Symbols MCP server

by p1va·io.github.p1va/symbols·v1.0.0·6 stars

No reviews yet

MCP server to read, inspect and troubleshoot codebase symbols

C69/100grade C

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

C69/100

full report

Adoption

Growing

6 stars59 downloads/wk

Reviews

Write one

Nobody has reviewed Symbols yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Symbols tools (8)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

completion
Gets context-aware code completions at a given position. IMPORTANT: To get meaningful results provide precise line and character pointing right after trigger characters. e.g. "client.|some_method()" returns get(), some_method(), another_method() etc.
diagnostics
Retrieves active diagnostics (errors/warnings/hints) for a code file
inspect
Inspects a symbol (either defined in the codebase or imported from a library or framework) and returns documentation (often including signature info), code locations like definition, implementation, type declaration. IMPORTANT: As a follow-up use the read tool present on this MCP server on the locations to quickly get a sense of their outline
logs
Retrieve logs from the Language Server for troubleshooting
read
Reads a file using different levels of preview (none,signature,full) and returns a clean structured view of its symbols. IMPORTANT: Use this during exploring or when just interested in the outline (members, signatures, return types) rather than full implementation.
references
Finds all references of a given symbol across the codebase
rename
Renames all references of a given symbol across the codebase
search
Search for symbols across the workspace. Either exact matches or partilal are supported

Public scan report

scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it

1 high

Code scan40 source files scanned13/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 71 days ago12/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

highShell command built from a string (injection risk)exec.shell-concat

dist/lsp-client.js: …; const result = cp.execSync(`${whichCommand} "${processedCommandName}"`, { …

Overall 69/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Symbols compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 69/100; higher than 33% of 48,255 servers
Tools: 8; the typical server has 7
Tools that change things: 0%; typical: 0%. Fewer write tools means less an agent can break
GitHub stars: 6; more than 85% of 28,688 servers
Downloads a week: 59; more than 48% of 12,191 servers with a package

What its tools let an agent do: 7 read · 1 change

Install Symbols in Claude Code, Cursor or VS Code

Runs npx -y @p1va/symbols on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add symbols -- npx -y @p1va/symbols

Add to Cursor

What the publisher says

From the Symbols repository's README, as published. We do not edit it. Read it on GitHub

Symbols MCP

Read, inspect and navigate through codebase symbols by connecting to Language Servers.

Introduction

By connecting to a Language Server of choice this MCP server makes it easy and efficient for coding agents to explore and navigate the codebase and its dependencies. The server offers a minimal set of tools, resources and skills intended to be simple to use and light on the model's context.

Tools

outline: returns an outline of code symbols in a file, optionally with a small code snippet
inspect: returns docs, declaration and implementation locations for a symbol, including third-party ones
search: returns matching symbols across the codebase
references: finds all references of a symbol across the codebase
callhierarchy**: returns incoming and outgoing call relationships for a callable symbol
rename: renames all references of a symbol across the codebase
diagnostics: returns active diagnostics in a given file
completion: returns contextual completions at a given location
reload: reloads the effective config and reapplies it to currently running language servers

Resources

language-servers://profiles: returns the configured language servers along with their state.
language-servers://profiles/{name}: returns a more detailed view of one language server.
language-servers://profiles/{name}/logs: returns the Language Server logs for troubleshooting.

Skills

install-language-server: installs, configures, validates, or troubleshoots a language-server profile for the current workspace.
language-server-navigation: guides symbol inspection, references, rename, diagnostics, and search through Language Server tools before falling back to text search.

Installation

Codex

codex plugin marketplace add p1va/symbols
codex plugin add symbols@symbols

Then ask Codex:

Please install and configure the language servers relevant to this codebase

Antigravity

agy plugin install https://github.com/p1va/symbols.git

Then ask Antigravity:

Install and configure the language servers relevant to this codebase.

Manual Installation

For manual configuration and language servers examples see here.

Development

pnpm lint outputs the lint violations
pnpm lint:fix attempts to fix lint violations
pnpm format formats the codebase
pnpm format:check checks formatting without changing files
pnpm dev starts in development mode
pnpm build runs the linter and build
pnpm start starts the built artifacts
pnpm test:unit runs the unit tests
pnpm test:integration:{language id} runs the integration tests for a given language

Release

create a single commit and tag. Use minor or major when appropriate.

pnpm version patch to synchronize generated assets, bump the version, and

git push --follow-tags to push the commit and tag.

The version lifecycle checks formatting, mirrors .agents/skills/ into the Antigravity and Codex distributions, and updates the versioned Codex plugin manifest before the commit and tag are created.

Nothing above is checked by us. What we check is on the safety report.

Symbols: common questions

Is Symbols MCP server safe?: With care: it is graded C, so read the findings first (69/100). Read the Symbols safety report
How do I install Symbols?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Symbols need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Symbols maintained?: The last commit was 105 days ago (2026-07-22). The latest release is v1.0.0.
How does Symbols compare with other MCP servers?: safety score 69/100 (higher than 33% of 48,255 servers); tools 8 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.