Forensic Deepdive MCP server

Read from the package source without running it. The installed server may list more.

• _text
• add
• archaeology_tool

  Git-history view of a file (or a symbol's enclosing file): churn, top authors with share, co-change cluster, defect proximity, bus factor, recent commits. Use to answer "who owns this and how risky is it?".

• context_tool

  One-call 360° view of a symbol: definition + callers + callees + members + siblings + extends/implements + recent commits + dominant author. Use to answer "what does X do and who owns it?".

• flow_tool

  DFS over CALLS edges from any symbol matching ``entry_point`` up to ``max_depth`` hops. Returns execution-path traces. Use to answer "trace what happens when X is invoked".

• get_weather
• impact_tool

  Blast-radius analysis for a symbol. Walks CALLS edges in the given direction (upstream=callers, downstream=callees) up to ``depth`` hops. Returns depth-bucketed lists with confidence labels. Use to answer "what breaks if I change X?".

• query_toolwrite action

  Run a raw Cypher query against the LadybugDB graph, OR pass ``natural_language`` for a hybrid search (lexical BM25 + structural graph signal + opt-in offline semantic, fused by RRF and shaped to rank implementations above tests). Results carry provenance + confidence; ``retrievers_active``/``degraded`` report which tiers ran. Set ``semantic=True`` to add the ONNX tier (needs the ``[semantic]`` ext

• recall_insights_tool

  Return prior learnings about *symbol* recorded via record_insight (DEC-019). Newest first, capped at ``limit``. ``since`` (ISO timestamp) filters to insights at or after that time. Use when starting work on a symbol to surface what past sessions learned.

• record_insight_tool

  Persist one durable learning about this codebase (DEC-019). Use after verifying a hypothesis, fixing a bug, or noticing a cross-session pattern. ``verified_by`` must be one of: "human", "static", "test", "ai". Surfaces back via context() and recall_insights() on future sessions.

• trace_tool

  Trace one cross-stack feature slice across the `Endpoint` join node (DEC-043). ``downstream`` from a frontend/client symbol walks CALLS_ENDPOINT → Endpoint → HANDLES → handler → CALLS tail; ``upstream`` from a route handler answers "who calls this endpoint". Endpoints with no located handler are surfaced honestly (handler=null). Use to answer "what backend does this component hit?" or "who calls t

• visualize_tool

  Render a bounded Mermaid diagram of the graph around ``target`` (a symbol or file), or ``central=True`` for the top-``max_nodes`` symbols. Returns a fenced ```mermaid block. Edge dash style encodes confidence (solid=EXTRACTED, dashed=INFERRED, dotted=AMBIGUOUS). Use to answer "show me a diagram of X / how does X connect".

• x

  Canonicalize an MCP tool name for keying: strip surrounding whitespace and collapse ``. / -`` runs to a single ``_``. Returns ``""`` for an empty/blank name (the caller drops it — no stable id).

• Code scan140 source files scanned20/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 39 days ago12/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Safety score

80/100

higher than 60% of 48,255 servers

Tools

13

the typical server has 7

Tools that change things

8%

typical: 0%. Fewer write tools means less an agent can break

GitHub stars

2

more than 75% of 28,688 servers

Forensic Deepdive: common questions

Is Forensic Deepdive MCP server safe?

Mostly: it is graded B (80/100). Read the Forensic Deepdive safety report

How do I install Forensic Deepdive?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Forensic Deepdive need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Forensic Deepdive maintained?

The last commit was 80 days ago (2026-08-16). The latest release is v0.10.0.

What can I use instead of Forensic Deepdive?

Servers from other publishers that do the same job: Codebase Memory MCP server, Neo4j Memory MCP server and State Memory MCP server.

How does Forensic Deepdive compare with other MCP servers?

safety score 80/100 (higher than 60% of 48,255 servers); tools 13 (the typical server has 7); tools that change things 8% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.