analyse and persist a repo to the local SQLite brain

No parameter schema in public metadata yet.

grasp_brain_statusWhat's indexed in the brain and when?

What's indexed in the brain and when?

No parameter schema in public metadata yet.

grasp_contextRich file context — layer, complexity, coupling, security, dependents, dependencies

Rich file context — layer, complexity, coupling, security, dependents, dependencies

No parameter schema in public metadata yet.

grasp_arch_diffCompare current state vs brain baseline — detect degradations

Compare current state vs brain baseline — detect degradations

No parameter schema in public metadata yet.

grasp_askAsk a natural language question about your architecture

Ask a natural language question about your architecture

No parameter schema in public metadata yet.

graph_queryRun read-only Cypher queries against the persistent function/file call graph

Run read-only Cypher queries against the persistent function/file call graph

No parameter schema in public metadata yet.

call_chainTrace caller and callee chains for any function, up to configurable depth

Trace caller and callee chains for any function, up to configurable depth

No parameter schema in public metadata yet.

type_propagationFind all functions sharing a return type and their call neighbors

Find all functions sharing a return type and their call neighbors

No parameter schema in public metadata yet.

function_graphRender a Mermaid / DOT / JSON subgraph centred on any named function

Render a Mermaid / DOT / JSON subgraph centred on any named function

No parameter schema in public metadata yet.

grasp_dead_packagesnpm deps in `package.json` but never imported

npm deps in `package.json` but never imported

No parameter schema in public metadata yet.

grasp_runtime_callsMerge a live runtime trace with static edges — actual hot paths

Merge a live runtime trace with static edges — actual hot paths

No parameter schema in public metadata yet.

grasp_db_couplingORM/SQL-to-table coupling map — god tables, high-coupling files

ORM/SQL-to-table coupling map — god tables, high-coupling files

No parameter schema in public metadata yet.

grasp_migration_planPhased topologically-ordered plan for replacing a package/module

Phased topologically-ordered plan for replacing a package/module

No parameter schema in public metadata yet.

grasp_api_surfaceUnified API surface from OpenAPI, GraphQL, Express/FastAPI routes

Unified API surface from OpenAPI, GraphQL, Express/FastAPI routes

No parameter schema in public metadata yet.

grasp_eventsEvent emitters and subscribers — orphaned emits, ghost subscriptions

Event emitters and subscribers — orphaned emits, ghost subscriptions

No parameter schema in public metadata yet.

grasp_perfN+1 queries, synchronous I/O, JSON serialization in loops

N+1 queries, synchronous I/O, JSON serialization in loops

No parameter schema in public metadata yet.

grasp_bundleBundle size treemap — largest files by size category

Bundle size treemap — largest files by size category

No parameter schema in public metadata yet.

grasp_dep_impactImpact of upgrading a dependency across all files

Impact of upgrading a dependency across all files

No parameter schema in public metadata yet.

grasp_cross_repoCompare two sessions — shared files, diverged functions

Compare two sessions — shared files, diverged functions

No parameter schema in public metadata yet.

grasp_diagramGenerate Mermaid flowchart or C4 diagrams from the dependency graph

Generate Mermaid flowchart or C4 diagrams from the dependency graph

No parameter schema in public metadata yet.

grasp_req_traceRequirement traceability — scan `@REQ-NNN` tags against a CSV

Requirement traceability — scan `@REQ-NNN` tags against a CSV

No parameter schema in public metadata yet.

grasp_anomalyAnomaly investigation — BFS blast radius, security in call chain, plain-English summary

Anomaly investigation — BFS blast radius, security in call chain, plain-English summary

No parameter schema in public metadata yet.

grasp_reuseSoftware reuse assessor — Red/Amber/Green compatibility matrix

Software reuse assessor — Red/Amber/Green compatibility matrix

No parameter schema in public metadata yet.

grasp_safety_traceSafety constraint tracer — finds paths that bypass all safety gates

Safety constraint tracer — finds paths that bypass all safety gates

No parameter schema in public metadata yet.

grasp_multilangCross-language call graph (Ada→C, Python→C, JS→WASM)

Cross-language call graph (Ada→C, Python→C, JS→WASM)

No parameter schema in public metadata yet.

grasp_heritageHeritage software genealogy — zero-delta certification shortcuts

Heritage software genealogy — zero-delta certification shortcuts

No parameter schema in public metadata yet.

grasp_icdICD mapper — match Interface Control Document entries to code

ICD mapper — match Interface Control Document entries to code

No parameter schema in public metadata yet.

grasp_ecssECSS-E-ST-40C compliance checker (DI-01, DI-04, DI-07, DI-10, DI-15)

ECSS-E-ST-40C compliance checker (DI-01, DI-04, DI-07, DI-10, DI-15)

No parameter schema in public metadata yet.

grasp_run_diffTraining run diff — changed hyperparameters and affected code

Training run diff — changed hyperparameters and affected code

No parameter schema in public metadata yet.

grasp_eval_coverageEval coverage map — safety gates with no eval coverage flagged critical

Eval coverage map — safety gates with no eval coverage flagged critical

No parameter schema in public metadata yet.

grasp_org_graphOrg-level multi-repo dependency graph with inter-repo edges

Org-level multi-repo dependency graph with inter-repo edges

No parameter schema in public metadata yet.

grasp_api_diffBreaking API change detector — removed/changed exported symbols

Breaking API change detector — removed/changed exported symbols

No parameter schema in public metadata yet.

grasp_pluginsExtension-point map — plugin interfaces, hook points, strategy patterns

Extension-point map — plugin interfaces, hook points, strategy patterns

No parameter schema in public metadata yet.

grasp_semverSemantic versioning enforcer — validate semver bump for the change set

Semantic versioning enforcer — validate semver bump for the change set

No parameter schema in public metadata yet.

Sponsors

Readme

Grasp — Code Architecture Suite

English · हिन्दी · 日本語 · 한국어 · 简体中文



CI npm License GitHub Pages


150 MCP tools + 8 Resources + 2 Prompts · 35 languages · 11 AI providers + 200+ models via OpenRouter · 10 graph views · multimodal knowledge graph · your code never leaves your machine



View the full README on GitHub

Details

Repository
github.com/ashfordeou/grasp
Website
github.com/ashfordeOU/grasp
Categories
Developer Tools, Security & Pentesting
Package
grasp-mcp-server
Transport
STDIO
Registry
MCP registry, active

More from ashfordeou

Related Developer Tools MCP servers

View all
1seuros avatarSkipperseuros/skipperGit and forge ops: local git via gitoxide, plus GitHub, GitLab, Gitea and Forgejo23stars
2muvon avatarOctofsmuvon/octofsStandalone MCP filesystem tools server — view, edit, shell, workdir.19stars
3traviswye avatarContextatlastraviswye/contextatlasPre-computed atlas of your codebase for Claude Code: LSP + ADRs + git. 45-72% token reduction.6stars
4aifity avatarGitHubaifity/omnigit-mcpConnect AI assistants to GitHub - manage repos, issues, PRs, workflows, and git operations.1stars
5cocaxcode avatarDevflow Mcpcocaxcode/devflow-mcpMCP server connecting Jira (Cloud + Server) with GitHub/GitLab. Branches, issues, PRs, flows.1stars
6bitofacoder avatarOmni Mcp Serverbitofacoder/omni-mcp-serverAll-in-one MCP server: GitHub, Git, Slack, web fetch, memory, and filesystem. Agent Mode opt-in.0stars