astriaBLOCK
Turn any folder into a queryable knowledge graph
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Knowledge graph builder for codebases
[](https://github.com/Nodesify/astria/actions/workflows/ci.yml) [](https://www.npmjs.com/package/@nodesify/astria) [](https://www.npmjs.com/package/@nodesify/astria) [](https://nodesify.github.io/astria/) [](LICENSE) [](https://nodejs.org/) [](https://deepwiki.com/Nodesify/astria)
Docs | Getting started | CLI Reference | Architecture | Worked examples | Changelog | Release notes | Security
Built by Nodesify
Find an implementation, inspect its relationships, and assess a change before editing. Astria builds a local SQLite knowledge graph with deterministic Rust/tree-sitter extraction. CLI and MCP queries use the same retrieval engine; source locations and evidence classes make results inspectable. Structural analysis needs no API key. Local embeddings and remote semantic enrichment are optional.
Install
npm install -g @nodesify/astria
Node.js >= 22 is required. Prebuilt native binaries ship with the package; installation needs no Rust toolchain. macOS/Linux can also use brew install nodesify/tap/astria (tap).
Intel Mac (darwin-x64), musl Linux and windows-arm64 builds omit local embeddings because ONNX R
bb0e650abb83OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add astria -- npx -y @nodesify/[email protected]
Trust audit
BLOCKgrade F · trust 47/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (6 observation(s))
- Network
- declared (16 observation(s))
- Shell
- declared (7 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (25)
const imported=exec(python,['-c','import graphify; print(graphify.__file__)']);
const results={schema_version:4,date:new Date().toISOString(),provenance:{astria_commit:git(repo,'rev-parse','HEAD'),source_status:git(repo,'status','--porcelain'),graphify_commit:config.graphify_commconst prepared=exec(python,[path.join(repo,'scripts/bench/paired/prepare.py'),spec.source,spec.commit,root,spec.name]);
const r=tool==='astria'?exec(process.execPath,[path.join(runtime,'build.cjs'),cwd],cwd):exec(python,[path.join(repo,'scripts/bench/orig_run.py'),cwd,path.join(root,spec.name+'-graphify-build.json')],c
if(tool==='astria'){const audit=exec(python,[path.join(repo,'scripts/bench/paired/audit-symbols.py'),cwd]); if(audit.status!==0)throw Error(audit.stderr); retention=JSON.parse(audit.stdout);}".netrc",
".git-credentials",
"id_rsa",
"id_ed25519",
"id_ecdsa",
"localhost" | "127.0.0.1" | "0.0.0.0" | "[::1]" | "::1" | "metadata.google.internal"
"http://169.254.169.254/metadata",
"169.254.169.254",
"::ffff:169.254.169.254",
results.json.gz
"http://127.0.0.1/x",
"http://192.168.1.1/router",
"http://169.254.169.254/metadata",
assert!(validate_resolved_hosts("https://127.0.0.1/x").is_err());(format!("http://127.0.0.1:{port}/v1/x"), served).astriaignore
.zcodeignore
return hashlib.md5(combined.encode()).hexdigest()
npx --yes [email protected] eval -c promptfooconfig.yaml --grader "$JUDGE_MODEL" --output ../../out/promptfoo-results.json
node ../../scripts/include-native-runtime.mjs
Gates applied: no_behavioural_pass.
bb0e650abb83full audit observations/trust-audit/mcp-server/nodesify__astria.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | bb0e650abb83 | BLOCK | F | 47 | first audit |
Questions
What is the astria MCP server?
Turn any folder into a queryable knowledge graph
Is astria safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (47/100) and found 14 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does astria need?
It reads ANTHROPIC_API_KEY, OPENROUTER_API_KEY and TYPESAFE_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does astria run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as astria-docs at 1.0.0.
How current is this page?
The grade is for one exact copy of the source (bb0e650abb83), read on 2026-10-11. The repository is watched and re-audited when it changes.