
Research
/Security News
Popular Rust Crates Compromised in Build-Time Supply Chain Attack
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.
@constellationdev/mcp
Advanced tools
Give your AI coding assistant instant, intelligent access to your entire codebase's structure, dependencies, and relationships without transmitting any source code. Constellation provides code intelligence as a service to AI coding assistant tools.
Add the Constellation MCP server to your AI assistant project-level config (or system-level if your tooling doesn't support project-level configuration):
{
"mcpServers": {
"constellation": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@constellationdev/mcp@latest"]
}
}
}
[!NOTE]
The above example is a generic format for the.mcp.jsonfile used by some tools such as VSCode and Claude Code.For information on configuring other AI assistants see the MCP Server > Installation doc.
For further instructions regarding authentication, project setup, and configuration refer to the official docs.
%%{init: {'theme': 'dark', 'themeVariables': { 'primaryColor': '#4A90E2', 'primaryTextColor': '#EEEEEE', 'primaryBorderColor': '#2B2C34', 'lineColor': '#4A90E2', 'secondaryColor': '#1F1F28', 'tertiaryColor': '#0B0C10', 'edgeLabelBackground': '#1F1F28' }}}%%
flowchart LR
subgraph local["💻 Your Environment"]
direction TB
code["📂 Source Code"]
cli["⚙️ Constellation CLI"]
ai["🤖 AI Coding Assistant"]
mcp["🧩 Constellation MCP"]
code --> cli
end
subgraph cloud["✨ Constellation Service"]
direction TB
api["🔌 API"]
graphdb[("🧠 Knowledge Graph")]
api <--> graphdb
end
cli a1@-->|"Metadata Upload"| api
ai <-->|"Tool Calls"| mcp
mcp a2@<-->|"Queries"| api
a1@{ animation: fast }
a2@{ animation: fast }
style local fill:#1F1F28
style cloud fill:#1F1F28,stroke:#4A90E2
style cli stroke:#4A90E2
style mcp stroke:#4A90E2
style api stroke:#4A90E2
style graphdb stroke:#4A90E2
Find the full and comprehensive documentation at docs.constellationdev.io/mcp/
For comprehensive information regarding privacy and security, see the official Privacy & Security documentation.
AGPL-3.0 - See LICENSE for details.
Copyright © 2026 ShiftinBits Inc.
FAQs
Codebase Understanding for AI Coding Agents
The npm package @constellationdev/mcp receives a total of 131 weekly downloads. As such, @constellationdev/mcp popularity was classified as not popular.
We found that @constellationdev/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.