MCP.Market

GraphPilot MCP server

by graphpilot-oss·io.github.graphpilot-oss/graphpilot·v1.0.1·15 stars
No reviews yet

Structural memory for coding agents: callers, callees, blast radius and symbols over MCP.

A91/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A91/100

full report

Adoption
Growing

15 stars43 downloads/wk

Reviews

Write one

Nobody has reviewed GraphPilot yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

GraphPilot tools (4)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • gp_callers

    List every caller of a symbol (direction=callers) or everything it calls

  • gp_impact

    Compute the blast radius of a rename or signature change: direct callers,

  • gp_index

    Re-index the repo after batch edits so subsequent gp_* calls see your changes.

  • gp_recall

    Find a symbol definition by name — returns kind, file:line, and signature.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan37 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 17 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10
Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How GraphPilot compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
91/100
higher than 85% of 48,255 servers
Tools
4
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
15
more than 90% of 28,688 servers
Downloads a week
43
more than 35% of 12,191 servers with a package

What its tools let an agent do: 4 read

Install GraphPilot in Claude Code, Cursor or VS Code

Runs npx -y @graphpilot-oss/graphpilot on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add graphpilot -- npx -y @graphpilot-oss/graphpilot
Add to Cursor

What the publisher says

From the GraphPilot repository's README, as published. We do not edit it. Read it on GitHub

GraphPilot

Structural memory for coding agents. A refactor-safe, branch-aware, evidence-backed code graph that runs entirely on your machine.

Quickstart · Tools · How it works · Editor setup · Limitations · Benchmarks

What it is

GraphPilot is a local CLI + MCP server that indexes your TypeScript/JavaScript repo into a structural graph (symbols, callers, callees, blast radius) and exposes it to coding agents — Claude Code, Cursor, Cline, Windsurf, Continue — so they stop re-grepping the same files every conversation.

The problem it solves: agents burn tokens, hallucinate function names, and miss structural relationships ("what calls this?", "what breaks if I rename it?") because each session starts from zero. GraphPilot is the persistent structural memory in between.

Token cost drops. Hallucinations drop. Refactors get safer.

Put a real coding agent (claude-sonnet-4-5) on 40 structural questions about fastify — a ~300-file Node.js framework — and give it nothing but file reads. Then hand it GraphPilot's four tools and ask the same 40. The agent with GraphPilot uses 61 % fewer tokens, costs $3.68 instead of $8.88 — $5.20 saved per session — and gets more of them right, not fewer (37 correct vs 33). Same model, same questions, same repo; the only change is whether the structural index is there. Reproduce it →

A separate correctness benchmark backs the savings with precision: on 10 standardized structural queries GraphPilot scores F1 0.89 vs grep's 0.42 while reading 99.9 % fewer bytes (721 B vs 528 KB), and the byte-cost win holds at scale — indexing microsoft/TypeScript (601 files, 17 k symbols, 70 k call edges in 10 s) gives sub-millisecond queries and a 99.99 % bytes-read reduction. Full methodology →

One binary, two modes

GraphPilot ships as a single npm package (@graphpilot-oss/graphpilot) with two runtime modes — most users run both.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

GraphPilot: common questions

Is GraphPilot MCP server safe?
Yes, by our scan: it is graded A (91/100). Read the GraphPilot safety report
How do I install GraphPilot?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does GraphPilot need an API key?
No secret keys are declared. It reads 1 setting from the environment.
Is GraphPilot maintained?
The last commit was 54 days ago (2026-09-10). The latest release is v1.0.1.
What can I use instead of GraphPilot?
Servers from other publishers that do the same job: Deja Vu MCP server.
How does GraphPilot compare with other MCP servers?
safety score 91/100 (higher than 85% of 48,255 servers); tools 4 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to GraphPilot

Same job from other publishers: the closest match first, then the best rated.

  • Deja Vu
    deja-vu: local memory over the session histories of forty-three coding agents.
    A