Atlas / MCP servers / codenamev / AI Software Architect

AI Software ArchitectSAFE

mcp/codenamev/ai-software-architect

AI-powered architecture documentation framework with ADRs, reviews, and pragmatic mode. Now available as Claude Code Plugin for easiest installation.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
6 3r · 3w · 0d
Transport
stdio
License
—
Stars
78
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

A markdown-based framework for implementing rigorous software architecture practices in any project, with specialized AI assistant integration.

Introducing AI Software Architect 🚀 - Watch Video

Overview

This framework provides a structured approach to:

  1. Architecture Documentation - Templates and processes for documenting architectural decisions
  2. Architecture Reviews - A multi-perspective review process with specialized reviewers
  3. Architecture Recalibration - Process for translating reviews into concrete implementation plans
  4. Progress Tracking - Tools for monitoring the implementation of architectural changes
  5. AI Integration - Seamless collaboration with AI coding assistants

For detailed usage instructions, see USAGE.md. For troubleshooting and advanced usage, see TROUBLESHOOTING.md.

Installation

Choose the installation method for your AI assistant:

Claude Code Installation

Claude Code supports three installation methods:

Option 1: Claude Code Plugin (Recommended) 🆕

Install via the Claude Code plugin system with automatic updates:

# In Claude Code, run these commands:
/plugin marketplace add codenamev/ai-software-architect
/plugin install ai-software-architect@ai-software-architect

That's it! The framework is now available in all your projects — including the seven skills, MCP server, and generated subagents as a single unit.

See USAGE-WITH-CLAUDE-PLUGIN.md for detailed installation guide, troubleshooting, and comparison with other methods.

Benefits: Simplest installation, automati

Read from source at commit 2be21bd5acc8OBSERVED · 2026-10-07
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add architecture-tools -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "architecture-tools": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (6)

3 read · 3 write · 0 destructive.

ToolRiskDescription
configure_pragmatic_modewriteEnable and configure Pragmatic Mode (YAGNI Enforcement) to prevent over-engineering
create_adrwriteCreate an Architectural Decision Record (ADR)
get_architecture_statusreadGet the current status of architecture documentation and decisions
get_implementation_guidancereadGet implementation methodology, influences, and practices configuration for
list_architecture_membersreadList all available architecture team members and their specialties
setup_architecturewriteSet up the AI Software Architect framework in the current project
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (13)

LOWInventory / provenance · inv.no_license · CWE-1104
Why it matters. no LICENSE file and no repo licence
Fix. add a licence
LOWInventory / provenance · inv.symlink · CWE-1104
.coding-assistants/claude-code/claude-code.md
.coding-assistants/claude-code/claude-code.md
Why it matters. link not followed
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
.github/workflows/codex-tests.yml:56
cp -r ../../.architecture ./.architecture
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
.github/workflows/codex-tests.yml:57
cp -r ../../.coding-assistants ./.coding-assistants
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
tools/test/setup-fidelity.test.js:8
import { ArchitectureServer } from '../../mcp/index.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
tools/test/subagent-generator.test.js:30
const result = generateSubagent({ ...SAMPLE_MEMBER, id: '../../.claude/hooks/evil' });
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
mcp/package.json
@modelcontextprotocol/sdk, yaml, fs-extra, @types/node
Why it matters. 4 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
tools/package.json
yaml
Why it matters. 1 dependency range(s) float
Fix. pin exact versions or ship a lockfile
INFOPrompt injection · prompt.authority_framing · CWE-94, CWE-1427
.architecture/comparisons/claude-skills-deep-dive-comparison.md:41
- **Security**: No tool restrictions (implicit full access)
INFOPrompt injection · prompt.authority_framing · CWE-94, CWE-1427
.architecture/comparisons/claude-skills-deep-dive-comparison.md:77
- Issue: No `allowed-tools` in frontmatter means implicit full access
INFOPrompt injection · prompt.authority_framing · CWE-94, CWE-1427
.architecture/decisions/adrs/ADR-007-tool-permission-restrictions-for-skills.md:9
Our Claude Skills currently have implicit unlimited access to all available tools (Read, Write, Edit, Bash, Glob, Grep, etc.). When a skill is activated, it can use any tool without restriction. This
INFOPrompt injection · prompt.authority_framing · CWE-94, CWE-1427
.architecture/decisions/adrs/ADR-007-tool-permission-restrictions-for-skills.md:17
- Implicit full access to Read, Write, Edit, Bash, Glob, Grep, etc.
INFOPrompt injection · prompt.authority_framing · CWE-94, CWE-1427
.architecture/decisions/adrs/ADR-007-tool-permission-restrictions-for-skills.md:69
# setup-architect - Full access (installation requires broad permissions)

Gates applied: no_behavioural_pass, no_license.

Audited 2026-10-07 · audit v0.4.1 · source sha 2be21bd5acc8full audit observations/trust-audit/mcp-server/codenamev__ai-software-architect.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-072be21bd5acc8SAFEB89first audit
06

Questions

What is the AI Software Architect MCP server?

AI-powered architecture documentation framework with ADRs, reviews, and pragmatic mode. Now available as Claude Code Plugin for easiest installation.

What tools does AI Software Architect expose?

6 in total: 3 read-only, 3 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is AI Software Architect safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does AI Software Architect need?

No credential environment variables were found in its source, so it appears to need none.

How does AI Software Architect run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as architecture-tools at 1.0.0.

How current is this page?

The grade is for one exact copy of the source (2be21bd5acc8), read on 2026-10-07. The repository is watched and re-audited when it changes.

Advertisement