
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
predictive-debugger
Advanced tools
Predicts where code is likely to fail. Ships as a VS Code extension and as an MCP server that coding agents can call while reviewing code. Auth is borrowed from the Claude Code, Codex, or GitHub Copilot CLI you are already signed in to.
Website and docs: predictivedebugger.dev
MCP server for finding likely runtime failures in JavaScript and TypeScript. Six tools help your coding agent rank risky files, trace dependencies, inspect logs and get an independent model review with a line number and reason.
Uses the Claude Code, Codex or GitHub Copilot CLI you already have installed. Prediction calls use that CLI's model access and usage allowance. No separate API key is needed.
Requires Node.js 22 or later. For model predictions, install and sign in to at least one supported CLI. Python 3 is optional for log analysis.
Choose your agent below. npx downloads and runs the package automatically.
Run in your project on macOS, Linux or WSL:
claude mcp add --scope project predictive-debugger -- npx -y predictive-debugger@latest
On native Windows, from PowerShell:
claude mcp add --scope project predictive-debugger -- cmd /d /c npx -y predictive-debugger@latest
Use --scope user to make it available in every project.
For a user-level setup on macOS, Linux or WSL:
codex mcp add predictive-debugger -- npx -y predictive-debugger@latest
On native Windows, from PowerShell:
codex mcp add predictive-debugger -- cmd /d /c npx -y predictive-debugger@latest
For project-only setup or a longer startup timeout, see Codex configuration.
Add to .mcp.json in your project:
{
"mcpServers": {
"predictive-debugger": {
"command": "npx",
"args": ["-y", "predictive-debugger@latest"],
"tools": ["*"]
}
}
}
On native Windows, use "command": "cmd" and
"args": ["/d", "/c", "npx", "-y", "predictive-debugger@latest"].
For every project, see Copilot user-level setup.
Restart your agent and check /mcp for predictive-debugger and its six tools.
To check that the package downloads and print its version:
npx -y predictive-debugger@latest --version
Running without --version starts a stdio server that waits for your agent's
messages. See setup help for local builds and troubleshooting.
Use Predictive Debugger to find the riskiest files in src/.
Show the imports and tests connected to src/services/orders.ts.
Check src/services/orders.ts for likely runtime failures.
Find unusual entries in logs/app.log.
| Tool | What it does | Model call |
|---|---|---|
scan_project | Rank source files by risk density. Excludes tests by default. | No |
analyze_file | Return complexity metrics, risk scores and contributing signals. | No |
map_dependencies | Find imports, reverse imports and connected test files, with source-line evidence. | No |
analyze_logs | Return log anomalies, ranked by severity and unusual wording. | No |
predict_failures | Get an independent model verdict with a line number, reason and confidence. Supports batches. | Yes |
list_providers | Check which supported CLIs are installed and their sign-in status. | No |
Start with scan_project, then read the files it highlights. Use
map_dependencies to find related files and predict_failures when you want a
second opinion. Pass several paths as files to review them concurrently.
See the tool reference for parameters, result fields and limits.
The server's MCP instructions ask agents to check code they wrote in the current session from a fresh context. The routing depends on file count:
| Change | Requested check |
|---|---|
| One file, including a feature contained in one file | A fresh predict_failures call |
| Several files | A sub-agent scoped to the changed files and intended behavior, where the host supports it |
| Mechanical correction with one clear answer | Neither check required |
Per-file predictions cannot verify that several files agree or that a feature meets its requirements. The benefit of the sub-agent rule has not been measured.
predict_failures
sends source and bounded dependency context to your CLI's model provider.
Set calleeContext: false to omit dependency context.An unfinished extension can show findings in the Problems panel. It requires a local build and is not available on the Marketplace or as a prebuilt VSIX. See trying the extension.
MIT.
FAQs
Predicts where code is likely to fail. Ships as a VS Code extension and as an MCP server that coding agents can call while reviewing code. Auth is borrowed from the Claude Code, Codex, or GitHub Copilot CLI you are already signed in to.
We found that predictive-debugger demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.