repoctx MCP server
Local-first code context, impact analysis, and merge-readiness verdicts for AI agents.
1 stars59 downloads/wk
Reviews
Write oneNobody has reviewed repoctx yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
repoctx tools (13, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
agent_experienceScore Agent Experience (AX): a single 0–100 number answering "how cheap and safe is it for an agent to make this change here?", blending Changeability (token cost), Containment (blast radius), Guardrails (tests / validation / CODEOWNERS / CI), and Clarity (task groundedness). Deterministic and composed from the change_impact, token-estimate, and CODEOWNERS engines — no new analysis. Returns sub-sc
change_impactGiven a plain-English change request, rank the files most likely to own the change, with risk flags, suggested tests, and an implementation plan. Optional diff base validates predictions against actual changed files. Writes a local .dev-context/index.json cache into the target repo; the call is idempotent and does not change source files.
context_packGenerate a task-aware local context packet with primary files, related files, tests, patterns, and validation commands. Writes a local .dev-context/index.json cache into the target repo; the call is idempotent and does not change source files.
convergence_scoreScore convergence: a deterministic 0–100 measure of the distance between a stated task (intent) and the actual git diff (execution), with sub-scores for Coverage (did the intent happen?), Scope (did only the intent happen?), and Risk alignment (did unrequested drift land on risk-sensitive paths?). Composed from the change_impact diff comparison and the shared risk vocabulary — no model, no new ana
repo_harnessGenerate setup, validation, runtime, and context commands for an agent or CI harness.
repo_indexIndex local repositories: generate .dev-context indexes and add them to the local catalog. Pass discover:true to find repository roots under the given paths first. Pass dryRun:true to discover and report without writing any indexes or catalog (read-only); this replaces the old repo_discover tool. Without dryRun this mutates the persistent local catalog, so it is not a pure read.
repo_inspectInspect repository shape, languages, package managers, script names, entrypoints, and git metadata. Returns up to 200 representative file paths; pass includeScripts:true to get full script command bodies instead of just names.
repo_mapMap a repository into a compact JSON code map, optionally narrowed by domain, file kind, or controller route. Pass domain to find files for a feature, kind to find files of a type (route, controller, service, apiClient, component, test), or route to match Nest controller routes by substring/regex. Replaces the old find_domain, find_file_kind, find_backend_route, and find_frontend_api_client tools.
repo_searchSearch indexed local repositories by path, domain, kind, route, imports, exports, and symbols. Omit query to list the local repository catalog instead (the catalog listing the old repo_catalog tool returned). Only searches repositories already in the local catalog — if the catalog is empty this returns no matches, so call repo_index on the target repositories first.
review_contextProduce PR review context from local git diff metadata, optionally enriched with GitHub PR comments. Use review_context when you want the raw diff/comment context for a change, not a verdict. Use review_verdict instead for the full impact + review + gate composite, or review_gate for the gate verdict alone.
review_gateGate a change for merge and return a PASS / WARN / FAIL verdict. Omit pr to run the local, no-GitHub gate against a base ref (changed files, secret safety, risk-sensitive paths, release discipline, validation commands, dependency audit, policy profile). Set pr to gate an open GitHub PR via `gh` (PR state, review decision, CODEOWNERS approvals, unresolved conversations, branch protection, status ch
review_verdictwrite actionRun the full review pipeline in one shot: change_impact plus review_context plus review_gate, returning a unified verdict with a derived confidence score. Use review_verdict when you want the complete picture of a change in a single call. Use review_context instead for diff metadata only (no verdict), or review_gate for the gate verdict alone.
workspace_reportGenerate a product-level report across multiple related repositories.
Public scan report
scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it
- Code scan50 source files scanned10/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Findings (3)
- mediumnpm install lifecycle script present
install.script - mediumnpm install lifecycle script present
install.scriptpackage.json: …: { "start": "node src/cli.js", "postinstall": "node scripts/postinstall.mjs", "mc… - mediumeval / new Function used
exec.evalsrc/cli.js: …Hub PR gate", "", "Accuracy eval (v2):", " repoctx eval --accuracy …
How repoctx compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 71/100
- higher than 36% of 48,255 servers
- Tools
- 13
- the typical server has 7
- Tools that change things
- 8%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 65% of 28,688 servers
- Downloads a week
- 59
- more than 48% of 12,191 servers with a package
What its tools let an agent do: 12 read · 1 change
Install repoctx in Claude Code, Cursor or VS Code
Runs npx -y @nugehs/repoctx on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add repoctx -- npx -y @nugehs/repoctx
What the publisher says
From the repoctx repository's README, as published. We do not edit it. Read it on GitHub
Òtítọ́
Models generate the change. Otito proves whether it is safe to merge.
Otito is a local-first, deterministic, model-agnostic trust layer for AI-assisted development. It builds task-aware repository context before an agent edits, scores how much a change actually touches, and gates merge readiness against the exact staged tree, with no server, no account, and no code leaving the machine.
It does not replace Claude Code, Codex, Cursor, Gemini, or any native agent harness. It runs beside them and keeps working as the models change underneath.
A passing local gate is never an automatic merge approval: hosted CI, GitHub review, CODEOWNERS, and the human release decision remain separate authorities.
Install
npm install -g @bashbop/otito
otito doctorOr without installing: npx -y @bashbop/otito doctor.
What it does
Rank what a change actually touches, from the request alone, with no model, no embeddings, and no network:
$ otito impact . "add refund handling to checkout" --top 3
concepts: money flow
1. src/payment/checkout.service.ts score 155
|- role: required
|- path matches: checkout
|- symbol matches: checkout, refund
|- concept match: money flow (×1.4 + 6.0)
|- risk: money flow
2. src/payment/stripe.webhook.ts score 6
|- role: advisory
|- concept match: money flow (×1.4 + 6.0)Gate the exact staged tree, and say precisely why:
$ otito gate . --staged --base origin/main --request "add refund handling to checkout" --min-convergence 80
[OK] Changed files 1 changed file found.
[OK] Staged snapshot Changed-file scope and convergence evidence are captured from the exact staged Git tree.
|- Tree: 7d0b513dd256877d6bd309a6406468a9b1eaeedc
|- Base: b776f04fcfbd02c8ce8d63e1a0c2450be58de039
[OK] Secret safety No secret file paths and no credential values found in the changed content.
[WARN] Risk review Risk-sensitive files changed; maintainer review should be explicit.
|- src/payment/checkout.service.ts
[OK] Convergence Task and diff satisfy the convergence requirement.
|- Score: 100/100 (aligned)
|- Receipt handle: rcpt_a8d31efae06e
|- Subject tree: 7d0b513dd256877d6bd309a6406468a9b1eaeedc
VERDICT WARNThe convergence score is the part a model cannot grade for itself: it compares the stated intent against the files the diff actually changed, and produces a receipt bound to the exact base, parent, and staged-tree identity.
Everyday commands
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
repoctx: common questions
- Is repoctx MCP server safe?
- Mostly: it is graded B (71/100). Read the repoctx safety report
- How do I install repoctx?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does repoctx need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is repoctx maintained?
- The last commit was 41 days ago (2026-09-24). The latest release is v2.6.0.
- What can I use instead of repoctx?
- Servers from other publishers that do the same job: Sem MCP server.
- How does repoctx compare with other MCP servers?
- safety score 71/100 (higher than 36% of 48,255 servers); tools 13 (the typical server has 7); tools that change things 8% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to repoctx
Same job from other publishers: the closest match first, then the best rated.
- SemEntity-level code intelligence: semantic diff, impact analysis, blame, and context for AI agentsnot reviewedWidely usedB