ModelsAtlas
Explore
Atlas / MCP servers / pirua-game / Gdep

GdepCAUTION

mcp/pirua-game/gdep
MCP server by pirua-game · ai · ai agent · ai agents · Audited 2026-10-07
⚑ Report / re-scanSource ↗

Game Codebase Analysis AI Agentic Tool

Verdict
CAUTION
Grade
B
Trust score
81 /100
Exposed tools
30 27r · 3w · 0d
Transport
—
License
Apache-2.0
Stars
67
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Understand a Unity/UE5/Axmol project in 0.5 seconds. Make Claude and Cursor read the actual code.

[](https://github.com/pirua-game/gdep/actions/workflows/ci.yml) [](https://pypi.org/project/gdep/) [](https://www.npmjs.com/package/gdep-mcp)

"If I modify this class, what breaks?" — answered in 3 seconds, grounded in source. Source-grounded: structural facts from C++ source and binary assets. Confidence tier (HIGH/MEDIUM/LOW) reported on every result.

Read this in other languages: 한국어 · 日本語 · 简体中文 · 繁體中文

✨ Why gdep?

Large game codebases are brutal:

  • UE5 with 300+ Blueprints → "Where is this Ability actually called?" — half a day gone
  • Unity with 50 Managers + Prefab refs → refactor triggers circular dep explosion
  • "What breaks if I change this class?" → open files manually for 30 minutes

gdep answers all of this in under 0.5 seconds.

Measured Performance

Full details → docs/BENCHMARK.md · docs/mcp-benchmark.md

🤖 MCP Integration — Make AI Read Real Code

gdep ships an MCP server for Claude Desktop, Cursor, and any MCP-compatible agent.

Install in 1 line

npm install -g gdep-mcp

Configure your agent (copy-paste)

{
"mcpServers": {
"gdep": {
"command": "gdep-mcp",
"env": { "PYTHONUTF8": "1" }
}
}
}

That's it. Your AI now has 30 game-engine-aware tools available

Read from source at commit 85ce73c46493OBSERVED · 2026-10-07
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add frontend -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "frontend": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (30)

27 read · 3 write · 0 destructive.

ToolRiskDescription
analyze_axmol_eventsread
analyze_impact_and_riskread
analyze_ue5_animationread
analyze_ue5_behavior_treeread
analyze_ue5_blueprint_mappingread
analyze_ue5_gasread
analyze_ue5_state_treeread
analyze_unity_animatorread
detect_patternsread
execute_gdep_cliwrite
explain_method_logicread
explore_class_semanticsread
find_call_pathread
find_class_hierarchyread
find_method_callersread
find_unity_event_bindingsread
find_unused_assetsread
get_architecture_adviceread
get_project_contextread
inspect_architectural_healthread
query_project_apiread
read_class_sourceread
suggest_lint_fixeswriteRun linter and return actionable code fix suggestions for detected anti-patterns.
suggest_test_scoperead
summarize_project_diffread
trace_gameplay_flowread
wiki_getread
wiki_listread
wiki_save_conversationwrite
wiki_searchread
04

Trust audit

CAUTIONgrade B · trust 81/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (5 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (18)

MEDIUMInventory / provenance · inv.binary · CWE-1104
gdep-cli/gdep/bin/Spectre.Console.dll
Spectre.Console.dll
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
gdep-cli/gdep/bin/System.Collections.Immutable.dll
System.Collections.Immutable.dll
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
gdep-cli/gdep/bin/System.Reflection.Metadata.dll
System.Reflection.Metadata.dll
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
gdep-cli/gdep/bin/gdep.dll
gdep.dll
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
publish/Spectre.Console.dll
Spectre.Console.dll
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
gdep-cli/gdep/cli.py:40
_sig = hashlib.md5(
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
gdep-cli/gdep/init_context.py:1054
h = hashlib.md5()
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
gdep-cli/gdep/runner.py:235
return hashlib.md5("\n".join(mtimes).encode()).hexdigest()
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
gdep-cli/gdep/uasset_cache.py:77
h = hashlib.md5()
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
gdep-cli/gdep/uasset_cache.py:105
h = hashlib.md5()
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
gdep-cli/requirements.txt
requests, click, fastapi, uvicorn, pydantic, tree-sitter, tree-sitter-c, tree-sitter-cpp
Why it matters. 10 requirement(s) not pinned with ==
Fix. pin exact versions
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
gdep-cli/web/backend/requirements.txt
fastapi, uvicorn, pydantic, requests
Why it matters. 4 requirement(s) not pinned with ==
Fix. pin exact versions
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
gdep-cli/web/frontend/package.json
@dagrejs/dagre, @types/dagre, @xyflow/react, axios, lucide-react, react, react-dom, @eslint/js
Why it matters. 22 dependency range(s) float
Fix. pin exact versions or ship a lockfile
INFOInventory / provenance · inv.oversize · CWE-1104
gdep-cli/gdep/bin/Microsoft.CodeAnalysis.CSharp.dll
gdep-cli/gdep/bin/Microsoft.CodeAnalysis.CSharp.dll
Why it matters. 6895376 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
gdep-cli/gdep/bin/Microsoft.CodeAnalysis.dll
gdep-cli/gdep/bin/Microsoft.CodeAnalysis.dll
Why it matters. 3067664 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
gdep_logo.png
gdep_logo.png
Why it matters. 5141789 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
publish/Microsoft.CodeAnalysis.CSharp.dll
publish/Microsoft.CodeAnalysis.CSharp.dll
Why it matters. 6895376 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
publish/Microsoft.CodeAnalysis.dll
publish/Microsoft.CodeAnalysis.dll
Why it matters. 3067664 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-10-07 · audit v0.4.1 · source sha 85ce73c46493full audit observations/trust-audit/mcp-server/pirua-game__gdep.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-0785ce73c46493CAUTIONB81first audit
06

Questions

What is the Gdep MCP server?

Game Codebase Analysis AI Agentic Tool

What tools does Gdep expose?

30 in total: 27 read-only, 3 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Gdep safe to connect to an agent?

With care. The audit graded it B (81/100) and found 18 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does Gdep need?

No credential environment variables were found in its source, so it appears to need none.

How current is this page?

The grade is for one exact copy of the source (85ce73c46493), read on 2026-10-07. The repository is watched and re-audited when it changes.

Advertisement