
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
XafLogicExplainer.Mcp
Advanced tools
Model Context Protocol server for DevExpress XAF applications. Exposes an application's entities, controllers, actions, business rules and Model Editor customizations as MCP tools, so an agent can query a specific XAF codebase instead of guessing about it. Reads source with Roslyn; no DevExpress licence required.
Lets an AI agent ask questions about a specific DevExpress XAF application: its entities, controllers, actions, business rules, navigation and Model Editor customizations, read straight from source with Roslyn.
An agent that has read every page of the DevExpress documentation still does not know that your
Invoice total is calculated from its lines, that ApproveController refuses to run when the
period is closed, or that three columns were hidden in the Model Editor and appear in no C# file
at all. It will confidently invent all three.
No DevExpress licence is required. Extraction is Roslyn syntax analysis: the project being analyzed is never compiled, and this package never links against a DevExpress assembly.
{
"mcpServers": {
"xaf": { "command": "dnx", "args": ["XafLogicExplainer.Mcp", "--yes"] }
}
}
Started from a solution directory it finds the XAF module by itself. To be explicit, pass
--project <module directory> or set XAFLOGIC_PROJECT.
| Tool | Answers |
|---|---|
xaf_overview | What this application is, and the complete list of everything in it |
xaf_search | Where a field, concept or business term is defined |
xaf_entity | Every property, relationship, rule and calculation on one entity |
xaf_controller | What an action does — including the C# that runs when it fires |
xaf_rules | What the application validates, computes, hides and disables |
xaf_model | Model Editor customizations, which exist in no C# file |
xaf_editors | Custom property editors, which live in the platform project beside the module |
xaf_migrations | Version-guarded upgrade code that ran once and cannot be re-read from today's source |
xaf_view | Everything loaded onto one screen — most views exist in no file, and neither does this answer |
xaf_walkthrough | How one process works end to end — what runs, in what order, and what it could not follow |
xaf_refresh | Re-read the source (changes are detected automatically) |
Extractions are cached per project and invalidated when the source changes, so a conversation's worth of questions costs one parse — but an edit is still noticed.
Ask for something that is not there and the reply is the useful one:
There is no entity called 'PurchaseOrder' in this application. This is the complete list of 19 entities, extracted from the whole source tree: … If the user expects 'PurchaseOrder' to exist, it has not been created yet.
A bare "not found" invites an agent to assume it looked in the wrong place and invent the type anyway. Extraction reads the whole tree, which is what makes the stronger claim true.
They solve different halves of the same problem:
| Teaches the agent… | Tool |
|---|---|
| How XAF works in general | DevExpress agent-skills |
| What the documentation says | DevExpress Docs MCP server |
| What YOUR application does | this |
An agent with only the first two writes correct XAF against entities you do not have.
XafLogicExplainer.Cli — the xaflogic
command. Writes AGENTS.md, CLAUDE.md and Copilot instructions for agents without MCP, and
hosts this same server as xaflogic mcp.XafLogicExplainer.Core — the
extraction engine on its own.Listed in the official MCP registry under the name below. The registry reads that line out of this README to verify that whoever publishes the registry entry also owns the NuGet package, so don't remove or reword it — publishing would start failing.
mcp-name: io.github.peopleworks/xaf-logic-explainer
FAQs
Model Context Protocol server for DevExpress XAF applications. Exposes an application's entities, controllers, actions, business rules and Model Editor customizations as MCP tools, so an agent can query a specific XAF codebase instead of guessing about it. Reads source with Roslyn; no DevExpress licence required.
We found that XafLogicExplainer.Mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.