Atlas / MCP servers / abrinsmead / Mindpilot

MindpilotCAUTION

Name: Mindpilot
Author: abrinsmead

mcp/abrinsmead/mindpilot

MCP server by abrinsmead · Audited 2026-10-07

⚑ Report / re-scan Source ↗

See through your agent's eyes. Visualize legacy code, architect new systems, understand everything.

Verdict

CAUTION

Grade

Trust score

85 /100

Exposed tools

2 2r · 0w · 0d

Transport

stdio

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/abrinsmead/mindpilot-mcp) [](https://www.npmjs.com/package/@mindpilot/mcp) [](https://github.com/abrinsmead/mindpilot-mcp/blob/main/LICENSE)

See through your agent's eyes. Visualize legacy code, inspect complex flows, understand everything.

[!TIP] Mindpilot is now available as a lightweight agent skill—no local MCP server needed. Ask your agent to diagram something and it builds a self-contained, interactive Mermaid viewer you can open in your browser or publish as a Claude artifact. Install with: npx skills add abrinsmead/skills/mermaid-viewer

Why Mindpilot?

Visualize Anything: Use your coding agent to generate on-demand architecture, code, and process diagrams to view your code from different perspectives.
Vibe Checks: AI-generated code can accumulate unused and redundant constructs. Use visualizations to spot areas that need cleanup.
Local Processing: Diagrams are never sent to the cloud. Everything stays between you, your agent, and your agent's LLM provider(s).
Export & Share: Export any diagram as a vector image.

Prerequisites

Node.js v20.0.0 or higher.

Quickstart

Claude Code

claude mcp add mindpilot -- npx @mindpilot/mcp@latest

Cursor

Under Settings > Cursor Settings > MCP > Click Add new global MCP server and configure mindpilot in the mcpServers object.

{
"mcpServers": {
"mindpilot": {
"command": "npx",
"args": ["@mindpilot/mcp@latest"]
}
}
}

VS Code

Follow the instructions here for enabling MCPs in VS Code: https://code.visua

Read from source at commit cdb17b1c8876OBSERVED · 2026-10-07

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add client -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "client": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Exposed tools (2)

2 read · 0 write · 0 destructive.

Tool	Risk	Description
`open_ui`	read	Open the Mindpilot UI application
`render_mermaid`	read	Render a Mermaid diagram to SVG format. CRITICAL RULES: 1) Node IDs must be alphanumeric without spaces (use A1, nodeA, start_node). 2) For node labels with special characters, wrap in quotes: A[

Trust audit

CAUTIONgrade B · trust 85/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	FAIL
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (5 observation(s))
Network: declared (5 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: found

Findings (10)

HIGHHard-coded secrets · inv.env_committed · CWE-798, CWE-321

src/client/.env

.env

Why it matters. a real .env in the package

Fix. ship .env.example with placeholders only

LOWInventory / provenance · inv.hidden_file · CWE-1104

dxt/.dxtignore

.dxtignore

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

src/client/.env

.env

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose