{"name":"io.github.Srinivasan-78/repo2graph","slug":"srinivasan-78-repo2graph","title":"repo2graph","description":"Ask a codebase questions and get cited code back, from a tree-sitter graph of the repo.","url":"https://mcp.market/server/srinivasan-78-repo2graph","rating":null,"grade":"B","score":74,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":24,"stars":3,"forks":9,"downloads_week":null,"last_push_at":"2026-09-18T19:54:33.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/Srinivasan-78/repo2graph","website":"https://github.com/Srinivasan-78/repo2graph/blob/main/docs/mcp.md","version":"1.5.4","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"repo2graph","version":"1.5.4","runtimeHint":"uvx","transport":{"type":"stdio"},"runtimeArguments":[{"description":"The MCP server lives behind the `mcp` extra: the CLI and the GitHub Action never import the SDK, so it is not a runtime dependency of the base package.","value":"repo2graph[mcp]","type":"named","name":"--from"},{"description":"The console script to run out of that package. The bare `repo2graph` entry point is the CLI, not the server.","value":"repo2graph-mcp","type":"positional","valueHint":"command"}],"packageArguments":[{"description":"The repository to serve. Its index is built into <repo_path>/.r2g on the first tool call if one does not exist yet, so no setup step is needed.","isRequired":true,"format":"filepath","placeholder":"/path/to/project","type":"positional","valueHint":"repo_path"}]}],"tools":[],"scan":{"score":74,"grade":"B","scanned_at":"2026-09-19T00:49:04.773Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T00:49:04.727Z","components":{"code":{"score":13,"max":25,"notes":["22 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"env.dump","severity":"high","component":"code","title":"Whole environment serialized (possible credential exfil)","evidence":"repo2graph-1.5.4/repo2graph/fetch.py: …lands on disk either. \"\"\" env = dict(os.environ) # NC-4: Prevent git from hanging on…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"repo2graph","version":"1.5.4","found":true,"license":"MIT","dependencyCount":10,"publishedAt":"2026-09-17T20:39:25.863568Z","repositoryUrl":"https://github.com/Srinivasan-78/repo2graph"}],"repo":{"found":true,"owner":"Srinivasan-78","repo":"repo2graph","archived":false,"pushedAt":"2026-09-18T19:54:33Z","stars":3,"forks":9,"openIssues":67,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/91538297?v=4","ownerCreatedAt":"2021-09-28T11:14:50Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/91538297?v=4&s=128","source":"github"},"presence":{"stars":3,"forks":9,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-09-18T19:54:33.000Z","score":24}}}},"grade_history":[],"reviews":[]}