SocratiCode MCP Server

by giancarloerra• 3.4k•• Scanned•Claim this listing•Request removal
Research & Analysisaiai assistantastclaudeclaude code

Enterprise-grade (40m+ LOC) codebase intelligence, zero-setup, local & private Plugin/Skill/Extension or MCP: hybrid semantic search, polyglot dependency graphs, symbol-level impact analysis & call-flow, interactive HTML viewer, cross-project & branch-aware search, DB/API/infra knowledge. 61% less tokens, 84% fewer calls, 37x faster. Cloud in beta.

SocratiCode is an open-source mcp server by giancarloerra, written mainly in TypeScript, with 3,363 GitHub stars and the AGPL-3.0 license. Its code was last updated Oct 23, 2026. The latest npm release is socraticode 1.16.2, published Nov 5, 2026, with 2,683 downloads last week.

Scan summary: scanned Nov 5, 2026 at commit d56502a. Seen able to read environment and secrets, connect to databases. Scan policy

aboutREADMEsecurityreviews

How to install SocratiCode

Built from the start command in the project's README: npx -y --prefer-online socraticode@latest. Check the README for required keys or settings.

Claude Code · Terminal
claude mcp add socraticode -- npx -y --prefer-online socraticode@latest
Claude Desktop · claude_desktop_config.json
{
  "mcpServers": {
    "socraticode": {
      "command": "npx",
      "args": [
        "-y",
        "--prefer-online",
        "socraticode@latest"
      ]
    }
  }
}
Cursor · .cursor/mcp.json
{
  "mcpServers": {
    "socraticode": {
      "command": "npx",
      "args": [
        "-y",
        "--prefer-online",
        "socraticode@latest"
      ]
    }
  }
}
VS Code · Terminal
code --add-mcp '{"name":"socraticode","command":"npx","args":["-y","--prefer-online","socraticode@latest"]}'

What SocratiCode can touch

  • Run shell commandsNot seen in this scan
  • Run dynamic codeNot seen in this scan
  • Read or write filesNot seen in this scan
  • Read environment and secretsFound in the code by our scan
  • Control a web browserNot seen in this scan
  • Connect to databasesListed as a tool: codebase_graph_query
  • Read or send messagesNot seen in this scan
  • Touch money or tradingNot seen in this scan
  • Connect to the internetNo connections seen while running

"Not seen" means our checks did not find it, and the tool may still do it. Covers commit d56502a, Nov 5, 2026. See the scan policy.

Before you install SocratiCode

AgenticMart scanned SocratiCode on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What it can access

  • An MCP server is a program your AI app starts and talks to. A local one runs with your user's permissions: it can see the files, environment variables and network your account can.
  • Based on its description and topics, it likely needs to connect to a database.
  • Based on its description and topics, it likely needs to act on cloud infrastructure.

Before you install

  1. Give it a read-only database user unless it must write.
  2. Use a role with only the permissions it needs, never an admin key.
  3. Pin the version you reviewed instead of always installing the latest release.
  4. Read the tool list or scripts before the first run, and keep approval prompts on for actions that write, send or delete.
  • Maintained by giancarloerra on GitHub, 3,363 stars and 428 forks. Popularity is not proof of safety.
  • Last code change: Oct 23, 2026.
  • Open-source license: AGPL-3.0.
Read the scan reportWhat our scan checks

Tools SocratiCode exposes (26)

Listed by the server itself during our scan of commit d56502a.

  • codebase_index

    Start indexing a codebase in the background. Returns immediately. Call codebase_status to poll progress until 100%. Do NOT search until indexing is complete. If already indexing, returns current progress.

  • codebase_update

    Incrementally update an existing codebase index. Only re-indexes changed files. Runs synchronously. Use it to refresh a manual/off snapshot, working-tree edits before the next Git transition in git mode, or whenever an immediate catch-up is needed.

  • codebase_remove

    Remove a project's codebase index entirely from the vector database. Safely stops the file watcher, cancels any in-progress indexing/update (with drain), and waits for any in-flight graph build before deleting.

  • codebase_prune

    Inventory stored project identities and their resources. Report-only by default. Applying requires an exact identity, the confirmation token from a fresh inventory, and an acknowledgement that no other host is writing to it; path absence on this host is advisory, not proof of abandonment.

  • codebase_stop

    Gracefully stop an in-progress indexing operation. The current batch will finish and checkpoint, preserving all progress. Re-run codebase_index to resume from where it left off.

  • codebase_watch

    Start/stop watching a project directory for file changes and automatically update the index. When starting, first runs an incremental update to catch up, then watches for changes. SOCRATICODE_WATCHER=manual allows explicit starts only; off and git reject file-watcher starts. In git mode, status repo

  • codebase_search

    Semantic search across an indexed codebase. Only use after codebase_index is complete (check codebase_status first). Returns relevant code chunks matching a natural language query.

  • codebase_status

    Check index status: chunk count, indexing progress (%), last completed operation, file watcher state. Call after codebase_index to poll until 100% complete.

  • codebase_graph_build

    Build a dependency graph of the codebase using static analysis (ast-grep). Maps import/require/export relationships between files. Runs in the background — call codebase_graph_status to poll progress until complete.

  • codebase_graph_query

    Query the code dependency graph for a specific file. Returns what the file imports and what files depend on it.

