vedakshaBLOCK
Vedaksha — clean-room Vedic astrology & astronomical ephemeris engine (kundali, panchanga, dashas, nakshatras, vargas) with sub-arcsecond precision. Rust, Python, WebAssembly, and an MCP server for AI agents.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Clean-room Rust ephemeris and Vedic astrology engine, built for the agentic-AI era. Sub-arcsecond planetary precision, every algorithm traced to a primary source, any chart queryable as a property graph.
[](https://crates.io/crates/vedaksha) [](https://docs.rs/vedaksha) [](https://pypi.org/project/vedaksha/) [](https://www.npmjs.com/package/vedaksha-wasm) [](https://github.com/arthiqlabs/vedaksha/actions/workflows/ci.yml) [](Cargo.toml) [](LICENSE)
Website · Docs · Playground · API reference · Blog
clean-room · 0.103′′ mean longitude vs JPL Horizons · 1,147 tests (per push) + 24,350 oracle rows · MCP-native · BUSL-1.1 → Apache 2.0
Install · Quick start · Accuracy · What's inside · MCP + property graph · Provenance · License
Install
386f0cad6c3eOBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add vedaksha-mcp:v9.4.1 -- docker run -i --rm ghcr.io/arthiqlabs/vedaksha-mcp:v9.4.1:None --stdio
Exposed tools (7)
7 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
compute_ashtakavarga | read | Compute Bhinna Ashtakavarga (raw bindu tables) and Sarvashtakavarga \ for all 7 planets from sign positions. Source: BPHS Ch.66 vv.13-68. \ Trikona/Ekadhipatya Shodhana and Pinda Sadhana are not included. |
compute_dasha | read | Compute Vedic dasha (planetary period) sequences. Supports five \ classical systems: Vimshottari, Ashtottari, Yogini (Moon-longitude based, \ require |
compute_gochara | read | Compute Gochara (transit interpretation) for the seven grahas against a \ natal reference sign per BPHS Ch.29. Returns favourable/unfavourable verdict, \ house from natal, and raw vedha (obstruction) candidates per planet. The natal \ reference sign is the caller |
compute_natal_chart | read | Compute a natal astrological chart for a given time and location. \ Returns a ChartGraph in JSON format containing planetary positions, house cusps, \ aspects, nakshatras, and dignities. |
compute_transit | read | Compute transiting planet positions relative to a natal chart at a specific \ moment. Returns planet longitudes for the transit time alongside natal positions, \ enabling aspect calculation between transit and natal placements. |
emit_graph | read | Turn a chart into a queryable property graph. Accepts the output of \ compute_natal_chart directly (pass latitude and longitude alongside it), or an \ existing ChartGraph. Emits Neo4j Cypher, SurrealDB SurrealQL, JSON-LD, plain \ JSON, or RAG embedding text. |
search_transits | read | Search for transiting planet–natal planet aspects within a time window. \ Supply natal positions and a Julian Day range; receive a list of exact transit \ moments with aspect type, orb, and applying/separating status. |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (9 observation(s))
- Network
- declared (6 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (24)
"--insecure-no-auth",
"error: set VEDAKSHA_MCP_TOKEN, or pass --insecure-no-auth to run "
"or pass --insecure-no-auth to disable (only behind a trusted boundary)"
parser.add_argument("--insecure-no-auth", action="store_true")print("error: set VEDAKSHA_MCP_TOKEN or pass --insecure-no-auth")x0.bin
x1.bin
x2.bin
x3.bin
x4.bin
let dele = arcsec_to_rad(0.01789 + de_); // δE
let delnp = arcsec_to_rad(-0.06424 + deart_1) / w1[1]; // δn′ / ν
let delep = arcsec_to_rad(-0.12879 + dep); // δe′
.bw-namespaces
"../../../docs/audit/2026-08-17-ayanamsha-cleanroom/derivation-inputs.json"
"../../../docs/audit/2026-08-17-ayanamsha-cleanroom/catalogue/hip2-4stars.tsv"
"../../../docs/audit/2026-08-17-ayanamsha-cleanroom/derivation-inputs.json"
"../../../docs/audit/2026-08-17-ayanamsha-cleanroom/catalogue/hip2-4stars.tsv"
"../../../docs/audit/2026-08-17-ayanamsha-cleanroom/catalogue/hip_main-4stars.tsv"
req = urllib.request.Request(f"http://127.0.0.1:{port}/", data=body, method="POST")f"http://127.0.0.1:{port}/", data=body, method="POST","{label} Δlon = {:+7.3}\" Δlat = {:+7.3}\"",println!(" Δdist = {ddist_km:+6.1} km");tests/oracle_jpl/reference_positions.json
Gates applied: no_behavioural_pass.
386f0cad6c3efull audit observations/trust-audit/mcp-server/arthiqlabs__vedaksha.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 386f0cad6c3e | BLOCK | D | 69 | first audit |
Questions
What is the vedaksha MCP server?
Vedaksha — clean-room Vedic astrology & astronomical ephemeris engine (kundali, panchanga, dashas, nakshatras, vargas) with sub-arcsecond precision. Rust, Python, WebAssembly, and an MCP server for AI agents.
What tools does vedaksha expose?
7 in total: 7 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is vedaksha safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 5 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does vedaksha need?
It reads VEDAKSHA_MCP_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does vedaksha run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on PyPI as vedaksha.
How current is this page?
The grade is for one exact copy of the source (386f0cad6c3e), read on 2026-10-11. The repository is watched and re-audited when it changes.