Chiasmus MCP Server

Findings (15)

• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/sdk@1.30.0: 6 known vulnerabilities

  GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more

  pnpm-lock.yaml
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  body-parser@2.3.0: 1 known vulnerability

  GHSA-27r3-jxmh-p828

  pnpm-lock.yaml
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  source-map-js@1.2.1: 1 known vulnerability

  GHSA-68fv-2mgg-jv7q

  pnpm-lock.yaml
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  vite@8.0.13: 7 known vulnerabilities

  GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff, GHSA-r825-w8mm-5pxw +2 more

  pnpm-lock.yaml
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@4.4.3: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  pnpm-lock.yaml
• lowLow. Minor, or common in normal tools. Shown for information.
  @hono/node-server@2.1.1: 1 known vulnerability

  GHSA-rmxm-3fg6-px4f

  pnpm-lock.yaml
• lowLow. Minor, or common in normal tools. Shown for information.
  @vitest/mocker@4.1.11: 2 known vulnerabilities

  GHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp

  pnpm-lock.yaml
• lowLow. Minor, or common in normal tools. Shown for information.
  fast-uri@3.1.7: 5 known vulnerabilities

  GHSA-333x-w4r6-6crp, GHSA-hrr3-gc8f-f4qj, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h

  pnpm-lock.yaml
• lowLow. Minor, or common in normal tools. Shown for information.
  hono@4.13.5: 2 known vulnerabilities

  GHSA-5r4p-p66f-jhc7, GHSA-hxh3-vqpv-xpqv

  pnpm-lock.yaml
• lowLow. Minor, or common in normal tools. Shown for information.
  ip-address@10.7.0: 3 known vulnerabilities

  GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rxp7-6hxx-x8q5

  pnpm-lock.yaml
• lowLow. Minor, or common in normal tools. Shown for information.
  qs@6.16.0: 1 known vulnerability

  GHSA-6pq8-jhm2-2vcw

  pnpm-lock.yaml
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)

Network activity

Tools exposed (9)

• chiasmus_verify

  Submit formal logic to solver. Returns verified result. SOLVERS: z3 — SMT-LIB format → SAT + model | UNSAT + unsatCore | error prolog — facts/rules + query goal → answers | error FORMAT (optional, prolog only): mermaid — parse Mermaid flowchart/stateDiagram → Prolog facts + reachability

• chiasmus_skills

  Search/list formalization templates. Returns skeletons, slots, normalization recipes, usage metadata. Find template before chiasmus_verify or chiasmus_formalize. query: "access control policies conflict" → search solver: "prolog" → filter by solver name: "policy-contradiction" → exact lookup

• chiasmus_formalize

  Find best template for problem → return skeleton + slot-filling instructions + tips. Guided workflow: 1. chiasmus_formalize → get template + slots + tips 2. Fill slots using your context 3. chiasmus_verify → verified result

• chiasmus_solve

  End-to-end: select template → fill slots → lint → verify → correction loop. Needs ANTHROPIC_API_KEY | DEEPSEEK_API_KEY | OPENAI_API_KEY. Without key → falls back to chiasmus_formalize. Returns: solver result + template used + correction history. NOTE: `converged: true` means the correction loop rea

• chiasmus_lint

  Fast structural validation of formal spec without running solver. Auto-fixes: markdown fences, (check-sat)/(get-model), (set-logic). Checks: balanced parens, unfilled {{SLOT:}} markers, missing periods (Prolog). Returns cleaned spec + fixes applied + remaining errors.

• chiasmus_graph

  Analyze source-code call graphs (tree-sitter + Prolog). Absolute paths only. Languages: TypeScript, JavaScript, Python, Go, Rust, Clojure, Scheme, Racket, Common Lisp. ANALYSES: summary overview counts callers who calls target (needs target) callees what target calls (

• chiasmus_craft

  Create a new formalization template and add it to the skill library. The calling LLM designs the template — no API key needed. Describe your problem, then submit a template with a skeleton (formal spec with {{SLOT:name}} markers), slot definitions, and normalization recipes. After creation, the te

• chiasmus_review

  Phased code-review recipe — which tools to run, in what order, what to flag. Pure plan, no side effects. Execute phases sequentially; each action carries 'interpret' guidance. End with a numbered issue list per the reporting section. FOCUS: all structural → architecture → security → res

• chiasmus_map

  Pre-built codebase map — read before bulk file reads. Returns a compact outline derived from the tree-sitter call graph: per-file headlines with exports, signatures, token estimates, leading doc. Lets you answer "what is in this repo" / "what does this file expose" / "where is X defined" without op