  • codebase_graph_stats

    Get statistics about the code dependency graph: total files, edges, most connected files, orphan files, circular dependencies.

  • codebase_graph_circular

    Find circular dependencies in the codebase.

  • codebase_graph_visualize

    Visualise the code dependency graph. Two modes: • mode="mermaid" (default) — returns a Mermaid diagram (text) colour-coded by language, circular deps highlighted. Best for inline rendering inside chat, GitHub, or editors that render Mermaid. • mode="interactive" — writes a self-contained HTML pa

  • codebase_graph_remove

    Remove a project's persisted code graph. Waits for any in-flight graph build to finish first. The graph can be rebuilt with codebase_graph_build or will be rebuilt automatically on the next codebase_index.

  • codebase_graph_status

    Check the status of the code dependency graph: build progress (if building), node/edge count, when it was last built, whether it's cached in memory. Use this to poll progress after calling codebase_graph_build.

  • codebase_impact

    Impact Analysis — return the BLAST RADIUS for a file or symbol. Lists every file (and, where helpful, function) that could break if you change the target. Polymorphic on target: a path-like string ('src/foo.ts') triggers file-mode; a name-like string ('validateUser') triggers symbol-mode. Use this B

  • codebase_flow

    Trace the EXECUTION FLOW forward from an entry point — what does this code call into? With NO args, returns a ranked list of auto-detected entry points (orphans with outgoing calls, conventional names like main(), framework routes, tests). With an entrypoint argument, returns the call tree.

  • codebase_symbol

    360° view of a symbol: definition, kind, callers, callees, confidence levels. Use to understand a function or class before changing it.

  • codebase_symbols

    List symbols in a file, or search by name across the project. Use to discover what exists before drilling into a single symbol with codebase_symbol.

  • codebase_context

    List all context artifacts defined in .socraticodecontextartifacts.json — database schemas, API specs, infra configs, architecture docs, etc. Shows each artifact's name, description, path, and index status. Use this to discover what project knowledge is available beyond source code.

  • codebase_context_search

    Semantic search across context artifacts (database schemas, API specs, infra configs, etc.) defined in .socraticodecontextartifacts.json. Auto-indexes on first use and auto-detects stale artifacts. Use this to find relevant infrastructure or domain knowledge.

  • codebase_context_index

    Index or re-index all context artifacts defined in .socraticodecontextartifacts.json. Chunks and embeds artifact content into the vector database for semantic search. Usually not needed — codebase_context_search auto-indexes on first use.

  • codebase_context_remove

    Remove all indexed context artifacts for a project from the vector database. Blocked while indexing is in progress — use codebase_stop or wait for the operation to finish first.

  • codebase_health

    Check the health of all infrastructure: Docker, Qdrant container, Ollama, and embedding model. Use this to diagnose setup issues.

  • codebase_list_projects

    List all projects that have been indexed (have collections in Qdrant).

  • codebase_about

    Display information about SocratiCode — what it is, its tools and how to use it. Use this to get a quick overview of the MCP tools and their purpose.

SocratiCode is an open-source mcp server by giancarloerra, written mainly in TypeScript. Enterprise-grade (40m+ LOC) codebase intelligence, zero-setup, local & private Plugin/Skill/Extension or MCP: hybrid semantic search, polyglot dependency graphs, symbol-level impact analysis & call-flow, interactive HTML viewer, cross-project & branch-aware search, DB/API/infra knowledge. 61% less tokens, 84% fewer calls, 37x faster. Cloud in beta.

At a glance

Stars
3.4k
Forks
428
Language
TypeScript
License
AGPL-3.0
Created
Feb 2026
Last update
Oct 23, 2026
Type
MCP Server
Price
Free

Topics

aiai-assistantastclaudeclaude-codecode-graphcodebase-intelligencecontext-enginedockerembeddingsgeminigemini-cli-extensionmcpopenaiqdrantsemanticsemantic-searchvector-databasevector-embeddingsvector-search

Questions about SocratiCode

What is SocratiCode?

Enterprise-grade (40m+ LOC) codebase intelligence, zero-setup, local & private Plugin/Skill/Extension or MCP: hybrid semantic search, polyglot dependency graphs, symbol-level impact analysis & call-flow, interactive HTML viewer, cross-project & branch-aware search, DB/API/infra knowledge. 61% less tokens, 84% fewer calls, 37x faster. Cloud in beta.

Who maintains SocratiCode?

SocratiCode is maintained by giancarloerra on GitHub (giancarloerra/SocratiCode). AgenticMart lists it from public repository data.

Is SocratiCode safe to use?

AgenticMart scanned SocratiCode on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What license does SocratiCode use?

It is published under the AGPL-3.0 license.

SocratiCode alternatives

View more →

Similar mcp servers in Research & Analysis, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
SocratiCode (this page)
giancarloerra
3.4kAGPL-3.0Oct 23, 2026Scanned, no flagged issues
Worldmonitor
koala73
90kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
GPT Researcher
assafelovic
30kApache-2.0Oct 10, 2026Scanned, no flagged issues
Auto Claude Code Research In Sleep
wanshuiyin
18kMITNov 1, 2026Scanned, no flagged issues
Deep Research
u14app
4.7kMITJun 18, 2026Scanned, no flagged issues
MCP Server Chart
antvis
4.4kMITAug 27, 2026Scanned, no flagged issues