MCP.Market

Weavatrix Refactor MCP server

by Weavatrix·io.github.Weavatrix/weavatrix-refactor·v1.0.11·1 stars

Transactional refactoring extension with 11 evidence-backed tools, previews, and rollback.

A86/100grade A
What users say
No reviews yet
Be the first
Safety scan
A86/100

full report

Adoption
Growing

1 stars129 downloads/wk

Reviews

Write one

Nobody has reviewed Weavatrix Refactor yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Weavatrix Refactor tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-11-01 · same rubric, same numbers if you re-run it

no findings
  • Code scan6 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 53 days ago12/15
  • Maintainer identityregistry namespace matches repository owner7/10
Overall 86/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Weavatrix Refactor compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
86/100
higher than 72% of 48,255 servers
GitHub stars
1
more than 65% of 28,688 servers
Downloads a week
129
more than 68% of 12,191 servers with a package

Install Weavatrix Refactor in Claude Code, Cursor or VS Code

Runs npx -y weavatrix-refactor on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add weavatrix-refactor -- npx -y weavatrix-refactor
Add to Cursor

What the publisher says

From the Weavatrix Refactor repository's README, as published. We do not edit it. Read it on GitHub

Weavatrix Refactor

The explicit source-write layer of the Weavatrix ecosystem; Core remains read-only.

Refactor across files without letting the agent guess.

Weavatrix Refactor is a native MCP server for coding agents. It finds a symbol through the repository graph, previews byte-exact edits, reports every same-named occurrence it could not prove, and writes only after an explicit, hash-bound confirmation.

The useful difference is not “AI can rename a word.” It is that the agent gets evidence before the write and a recoverable transaction after it.

Install

Run the native binary through npm:

npx -y weavatrix-refactor mcp /absolute/path/to/repository

Or install it with Cargo:

cargo install weavatrix-refactor --locked
weavatrix-refactor mcp /absolute/path/to/repository

An MCP client can start it directly. Prefer an absolute path, or Cursor's ${workspaceFolder} so the write server never follows the host process cwd:

{
  "mcpServers": {
    "weavatrix-refactor": {
      "command": "npx",
      "args": ["-y", "weavatrix-refactor@1.0.11", "mcp", "${workspaceFolder}", "--profile=refactor"],
      "env": {"WEAVATRIX_ALLOW_SOURCE_EDITS": "1"}
    }
  }
}

Leave WEAVATRIXALLOWSOURCEEDITS unset for preview-only sessions. Preview is a read; only a confirmed apply or rollback requires the gate. Refactor does not expose Core's openrepo, so it cannot silently retarget mid-session; the launch root is the only repository it will edit.

Install as a plugin

The repository also ships one plugin bundle for Cursor, Codex, Claude Code, and Grok Build. The plugin starts the extension-only profile, so it contributes the 11 Refactor methods without repeating Weavatrix Core's 43 read-only method definitions. Install the separate Weavatrix plugin when both surfaces are needed.

The bundled skill is optional and activates only for explicitly requested refactoring work. Its entry point stays short; each method has an individual reference card that is loaded only when needed.

.agents/plugins, then add weavatrix-refactor@weavatrix-refactor.

  • Cursor: search for Weavatrix Refactor after marketplace approval.
  • Codex: add the Weavatrix/weavatrix-refactor marketplace from

install weavatrix-refactor@weavatrix-refactor.

  • Claude Code: add the same repository marketplace from .claude-plugin, then

Weavatrix/weavatrix-refactor, open /marketplace, and install it.

  • Grok Build: run grok plugin marketplace add

The plugin opens WEAVATRIXALLOWSOURCE_EDITS=1, but every write still needs the exact preview's short-lived, plan-bound single-use token.

For a rename task, expose only the two tools the agent needs:

weavatrix-refactor mcp /absolute/path/to/repository --profile=rename

The rename profile keeps renamesymbol and rollbacklast_apply; every unrelated graph and refactor tool is absent and cannot be called. Omit the option (or use --profile=refactor) for all 11 Refactor methods. The narrower catalog reduces repeated agent context; it does not weaken preview hashes, the write gate, the confirmation token, or rollback checks.

When Weavatrix Core is already installed as a separate MCP, expose only the 11 methods that Refactor adds:

weavatrix-refactor mcp /absolute/path/to/repository --profile=refactor

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Weavatrix Refactor: common questions

Is Weavatrix Refactor MCP server safe?
Yes, by our scan: it is graded A (86/100). Read the Weavatrix Refactor safety report
How do I install Weavatrix Refactor?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Weavatrix Refactor need an API key?
No secret keys are declared. It reads 1 setting from the environment.
Is Weavatrix Refactor maintained?
The last commit was 56 days ago (2026-09-09). The latest release is v1.0.11.
How does Weavatrix Refactor compare with other MCP servers?
safety score 86/100 (higher than 72% of 48,255 servers); github stars 1 (more than 65% of 28,688 servers); downloads a week 129 (more than 68% of 12,191 servers with a package). Full comparison.

More from Weavatrix →