
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
@paparats/cli
Advanced tools
CLI for Paparats MCP - semantic code search with AST chunking, symbol graph, and vector search for AI coding assistants
CLI for Paparats MCP - semantic code search across repositories with AST-based chunking, symbol graph, and vector search. Designed for AI coding assistants (Claude Code, Cursor).
npm install -g @paparats/cli
# 1. One-time setup: starts Docker containers, downloads embedding model (~1.6 GB)
paparats install
# 2. In your project directory
cd your-project
paparats init # creates .paparats.yml config
paparats index # index the codebase
# 3. Keep index in sync when files change
paparats watch
# 4. Connect your IDE (Cursor, Claude Code) to the MCP server
# Developer mode (default) - Docker stack + local project indexing
paparats install --mode developer
# With external Qdrant (skip Qdrant Docker container)
paparats install --qdrant-url http://your-qdrant:6333
# Server mode - full Docker stack with auto-indexer for multiple repos
paparats install --mode server --repos owner/repo1,owner/repo2
# Support mode - client-only setup, connects to existing server
paparats install --mode support --server http://your-server:9876
| Command | Description |
|---|---|
paparats install | Set up Docker containers and configure IDE |
paparats init | Create .paparats.yml config in current project |
paparats index | Index the codebase (or reindex after changes) |
paparats watch | Watch for file changes and auto-reindex |
paparats search <query> | Search indexed code from terminal |
paparats doctor | Check health of all services |
paparats status | Show indexing status for current project |
Once connected, your AI assistant gets access to these tools:
Coding mode (/mcp): search_code, get_chunk, find_usages, health_check, reindex
Support mode (/support/mcp): all coding tools plus get_chunk_meta, search_changes, explain_feature, recent_changes, impact_analysis
Project config lives in .paparats.yml:
project: my-project
group: my-group
language: [typescript]
indexing:
paths: [src, lib]
exclude: [node_modules, dist, '**/*.test.ts']
chunking:
max_lines: 60
overlap_lines: 5
metadata:
service: my-service
tags: [backend, api]
| Package | Description |
|---|---|
| @paparats/shared | Shared utilities (path validation, gitignore, excludes) |
| ibaz/paparats-server | MCP server Docker image |
| ibaz/paparats-indexer | Auto-indexer Docker image |
| ibaz/paparats-embed | llama.cpp llama-server + llama-swap with pre-baked embedding models |
See the full documentation for detailed setup guides, architecture overview, and configuration reference.
MIT
FAQs
CLI for Paparats MCP - semantic code search with AST chunking, symbol graph, and vector search for AI coding assistants
The npm package @paparats/cli receives a total of 1,254 weekly downloads. As such, @paparats/cli popularity was classified as popular.
We found that @paparats/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.