
Grasp — Code Architecture & Dependency Analysis
Exposes 131 tools for static codebase analysis directly to Claude and other MCP clients. You get dependency graphs, OSV.dev vulnerability scanning across five threat vectors (CVEs, container images, supply chain integrity, Socket.dev behavioral checks), architecture drift detection, DORA metrics, and git change impact analysis. Supports 35 languages from JavaScript to Ada, parses ASTs locally with zero telemetry, and stores results in a SQLite/Kuzu graph brain for instant requerying. Useful when onboarding to unfamiliar codebases, auditing security posture across dependencies and containers, or generating technical documentation from live repo structure. The toolset includes Cypher queries, test coverage gap detection, and PR impact summaries you can pipe into GitHub Actions.
- GitHub stars
- 31
- tools
- 80
- transport
- STDIO
- last updated
- Nov 2, 2026
Tools
80 toolsPublic tool metadata for what this MCP can expose to an agent.
grasp_analyzeFull analysis of any repo or local path — returns `session_id` for follow-up queries
Full analysis of any repo or local path — returns `session_id` for follow-up queries
No parameter schema in public metadata yet.
grasp_sessionsList active sessions (persist 7 days, survive restarts)
List active sessions (persist 7 days, survive restarts)
No parameter schema in public metadata yet.
grasp_diffCompare two snapshots — what changed between analyses?
Compare two snapshots — what changed between analyses?
No parameter schema in public metadata yet.
grasp_watchRe-analyse a directory and diff against a prior run
Re-analyse a directory and diff against a prior run
No parameter schema in public metadata yet.
grasp_rules_checkRun `grasp.yml` architecture rules and report violations
Run `grasp.yml` architecture rules and report violations
No parameter schema in public metadata yet.
grasp_config_checkValidate a session against architecture rules — returns violations
Validate a session against architecture rules — returns violations
No parameter schema in public metadata yet.
grasp_file_depsWhat does this file depend on?
What does this file depend on?
No parameter schema in public metadata yet.
grasp_dependentsWhat breaks if I change this file?
What breaks if I change this file?
No parameter schema in public metadata yet.
grasp_cyclesAre there circular dependencies?
Are there circular dependencies?
No parameter schema in public metadata yet.
grasp_architectureWhat layers does this codebase have?
What layers does this codebase have?
No parameter schema in public metadata yet.
grasp_hotspotsWhich files are riskiest to touch?
Which files are riskiest to touch?
No parameter schema in public metadata yet.
grasp_metricsLines, complexity, fan-in/fan-out per file
Lines, complexity, fan-in/fan-out per file
No parameter schema in public metadata yet.
grasp_find_pathHow does file A connect to file B?
How does file A connect to file B?
No parameter schema in public metadata yet.
grasp_patternsWhat design patterns are in use?
What design patterns are in use?
No parameter schema in public metadata yet.
grasp_unusedDead code — defined but never called
Dead code — defined but never called
No parameter schema in public metadata yet.
grasp_explainPlain-English explanation of any file or function
Plain-English explanation of any file or function
No parameter schema in public metadata yet.
grasp_refactorStep-by-step refactor plan for a file or session
Step-by-step refactor plan for a file or session
No parameter schema in public metadata yet.
grasp_suggestRanked refactoring suggestions by effort-to-impact ratio
Ranked refactoring suggestions by effort-to-impact ratio
No parameter schema in public metadata yet.
grasp_onboardOrdered reading path for new engineers entering a codebase area
Ordered reading path for new engineers entering a codebase area
No parameter schema in public metadata yet.
grasp_typesType annotation coverage — prioritises high fan-in files lacking types
Type annotation coverage — prioritises high fan-in files lacking types
No parameter schema in public metadata yet.
grasp_similarityRanked duplicate clusters and code-clone groups
Ranked duplicate clusters and code-clone groups
No parameter schema in public metadata yet.
grasp_staleActive but abandoned files — low churn, high fan-in, no test counterpart
Active but abandoned files — low churn, high fan-in, no test counterpart
No parameter schema in public metadata yet.
grasp_change_riskRisk score 0–100 for a set of changed files
Risk score 0–100 for a set of changed files
No parameter schema in public metadata yet.
grasp_securityHardcoded secrets, injection risks, dangerous patterns
Hardcoded secrets, injection risks, dangerous patterns
No parameter schema in public metadata yet.
grasp_sbomSBOM in CycloneDX 1.4 or SPDX 2.3 JSON
SBOM in CycloneDX 1.4 or SPDX 2.3 JSON
No parameter schema in public metadata yet.
grasp_sarifSARIF 2.1.0 export for GitHub Code Scanning
SARIF 2.1.0 export for GitHub Code Scanning
No parameter schema in public metadata yet.
grasp_licenseDependency licenses — flags copyleft and unknown
Dependency licenses — flags copyleft and unknown
No parameter schema in public metadata yet.
grasp_pii_traceBFS trace from PII source files to all consumers
BFS trace from PII source files to all consumers
No parameter schema in public metadata yet.
grasp_dutiesSeparation of duties — files that both initiate and approve
Separation of duties — files that both initiate and approve
No parameter schema in public metadata yet.
grasp_reg_impactRegulatory change blast radius (GDPR/HIPAA/SOX/PCI-DSS)
Regulatory change blast radius (GDPR/HIPAA/SOX/PCI-DSS)
No parameter schema in public metadata yet.
grasp_env_varsAll env var reads — flags undocumented and test-only vars
All env var reads — flags undocumented and test-only vars
No parameter schema in public metadata yet.
grasp_feature_flagsAll feature flag reads (LaunchDarkly, GrowthBook, env-var flags)
All feature flag reads (LaunchDarkly, GrowthBook, env-var flags)
No parameter schema in public metadata yet.
grasp_pr_commentGenerate PR health comment with blast radius for changed files
Generate PR health comment with blast radius for changed files
No parameter schema in public metadata yet.
grasp_pr_reviewPost inline review comments on a GitHub PR at high-severity lines
Post inline review comments on a GitHub PR at high-severity lines
No parameter schema in public metadata yet.
grasp_commitsCommit counts for last 7d and 30d
Commit counts for last 7d and 30d
No parameter schema in public metadata yet.
grasp_ci_statusLatest GitHub Actions run — passing/failing/in-progress
Latest GitHub Actions run — passing/failing/in-progress
No parameter schema in public metadata yet.
grasp_doraDORA metrics — Deployment Frequency, Lead Time, CFR, MTTR
DORA metrics — Deployment Frequency, Lead Time, CFR, MTTR
No parameter schema in public metadata yet.
grasp_adrAI-powered MADR-format Architecture Decision Record
AI-powered MADR-format Architecture Decision Record
No parameter schema in public metadata yet.
grasp_embedGenerate iframe, README badge, React snippet for sharing
Generate iframe, README badge, React snippet for sharing
No parameter schema in public metadata yet.
grasp_timelineLast N commits with per-commit changed files + co-change matrix
Last N commits with per-commit changed files + co-change matrix
No parameter schema in public metadata yet.
grasp_contributorsPer-file ownership, bus-factor, top contributors
Per-file ownership, bus-factor, top contributors
No parameter schema in public metadata yet.
grasp_coverageTest coverage overlay — which files lack tests?
Test coverage overlay — which files lack tests?
No parameter schema in public metadata yet.
grasp_issuesMap GitHub Issues to the files they mention
Map GitHub Issues to the files they mention
No parameter schema in public metadata yet.
grasp_jira_issuesMap Jira issues to source files via project key
Map Jira issues to source files via project key
No parameter schema in public metadata yet.
grasp_service_graphService-level dependency graph from OTEL / custom trace JSON
Service-level dependency graph from OTEL / custom trace JSON
No parameter schema in public metadata yet.
grasp_deps_devEcosystem dependents via deps.dev — how many packages depend on this repo
Ecosystem dependents via deps.dev — how many packages depend on this repo
No parameter schema in public metadata yet.
grasp_brain_indexAnalyse and persist a repo to the local SQLite brain
Analyse and persist a repo to the local SQLite brain
No parameter schema in public metadata yet.
grasp_brain_statusWhat's indexed in the brain and when?
What's indexed in the brain and when?
No parameter schema in public metadata yet.
grasp_contextRich file context — layer, complexity, coupling, security, dependents, dependencies
Rich file context — layer, complexity, coupling, security, dependents, dependencies
No parameter schema in public metadata yet.
grasp_arch_diffCompare current state vs brain baseline — detect degradations
Compare current state vs brain baseline — detect degradations
No parameter schema in public metadata yet.
grasp_askAsk a natural language question about your architecture
Ask a natural language question about your architecture
No parameter schema in public metadata yet.
graph_queryRun read-only Cypher queries against the persistent function/file call graph
Run read-only Cypher queries against the persistent function/file call graph
No parameter schema in public metadata yet.
call_chainTrace caller and callee chains for any function, up to configurable depth
Trace caller and callee chains for any function, up to configurable depth
No parameter schema in public metadata yet.
type_propagationFind all functions sharing a return type and their call neighbors
Find all functions sharing a return type and their call neighbors
No parameter schema in public metadata yet.
function_graphRender a Mermaid / DOT / JSON subgraph centred on any named function
Render a Mermaid / DOT / JSON subgraph centred on any named function
No parameter schema in public metadata yet.
