CogniRepo runs on your own machine — the client starts it, so there is no endpoint to ping. 106 installs a week from pypi. Last commit 10 Oct 2026.
FAISS, call graph, AST, BM25 — 34 MCP tools for AI agents. 50-80% token reduction. Offline.
We read the source, 1 d ago · rules 995398eba69f
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
proc = subprocess.run( # nosec B603
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
project_storage = os.path.join(global_base, f"{project_name}_{project_hash}")
result = subprocess.run(
seq, ops = pickle.loads(data) # nosec B301 — same trust boundary as graph.pkl (crc32 detects damage, not tampering; Fernet under storage.encrypt authenticates)
__import__(_pkg_name)
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add cognirepo -- uvx cognirepo
{
"mcpServers": {
"cognirepo": {
"command": "uvx",
"args": [
"cognirepo"
]
}
}
}
[mcp_servers.cognirepo]
command = "uvx"
args = ["cognirepo"]
{
"mcpServers": {
"cognirepo": {
"command": "uvx",
"args": [
"cognirepo"
]
}
}
}
{
"servers": {
"cognirepo": {
"type": "stdio",
"command": "uvx",
"args": [
"cognirepo"
]
}
}
}
The TS/JS-accurate repo map for coding agents: ts-morph import/symbol/call graph + MCP query tools
Content-addressed code graph with 22 MCP tools for AI agents.
Code knowledge graph over MCP: token-budgeted context for AI coding agents.
Hosted code graph over MCP: exact callers, dependencies, and cross-repo blast radius for AI agents.
Codebase intelligence MCP — index any repo into a property graph; 26 tools for agents.
Offline codebase knowledge graph: 91% token reduction vs naive RAG, plus cross-session agent memory.
Hosted code graph over MCP: exact callers, dependencies, and cross-repo blast radius for AI agents.
Codebase intelligence MCP server — index any repo into a property graph; 26 tools for agents.
Answers built from our own checks of this server.