
Security News
arXiv Is Rate Limiting Authors Following a Flood of AI Slop Submissions
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.
Local-first codebase context engine for AI coding tools
Parse any codebase into a ranked dependency graph. Serve it to AI tools via MCP.
Zero config. Zero cloud. Nothing leaves your machine.
AI coding tools are only as good as the context they receive. Most tools either have no codebase understanding, or use proprietary indexing locked to a single editor.
Graft gives any MCP-compatible AI tool deep structural understanding of your codebase:
$ npx graftmap map
src/indexer/pipeline.ts [score: 0.0842]
function buildIndex (L19)
src/graph/pagerank.ts [score: 0.0731]
function computePageRank (L52)
function buildTeleportVector (L11)
src/parser/index.ts [score: 0.0654]
function parseFiles (L28)
src/mcp/server.ts [score: 0.0612]
function createGraftServer (L238)
function startMcpServer (L327)
[~487 tokens]
# Run instantly with npx (no install needed)
npx graftmap map
# Or install globally
npm install -g graftmap
graft map
Add Graft to your AI tool's MCP configuration. Once connected, your AI assistant automatically gets ranked codebase context.
Add to your MCP settings:
{
"mcpServers": {
"graft": {
"command": "npx",
"args": ["-y", "graftmap"],
"cwd": "/path/to/your/project"
}
}
}
Add to .cursor/mcp.json in your project:
{
"mcpServers": {
"graft": {
"command": "npx",
"args": ["-y", "graftmap"],
"cwd": "/path/to/your/project"
}
}
}
Graft speaks standard MCP over stdio. Point any MCP-compatible client at npx graftmap and it works.
Once connected, your AI tool gets these capabilities:
| Tool | Description |
|---|---|
graft_map | Ranked tree map of the codebase by structural importance |
graft_context | Dependencies and definitions for a specific file |
graft_search | Find definitions by name or kind (function, class, type, etc.) |
graft_impact | Files affected by changing a given file |
graft_summary | Project overview with key files and tech stack |
Plus two MCP resources: graft://map and graft://file/{path}
graft map # Ranked codebase tree
graft map --focus src/api.ts # Personalized view focused on a file
graft map --budget 4096 # Custom token budget
graft stats # File count, definitions, edges, cache age
graft impact src/auth.ts # What breaks if you change this file?
graft search "handleRequest" # Find definitions by name
graft search "User" --kind class # Filter by kind
graft serve # Start MCP server (default command)
Your Codebase Graft Pipeline AI Tool
───────────── ────────────── ───────
.ts .js .py ──► tree-sitter AST
extraction
│
dependency graph ──► graft_map
construction graft_context
│ graft_search
personalized ──► graft_impact
PageRank scoring graft_summary
│
token-budgeted ──► Ranked context
rendering in ~2K tokens
.gitignore.graft/cache.json for instant re-indexing| Language | Definitions | References | Status |
|---|---|---|---|
| TypeScript | Functions, classes, interfaces, types, enums, methods | Imports, usages | Stable |
| JavaScript | Functions, classes, methods | Imports, usages | Stable |
| TSX/JSX | Same as TS/JS | Same as TS/JS | Stable |
| Python | Functions, classes, methods, decorators, dataclasses | Imports, usages | Stable |
| Go | — | — | Planned |
| Rust | — | — | Planned |
Graft is designed for large codebases:
Graft is zero-config by default. It automatically:
.ts, .tsx, .js, .jsx, and .py files.gitignore patternsnode_modules, dist, .git, and common build directoriesNo config files needed. Ever.
Contributions are welcome! See CONTRIBUTING.md for development setup and guidelines.
Especially interested in:
MIT — use it anywhere, for anything.
Built by Amaar Chughtai
Give your AI tools the context they deserve.
FAQs
Local-first codebase context engine for AI coding tools
We found that graftmap demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.