grasp_dead_packagesnpm deps in `package.json` but never imported
npm deps in `package.json` but never imported
No parameter schema in public metadata yet.
grasp_runtime_callsMerge a live runtime trace with static edges — actual hot paths
Merge a live runtime trace with static edges — actual hot paths
No parameter schema in public metadata yet.
grasp_db_couplingORM/SQL-to-table coupling map — god tables, high-coupling files
ORM/SQL-to-table coupling map — god tables, high-coupling files
No parameter schema in public metadata yet.
grasp_migration_planPhased topologically-ordered plan for replacing a package/module
Phased topologically-ordered plan for replacing a package/module
No parameter schema in public metadata yet.
grasp_api_surfaceUnified API surface from OpenAPI, GraphQL, Express/FastAPI routes
Unified API surface from OpenAPI, GraphQL, Express/FastAPI routes
No parameter schema in public metadata yet.
grasp_eventsEvent emitters and subscribers — orphaned emits, ghost subscriptions
Event emitters and subscribers — orphaned emits, ghost subscriptions
No parameter schema in public metadata yet.
grasp_perfN+1 queries, synchronous I/O, JSON serialization in loops
N+1 queries, synchronous I/O, JSON serialization in loops
No parameter schema in public metadata yet.
grasp_bundleBundle size treemap — largest files by size category
Bundle size treemap — largest files by size category
No parameter schema in public metadata yet.
grasp_dep_impactImpact of upgrading a dependency across all files
Impact of upgrading a dependency across all files
No parameter schema in public metadata yet.
grasp_cross_repoCompare two sessions — shared files, diverged functions
Compare two sessions — shared files, diverged functions
No parameter schema in public metadata yet.
grasp_diagramGenerate Mermaid flowchart or C4 diagrams from the dependency graph
Generate Mermaid flowchart or C4 diagrams from the dependency graph
No parameter schema in public metadata yet.
grasp_req_traceRequirement traceability — scan `@REQ-NNN` tags against a CSV
Requirement traceability — scan `@REQ-NNN` tags against a CSV
No parameter schema in public metadata yet.
grasp_anomalyAnomaly investigation — BFS blast radius, security in call chain, plain-English summary
Anomaly investigation — BFS blast radius, security in call chain, plain-English summary
No parameter schema in public metadata yet.
grasp_reuseSoftware reuse assessor — Red/Amber/Green compatibility matrix
Software reuse assessor — Red/Amber/Green compatibility matrix
No parameter schema in public metadata yet.
grasp_safety_traceSafety constraint tracer — finds paths that bypass all safety gates
Safety constraint tracer — finds paths that bypass all safety gates
No parameter schema in public metadata yet.
grasp_multilangCross-language call graph (Ada→C, Python→C, JS→WASM)
Cross-language call graph (Ada→C, Python→C, JS→WASM)
No parameter schema in public metadata yet.
grasp_heritageHeritage software genealogy — zero-delta certification shortcuts
Heritage software genealogy — zero-delta certification shortcuts
No parameter schema in public metadata yet.
grasp_icdICD mapper — match Interface Control Document entries to code
ICD mapper — match Interface Control Document entries to code
No parameter schema in public metadata yet.
grasp_ecssECSS-E-ST-40C compliance checker (DI-01, DI-04, DI-07, DI-10, DI-15)
ECSS-E-ST-40C compliance checker (DI-01, DI-04, DI-07, DI-10, DI-15)
No parameter schema in public metadata yet.
grasp_run_diffTraining run diff — changed hyperparameters and affected code
Training run diff — changed hyperparameters and affected code
No parameter schema in public metadata yet.
grasp_eval_coverageEval coverage map — safety gates with no eval coverage flagged critical
Eval coverage map — safety gates with no eval coverage flagged critical
No parameter schema in public metadata yet.
grasp_org_graphOrg-level multi-repo dependency graph with inter-repo edges
Org-level multi-repo dependency graph with inter-repo edges
No parameter schema in public metadata yet.
grasp_api_diffBreaking API change detector — removed/changed exported symbols
Breaking API change detector — removed/changed exported symbols
No parameter schema in public metadata yet.
grasp_pluginsExtension-point map — plugin interfaces, hook points, strategy patterns
Extension-point map — plugin interfaces, hook points, strategy patterns
No parameter schema in public metadata yet.
grasp_semverSemantic versioning enforcer — validate semver bump for the change set
Semantic versioning enforcer — validate semver bump for the change set
No parameter schema in public metadata yet.
Sponsors
Readme
Details
- Repository
- github.com/ashfordeou/grasp
- Website
- github.com/ashfordeOU/grasp
- Categories
- Developer Tools, Security & Pentesting
- Package
grasp-mcp-server- Transport
- STDIO
- Registry
- MCP registry, active