
Security News
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
gen-understand
Advanced tools
gen-system's Understand engine as an MCP server: parser facts about a codebase for AI agents
gen-system's Understand engine as an MCP server. It gives an AI agent parser facts about a codebase: the architecture, symbols, call graphs, control flow graphs, effects, source and the beliefs gen-system holds about each routine. No model writes these answers; deterministic parsers for Go, COBOL with copybooks, CA Gen, Java, TypeScript and Python do.
The server is read only. It runs locally and sends nothing anywhere.
Claude Code
claude mcp add gen-understand -- npx -y gen-understand --root /path/to/your-repo
Codex (~/.codex/config.toml)
[mcp_servers.gen-understand]
command = "npx"
args = ["-y", "gen-understand", "--root", "/path/to/your-repo"]
Cursor (.cursor/mcp.json)
{
"mcpServers": {
"gen-understand": {
"command": "npx",
"args": ["-y", "gen-understand", "--root", "."]
}
}
}
architecture, search_symbols, call_graph, control_flow, source, file_symbols, effects
and beliefs. With --allow-corrections, also correct_belief. The full list, the flags and the
protocol details are in
docs/mcp.md.
The server is a Go binary. On first run this package downloads the binary for your platform from
the gen-system release of the same version,
checks its SHA-256 against the release's checksums.txt, and caches it. Later runs start at once
and work offline. Builds exist for Linux, macOS and Windows, on x64 and arm64.
| Variable | Use |
|---|---|
UNDERSTAND_MCP_BINARY | Path of a local understand-mcp binary. Skips the download, for offline machines |
UNDERSTAND_MCP_CACHE | Folder for the downloaded binary. Default: the user cache folder |
Without npm, install the binary with Go: go install github.com/hpdkhoa/gen-system/generator/cmd/understand-mcp@latest.
Apache-2.0.
FAQs
gen-system's Understand engine as an MCP server: parser facts about a codebase for AI agents
The npm package gen-understand receives a total of 0 weekly downloads. As such, gen-understand popularity was classified as not popular.
We found that gen-understand demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.