MCP.Market

karst MCP server

by Moin105·io.github.Moin105/karst·v0.2.9

Code context for AI dev tools: pack-scoped, cited code retrieval over MCP.

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
New

0 stars45 downloads/wk

Reviews

Write one

Nobody has reviewed karst yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

karst tools (5)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • find_impact

    Predict the blast radius of changing a function, method, class, or file.

  • index_repository

    Index a repository so search_code and find_impact can work on it.

  • index_status

    Report whether a repository is indexed and how large the index is.

  • list_packs

    List the named context packs available for a repository.

  • search_code

    Find the most relevant code in a repository for a question or task.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan42 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 62 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How karst compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 75% of 48,255 servers
Tools
5
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
45
more than 37% of 12,191 servers with a package

What its tools let an agent do: 5 read

Install karst in Claude Code, Cursor or VS Code

claude mcp add karst -- uvx karst
Add to Cursor

What the publisher says

From the karst repository's README, as published. We do not edit it. Read it on GitHub

karst

<!-- mcp-name: io.github.Moin105/karst -->

Know what your change breaks — without your code leaving your machine. karst gives any AI coding tool — Cursor, Claude Desktop, a custom agent — a local map of your codebase. It answers questions with exact file:line citations and walks a real call / import / inheritance graph to compute the blast radius of a change — "what else breaks if I touch this?" — the question plain search and agentic grep can't answer.

It runs 100% locally, speaks MCP (so it drops into any agent), and never calls an LLM itself — your source code never leaves the box. As a bonus, pack-scoped retrieval cuts ~60% of the input tokens per question.

Regulated, air-gapped, or IP-sensitive team? karst is built for the

environments cloud coding tools structurally can't enter — fully offline, no

telemetry, source you can audit. Start with the

Compliance & Air-Gap Pack (attestation,

network-egress table, pre-filled security questionnaire, offline install).

uv tool install karst      # recommended — fast, and puts `karst` on PATH for you
# or
pipx install karst         # isolated install, also handles PATH
# or
pip install karst          # if `karst` isn't found after, use `python -m karst …`

uv and pipx are the cleanest because they

put the karst command on your PATH automatically. With plain pip --user

(notably Microsoft Store Python) the command may not be on PATH — in that case

python -m karst … always works, no PATH setup required.

Why

Most "chat with your codebase" tools dump tens of thousands of vaguely-related tokens into the model on every question. You can't see what was loaded, you can't scope it, and the bill arrives at the end of the month. karst inverts that:

this?" — which embeddings alone can't.

  • Scopes — pack-filtered retrieval reads ~200 chunks, not 5,000.
  • Cites — every chunk carries an exact file:line. Verify, don't trust.
  • Predicts — a real call/import graph answers "what else breaks if I change

Measured on a real 246-file NestJS + Next.js repo: 906 chunks indexed, re-index 343s → 2.3s incremental, ~$0.019 per question on Sonnet 4.6 (shown before the call), 60% fewer tokens with packs attached.

Quickstart (CLI)

karst command not found? Your Python Scripts dir isn't on PATH (common

with Microsoft Store Python). Everything below works the same with

python -m karst … — no PATH setup. (Or install via uv/pipx, which put

karst on PATH for you.)

cd your-project

# one command: index + call/import graph + suggested packs
karst quickstart                 #  or:  python -m karst quickstart

# ask questions about the code (defaults to this folder's index)
karst ask "how does checkout charge the user?" --no-llm    # cited code, no API key
karst ask -i                     # interactive: ask many questions

# what breaks if I change a function?
karst impact --target checkout --graph-path ~/.karst/indexes/your-project/graph.pkl

# review a diff with severity-tagged, cited findings
karst review --staged --storage ~/.karst/indexes/your-project

karst examples                   # a copy-paste cheatsheet of everything

karst quickstart prints the exact follow-up commands with your index path filled in. karst ask writes an LLM answer when ANTHROPICAPIKEY / OPENAIAPIKEY is set; otherwise add --no-llm for cited chunks (no key). The MCP server below needs no key either — your IDE supplies the model.

Use it from your IDE (MCP)

karst ships an MCP server (karst-mcp) exposing five tools — searchcode, findimpact, listpacks, indexstatus, index_repository — over stdio.

Claude Desktop (claudedesktopconfig.json) or Cursor (.cursor/mcp.json) — pick whichever launcher you have:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

karst: common questions

Is karst MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the karst safety report
How do I install karst?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does karst need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is karst maintained?
The last commit was 100 days ago (2026-07-27). The latest release is v0.2.9.
How does karst compare with other MCP servers?
safety score 88/100 (higher than 75% of 48,255 servers); tools 5 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.