Ontology Atlas MCP Server

by wlsdks• 147•• Scanned•Claim this listing•Request removal
Coding Agentsai agents frameworkclaude codecode visualizationcodebasecodex

Understand what your codebase builds, why it is structured that way, and what a change could affect. One shared Markdown ontology for humans and coding agents—visualized for people, accessible to agents through MCP, and reviewed with Git. Local-first. Open source.

Ontology Atlas is an open-source mcp server by wlsdks, written mainly in TypeScript, with 147 GitHub stars and the MIT license. Its code was last updated Oct 26, 2026.

Scan summary: scanned Nov 5, 2026 at commit fe19b3f. Seen able to run dynamic code, read environment and secrets, connect to the internet. Scan policy

aboutREADMEsecurityreviews
Scanned
Full scan at fe19b3f · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit11 known vulnerabilitiespass
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (38)

  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Install or build failed in a clean environment
    node] 4: 0x1477ee5 [/usr/local/bin/node] 5: 0x1477f13 [/usr/local/bin/node] 6: 0x1490fea [/usr/local/bin/node] 7: 0x14941b8 [/usr/local/bin/node] 8: 0x1cfcc61 [/usr/local/bin/node] Next.js build worker exited with code: null and signal: SIGABRT  ELIFECYCLE  Command failed with exit code 1.
  • medium
    Install contacted hosts other than package registries
    fonts.googleapis.com, fonts.gstatic.com, telemetry.nextjs.org
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    scripts/harness/claude-hooks.test.mjs:643
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    scripts/harness/claude-hooks.test.mjs:643
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    scripts/harness/claude-hooks.test.mjs:644
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    scripts/lib/benchmark/construction-prompts.mjs:31
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    src/features/acp-session/model/permissions/permission-locality.test.ts:14
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    src/features/acp-session/model/permissions/permission-locality.test.ts:41
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    src/features/vault-agent/model/compile/compile-executor.test.ts:142
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    src/features/vault-agent/model/compile/source-text.test.ts:48
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    src/shared/lib/connectors/mcp-install-link.test.ts:90
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    src/shared/ui/document/lang-boot-script.test.tsx:12
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    src/widgets/acp-chat-panel/ui/AcpPermissionCard.test.tsx:489
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    src/widgets/acp-chat-panel/ui/AcpPermissionCard.test.tsx:507
  • low
    Possible example credential in docs/tests: generic-api-key
    cli/src/lib/git/preflight-match.test.mjs:45
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    cli/src/integration.test.mjs:2918
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    src/widgets/docs-vault/lib/relative-doc-path.test.ts:28
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    glib@0.18.5: 1 known vulnerability
    RUSTSEC-2024-0429
    src-tauri/Cargo.lock
  • low
    proc-macro-error@1.0.4: 1 known vulnerability
    RUSTSEC-2024-0370
    src-tauri/Cargo.lock
  • low
    unic-char-property@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0081
    src-tauri/Cargo.lock
  • low
    unic-char-range@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0075
    src-tauri/Cargo.lock
  • low
    unic-common@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0080
    src-tauri/Cargo.lock
  • low
    unic-ucd-ident@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0100
    src-tauri/Cargo.lock
  • low
    unic-ucd-version@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0098
    src-tauri/Cargo.lock
  • low
    zbus_names@4.3.2: 1 known vulnerability
    RUSTSEC-2026-0371
    src-tauri/Cargo.lock
  • low
    zvariant@5.11.0: 1 known vulnerability
    RUSTSEC-2026-0370
    src-tauri/Cargo.lock
  • low
    zvariant_derive@5.11.0: 1 known vulnerability
    RUSTSEC-2026-0372
    src-tauri/Cargo.lock
  • low
    package.json has a prepare script
    node scripts/prepare-worktree.mjs
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
fonts.googleapis.comfonts.gstatic.comregistry.npmjs.orgtelemetry.nextjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Ontology Atlas alternatives

View more →

Similar mcp servers in Coding Agents, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Ontology Atlas (this page)
wlsdks
147MITOct 26, 2026Scanned, no flagged issues
Context Mode
mksglu
33kNone foundNov 1, 2026Not scanned yet
Serena
oraios
31kNone foundOct 28, 2026Not scanned yet
Fastmcp
PrefectHQ
28kApache-2.0Nov 1, 2026Scanned, no flagged issues
Nuclear
nukeop
19kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
MCP For Beginners
microsoft
18kMITOct 30, 2026Scanned, no flagged issues