SocratiCode MCP Server

Findings (6)

• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/integration/qdrant.test.ts:294
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  tests/integration/char-cap-split-retrieval.test.ts:69
• lowLow. Minor, or common in normal tools. Shown for information.
  @hono/node-server@1.19.18: 1 known vulnerability

  GHSA-rmxm-3fg6-px4f

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  glob@10.5.0: 1 known vulnerability

  GHSA-3g3m-2fjr-6pw4

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  minimatch@9.0.9: 1 known vulnerability

  GHSA-g3hv-75wg-m249

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  Reads environment variables not listed in the manifest

  SOCRATICODE_PROJECT_ID, SOCRATICODE_BRANCH_AWARE, SOCRATICODE_LINKED_PROJECTS, SOCRATICODE_WATCHER, QDRANT_PORT, QDRANT_GRPC_PORT, QDRANT_HOST, QDRANT_COLLECTION_PREFIX, OLLAMA_PORT, OLLAMA_HOST, SEARCH_DEFAULT_LIMIT, SEARCH_MIN_SCORE, MAX_FILE_SIZE_MB, MAX_CHUNK_CHARS, EXTRA_EXTENSIONS

Network activity

Tools exposed (26)

• codebase_index

  Start indexing a codebase in the background. Returns immediately. Call codebase_status to poll progress until 100%. Do NOT search until indexing is complete. If already indexing, returns current progress.

• codebase_update

  Incrementally update an existing codebase index. Only re-indexes changed files. Runs synchronously. Use it to refresh a manual/off snapshot, working-tree edits before the next Git transition in git mode, or whenever an immediate catch-up is needed.

• codebase_remove

  Remove a project's codebase index entirely from the vector database. Safely stops the file watcher, cancels any in-progress indexing/update (with drain), and waits for any in-flight graph build before deleting.

• codebase_prune

  Inventory stored project identities and their resources. Report-only by default. Applying requires an exact identity, the confirmation token from a fresh inventory, and an acknowledgement that no other host is writing to it; path absence on this host is advisory, not proof of abandonment.

• codebase_stop

  Gracefully stop an in-progress indexing operation. The current batch will finish and checkpoint, preserving all progress. Re-run codebase_index to resume from where it left off.

• codebase_watch

  Start/stop watching a project directory for file changes and automatically update the index. When starting, first runs an incremental update to catch up, then watches for changes. SOCRATICODE_WATCHER=manual allows explicit starts only; off and git reject file-watcher starts. In git mode, status repo

• codebase_search

  Semantic search across an indexed codebase. Only use after codebase_index is complete (check codebase_status first). Returns relevant code chunks matching a natural language query.

• codebase_status

  Check index status: chunk count, indexing progress (%), last completed operation, file watcher state. Call after codebase_index to poll until 100% complete.

• codebase_graph_build

  Build a dependency graph of the codebase using static analysis (ast-grep). Maps import/require/export relationships between files. Runs in the background — call codebase_graph_status to poll progress until complete.

• codebase_graph_query

  Query the code dependency graph for a specific file. Returns what the file imports and what files depend on it.

• codebase_graph_stats

  Get statistics about the code dependency graph: total files, edges, most connected files, orphan files, circular dependencies.

• codebase_graph_circular

  Find circular dependencies in the codebase.

• codebase_graph_visualize

  Visualise the code dependency graph. Two modes: • mode="mermaid" (default) — returns a Mermaid diagram (text) colour-coded by language, circular deps highlighted. Best for inline rendering inside chat, GitHub, or editors that render Mermaid. • mode="interactive" — writes a self-contained HTML pa

• codebase_graph_remove

  Remove a project's persisted code graph. Waits for any in-flight graph build to finish first. The graph can be rebuilt with codebase_graph_build or will be rebuilt automatically on the next codebase_index.

• codebase_graph_status

  Check the status of the code dependency graph: build progress (if building), node/edge count, when it was last built, whether it's cached in memory. Use this to poll progress after calling codebase_graph_build.

• codebase_impact

  Impact Analysis — return the BLAST RADIUS for a file or symbol. Lists every file (and, where helpful, function) that could break if you change the target. Polymorphic on target: a path-like string ('src/foo.ts') triggers file-mode; a name-like string ('validateUser') triggers symbol-mode. Use this B

• codebase_flow

  Trace the EXECUTION FLOW forward from an entry point — what does this code call into? With NO args, returns a ranked list of auto-detected entry points (orphans with outgoing calls, conventional names like main(), framework routes, tests). With an entrypoint argument, returns the call tree.

• codebase_symbol

  360° view of a symbol: definition, kind, callers, callees, confidence levels. Use to understand a function or class before changing it.

• codebase_symbols

  List symbols in a file, or search by name across the project. Use to discover what exists before drilling into a single symbol with codebase_symbol.

• codebase_context

  List all context artifacts defined in .socraticodecontextartifacts.json — database schemas, API specs, infra configs, architecture docs, etc. Shows each artifact's name, description, path, and index status. Use this to discover what project knowledge is available beyond source code.

• codebase_context_search

  Semantic search across context artifacts (database schemas, API specs, infra configs, etc.) defined in .socraticodecontextartifacts.json. Auto-indexes on first use and auto-detects stale artifacts. Use this to find relevant infrastructure or domain knowledge.

• codebase_context_index

  Index or re-index all context artifacts defined in .socraticodecontextartifacts.json. Chunks and embeds artifact content into the vector database for semantic search. Usually not needed — codebase_context_search auto-indexes on first use.

• codebase_context_remove

  Remove all indexed context artifacts for a project from the vector database. Blocked while indexing is in progress — use codebase_stop or wait for the operation to finish first.

• codebase_health

  Check the health of all infrastructure: Docker, Qdrant container, Ollama, and embedding model. Use this to diagnose setup issues.

• codebase_list_projects

  List all projects that have been indexed (have collections in Qdrant).

• codebase_about

  Display information about SocratiCode — what it is, its tools and how to use it. Use this to get a quick overview of the MCP tools and their purpose.