Rebuild Dossier MCP server
com.parkerfawcett/rebuild-dossier·v0.2.6·3 starsMCP server that reverse-engineers a locked rebuild spec from an existing app.
3 stars130 downloads/wk
Reviews
Write oneNobody has reviewed Rebuild Dossier yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Rebuild Dossier tools (6)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
crawl_siteflag_known_buggenerate_specget_case_queueingest_reporesolve_case
Public scan report
scanner v0.1.10 · 2026-10-16 · same rubric, same numbers if you re-run it
- Code scan104 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 14 days ago15/15
- Maintainer identitynamespace and repository owner differ3/10
Findings (1)
- mediumeval / new Function used
exec.evaldist/crawl/crawler.js: … const links = await page.$$eval('a[href]', (anchors) => anchors.map((a) …
How Rebuild Dossier compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 77/100
- higher than 50% of 48,243 servers
- Tools
- 6
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 3
- more than 80% of 28,706 servers
- Downloads a week
- 130
- more than 68% of 12,306 servers with a package
What its tools let an agent do: 5 read · 1 create
Install Rebuild Dossier in Claude Code, Cursor or VS Code
Runs npx -y rebuild-dossier on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add rebuild-dossier -- npx -y rebuild-dossier
What the publisher says
From the Rebuild Dossier repository's README, as published. We do not edit it. Read it on GitHub
rebuild-dossier
An MCP server that reverse-engineers a trustworthy rebuild spec — a locked CLAUDE.md, .claude/ config, and a mutation-tested test suite — out of an existing app, so any coding agent can rebuild it cleanly against that spec instead of guessing.
It does not rebuild the app. It produces the spec, contracts, and tests a coding agent consumes to do that separately. This boundary is deliberate — see Why below.
Validated against a real app. The core loop (ingest, resolve cases, generate spec) has been
tested end-to-end against a real, messy repo with two independent fresh-agent handoffs on two
model tiers, plus a mutation-tested test suite.
docs/v0-findings.md covers what worked, what broke, and what's still open.
Quick start
Available on npm:
npx rebuild-dossier@latest --help # pulls and verifies the package, or:
npm install -g rebuild-dossier # install the CLI globallyRequires Node 20.12+ (set in package.json engines). To run from source instead, clone the repo, npm install, and use npm start.
Then add it as an MCP server. In Claude Code, from the project you want to rebuild:
claude mcp add rebuild-dossier -- npx -y rebuild-dossier@latest(or add this to your ~/.claude.json / project .mcp.json):
{
"mcpServers": {
"rebuild-dossier": {
"command": "npx",
"args": ["-y", "rebuild-dossier@latest"]
}
}
}Then in a session. The first call, ingest_repo, runs instantly with zero setup: static analysis only, no browser, no Chromium, no LLM call. Run it on any app to confirm the server is alive before committing to the full workflow:
ingest_repo({ path: "/path/to/some-app" })
get_case_queue({ repoPath: "/path/to/some-app", interactive: true })
# ...resolve whatever the queue surfaces...
generate_spec({ repoPath: "/path/to/some-app" })This writes a clean some-app-rebuild/ sibling directory. cd into it, start a fresh Claude Code session (nothing else should be in scope), and paste the contents of its kickoff-prompt.txt.
If this looks useful, a star helps other developers find it.
Why
Prior research (AgentModernize, arXiv:2605.17535) found that a rebuild pipeline scores 0% behavioral equivalence with no verified feedback loop, and only 9–19% with a coarse one. The bet behind this tool: locking interface contracts before running tests, plus a strict one-test-at-a-time retry loop instead of batch regeneration, does meaningfully better.
The riskiest part of any such pipeline is silently validating a bug as intentional — four sources of evidence can quietly agree on the same mistake with nobody ever having said why. So the single non-negotiable rule in this tool: auto-resolving an ambiguity requires both signal agreement and an affirmative signal that someone actually decided (a stated comment, a TODO admitting a bug, or a direct human answer). Silent agreement alone — code and observed behavior simply matching, with no one ever having said why — always becomes a question, never an auto-resolution, no matter how high the apparent confidence.
How it works
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Rebuild Dossier: common questions
- Is Rebuild Dossier MCP server safe?
- Mostly: it is graded B (77/100). Read the Rebuild Dossier safety report
- How do I install Rebuild Dossier?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Rebuild Dossier need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Rebuild Dossier maintained?
- The last commit was 34 days ago (2026-10-02). The latest release is v0.2.6.
- How does Rebuild Dossier compare with other MCP servers?
- safety score 77/100 (higher than 50% of 48,243 servers); tools 6 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.