
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@oneqode/mcp-codebase-index
Advanced tools
MCP server for intelligent codebase indexing and search with AI-friendly natural language queries
A Model Context Protocol (MCP) server that provides intelligent codebase indexing and search capabilities for AI agents. This tool enables AI assistants to understand codebases deeply through natural language queries, dependency analysis, and comprehensive code entity tracking.
npm install -g @oneqode/mcp-codebase-index
npm install @oneqode/mcp-codebase-index
# Index your codebase
codebase-index reindex --clean
# Search for components
codebase-index search "user authentication"
# Get statistics
codebase-index stats --detailed
# Generate markdown tree
codebase-index tree
# Check for duplicates before creating new components
codebase-index check UserProfile component
Add to your .mcp.json:
{
"mcpServers": {
"codebase-index": {
"command": "npx",
"args": ["@oneqode/mcp-codebase-index"]
}
}
}
The MCP server provides these tools for AI agents:
search_entitiesSearch for code entities using natural language queries.
await search_entities({
query: "find all React hooks",
limit: 20,
types: ["composable", "function"]
})
get_entity_detailsGet comprehensive information about a specific entity.
await get_entity_details({
entityId: "abc123",
includeRelationships: true,
includeContent: false
})
find_relationshipsExplore dependency graphs and relationships.
await find_relationships({
entityId: "abc123",
depth: 2,
types: ["imports", "uses"]
})
suggest_similarFind entities similar to a given name or description.
await suggest_similar({
name: "UserAuth",
type: "component",
limit: 5
})
check_duplicatesCheck if similar entities exist before creating new ones.
await check_duplicates({
name: "UserProfile",
type: "component",
threshold: 0.8
})
index_fileIndex or reindex a specific file.
await index_file({
filePath: "/src/components/NewComponent.vue",
force: true
})
reindex_allReindex the entire codebase.
await reindex_all({
clean: true // Clear existing index first
})
get_statisticsGet comprehensive statistics about the indexed codebase.
await get_statistics({
detailed: true
})
generate_tree_indexGenerate a markdown file with full directory tree and statistics.
await generate_tree_index({})
// Creates .index/CODEBASE_INDEX.md
The index uses SQLite with the following structure:
.vue).ts, .tsx).js, .jsx)component - Vue/React componentscomposable - Vue composables / React hooksservice - Service classes/modulesstore - State management storestype - TypeScript types/interfacesfunction - Standalone functionsclass - Class definitionspage - Page componentslayout - Layout componentsmiddleware - Middleware functionsutil - Utility functions# Find all authentication-related components
codebase-index search "authentication components"
# Find all API service files
codebase-index search "api services"
# Find all Vue composables
codebase-index search "composables"
# Find all test files
codebase-index search "test files"
The index database is stored at .index/db/codebase.db in your project root. This directory is automatically created on first use.
By default, these directories are ignored:
node_modules/**.nuxt/**dist/**.output/**.index/**check_duplicates to avoid redundancysearch_entities with natural languagefind_relationships to understand connectionsget_entity_details for deep understandingreindex_all to keep the index currentContributions are welcome! Please submit issues and pull requests on GitHub.
MIT © OneQode
Built with:
FAQs
MCP server for intelligent codebase indexing and search with AI-friendly natural language queries
We found that @oneqode/mcp-codebase-index demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.