🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

cgraphy

Package Overview
Dependencies
Maintainers
1
Versions
3
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

cgraphy

Code knowledge graph over MCP: compact, token-budgeted context for AI coding agents

pipPyPI
Version
0.1.2
Weekly downloads
144
Maintainers
1

cgraphy – Code Knowledge Graph MCP Server

PyPI version Python versions License

cgraphy is a Python code knowledge graph and Model Context Protocol (MCP) server for AI coding agents such as Claude Code, Codex CLI, Cursor, and Gemini CLI.

cgraphy indexes any codebase into a knowledge graph — functions, classes and files as nodes; calls, imports, inheritance and git co-change history as edges — and serves compact, token-budgeted slices of it to AI assistants through the Model Context Protocol. Instead of re-reading dozens of files to orient itself on every prompt, an agent asks the graph and gets the relevant subgraph in a couple of thousand tokens.

  • Any language. Full-fidelity extraction (calls, imports, inheritance) for Python, TypeScript/JavaScript, Java, Go, C, C++ and Rust; generic definition-level extraction for 20+ more via tree-sitter; config and docs files participate through summaries.
  • Importance-ranked. PageRank over the code graph puts load-bearing symbols first in every answer.
  • Token-budgeted. cgraphy_context expands the graph greedily around a symbol and stops exactly at your token budget — cost scales with the question, not the repo.
  • Git-aware. --git-history mines commit history for files that change together (logical coupling), an edge type static analysis can't see.
  • No API key. Semantic summaries are written by the host agent itself through the enrich loop; summaries survive re-indexing via content hashing.
  • Zero infrastructure. One SQLite file in .cgraphy/. No services, no daemons, no vector database.
  • Proven end-to-end. In 400+ controlled agent runs on SWE-bench Lite, the deployed configuration resolved 14 vs 8 of 57 real GitHub issues (official Docker harness). Indexes kubernetes (26K files, 219K nodes) in 49s, keeps it fresh in 1.6s cycles, answers queries in 1–152ms. All benchmarks and predictions are in this repo (Research paper and benchmarks).

Install

pip install cgraphy        # or: uv tool install cgraphy

Quick start

cd your-repo
cgraphy init          # one command: MCP config + agent steering + index

cgraphy init does three things:

  • Writes a project-scoped .mcp.json — picked up automatically by Claude Code in all its forms: CLI, VSCode extension, and the desktop app.
  • Appends a steering block to CLAUDE.md and AGENTS.md telling agents to consult the graph (cgraphy_overviewcgraphy_searchcgraphy_context) before reading files — this is what makes the graph actually replace bulk file reading. (Agents can't be forced, only steered: instruction files + persuasive tool descriptions + the tools being genuinely faster is the mechanism, and it works.)
  • Builds the index with git co-change history.

Or register the MCP server manually with your assistant:

Claude Code

claude mcp add cgraphy -- uvx cgraphy serve /path/to/repo

Codex CLI (~/.codex/config.toml)

[mcp_servers.cgraphy]
command = "uvx"
args = ["cgraphy", "serve", "/path/to/repo"]

Gemini CLI (~/.gemini/settings.json) / Cursor (.cursor/mcp.json)

{"mcpServers": {"cgraphy": {"command": "uvx",
                            "args": ["cgraphy", "serve", "/path/to/repo"]}}}

The eight tools

Reading / orientation:

ToolReturnsThe agent uses it…
cgraphy_overviewRepo map: subsystems, key symbols by importance, all filesfirst, instead of reading files to orient
cgraphy_searchRanked matches with file:line and summaries (hybrid lexical+semantic when the [semantic] extra is installed)before grep / directory listing
cgraphy_contextSubgraph around a symbol (callers, callees, imports, co-changes) within a token budgetinstead of reading whole files
cgraphy_readJust one symbol's source, line-numbered, budgetedinstead of reading the whole file

Editing / reviewing — the tools that make the graph part of the change loop:

ToolReturnsThe agent uses it…
cgraphy_impactBlast radius: direct + transitive dependents, affected tests, historically co-changed filesbefore modifying shared code
cgraphy_diff_contextThe working git diff mapped to touched symbols, their users, and covering testsbefore committing / when resuming work

Enrichment:

ToolReturnsThe agent uses it…
cgraphy_enrichBatch of symbols that still need one-line summarieswhen asked to "enrich the graph"
cgraphy_store_summariesConfirmation + remaining countto save the summaries it wrote

Retrieval is usage-aware: symbols an agent repeatedly asks about get a small, capped boost in future context expansion (telemetry stays in the local SQLite file; nothing leaves your machine).

Semantic search (optional)

pip install "cgraphy[semantic]"

Adds tiny static embeddings (model2vec, CPU-only, no torch) fused with FTS5 by reciprocal-rank fusion — closes the vocabulary gap between issue-style prose ("login broken") and code identifiers (validate_jwt).

The graph self-heals: tools detect stale files and re-index incrementally (changed files only) before answering.

Enriching the graph

Structure is extracted automatically; meaning comes from summaries. Tell your agent once:

enrich the cgraphy graph

It will loop cgraphy_enrichcgraphy_store_summaries until every symbol has a one-line semantic summary. Summaries are keyed to a hash of each symbol's source, so editing one function invalidates only that summary.

For CI, cgraphy index --summarize pre-bakes summaries with your own Anthropic API key (pip install cgraphy[summarize], ANTHROPIC_API_KEY set).

Viewer

cgraphy view .        # http://localhost:8787

A dependency-free local page (bundled Cytoscape.js): search, color by kind, click for details, double-click to expand neighbors; co-change edges shown dashed.

Measuring the savings

python scripts/benchmark.py /path/to/repo "your question"

Prints the tokens an agent spends orienting via cgraphy (overview + search + context) versus reading every code file, and the reduction factor.

Localization benchmark (research harness)

python scripts/eval_localization.py /path/to/repo 50

Mines fix-like commits from the repo's history (subject = query, touched files = ground truth, co-change mining excludes evaluated commits), then scores an ablation ladder — FTS-only, +PageRank, +graph expansion, ±co-change edges — on hit@5/hit@10/MRR and token cost. No LLM calls, no human grading, fully reproducible. Results and a paper draft live in paper/.

How it works

  • cgraphy index walks the repo (respecting .gitignore + .cgraphyignore), parses each file with tree-sitter, and stores nodes and edges in .cgraphy/graph.db (SQLite + FTS5). Re-indexing is incremental by content hash.
  • A resolver links cross-file references (calls, imports, inheritance) by qualified name, best-effort; unresolved names are kept, never dropped.
  • PageRank runs over the edge graph; every query surfaces important symbols first. Search blends FTS5 relevance with rank.
  • cgraphy serve exposes the five MCP tools over stdio.
  • Optional: --git-history adds weighted co-change edges mined from git log.

Design details: docs/superpowers/specs/2026-07-08-cgraphy-design.md

License

MIT

mcp-name: io.github.pmgarg/cgraphy

FAQs

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts