codeparseCAUTION
Give agents fast, accurate, and compact context on your Python codebases
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
CodeParse
CodeParse is a codebase indexer that gives agents fast, accurate, and compact context on your Python codebases while reducing token usage. It parses your codebase and stores the relationships of your code in a local SQLite database.
Install MCP Server and Skill
- Put the
codeparsebinary on your PATH (release asset ormake compile→dist/codeparse). codeparse install
Benchmark Evaluation (in-progress)
Ten questions found in eval/tasks.json are evaluated against the SQLMesh repo using a baseline agent and an agent with the CodeParse MCP server. The average amount of tokens is calculated at the end for comparison.
Benchmark Legend
- AI Baseline: Builtin tools
- CodeParse: Builtin tools and CodeParse MCP Server w/ SKILL.md
- Tokens: Avg tokens used by the agent to complete a task.
Benchmark Results
Cursor Benchmark Evaluation - Grok 4.7 ----------------- Mean ----------------- AI Baseline Tokene: 393,530 CodeParse Tokens: 265,867 (-32% reduction) ---------------------------------------- Claude Benchmark Evaluation - Opus 5.5 Medium ----------------- Mean ----------------- AI Baseline Tokene: XXXX CodeParse Tokens: XXXX ----------------------------------------
Running the Evaluation
Cursor Default Model: grok 4.7 Claude Defualt Model: opus 5.5 medium
make eval-smoke cursorwill run all 10 questions and evaluate.make eval cursorwill run all 1
c7bace0d6587OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add demo --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env CURSOR_API_KEY=${CURSOR_API_KEY} -- uvx demo{
"mcpServers": {
"demo": {
"command": "uvx",
"args": [
"demo"
],
"env": {
"ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
"CURSOR_API_KEY": "${CURSOR_API_KEY}"
}
}
}
}Exposed tools (8)
8 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
find_importers | read | |
find_subclasses | read | |
get_directory_tree | read | |
get_file_overview | read | |
get_project_overview | read | |
get_symbol | read | |
get_symbol_references | read | |
search_symbols | read |
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (3 observation(s))
- Network
- declared (3 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (3)
Path("/usr/local/bin/claude"),Path("/usr/local/bin/gemini"),.pre-commit-config.yaml
Gates applied: no_behavioural_pass.
c7bace0d6587full audit observations/trust-audit/mcp-server/cmgoffena13__codeparse.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | c7bace0d6587 | CAUTION | B | 89 | first audit |
Questions
What is the codeparse MCP server?
Give agents fast, accurate, and compact context on your Python codebases
What tools does codeparse expose?
8 in total: 8 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is codeparse safe to connect to an agent?
With care. The audit graded it B (89/100) and found 3 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does codeparse need?
It reads ANTHROPIC_API_KEY and CURSOR_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does codeparse run?
It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as demo.
How current is this page?
The grade is for one exact copy of the source (c7bace0d6587), read on 2026-10-11. The repository is watched and re-audited when it changes.