scopewalker-mcpSAFE
Codebase analysis MCP server for AI agents: complexity metrics, size thresholds, prop drilling, and code smell detection built on tree-sitter and tokei.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://buymeacoffee.com/thaanpaa?utmsource=scopewalker-mcp&utmmedium=readme&utm_campaign=funding)
AI agents will happily create 1000+ line source files and add a 20th parameter to a function call, even if there's a rule file telling them not to. Scopewalker exists to enforce stricter codebase standards.
It's a local MCP server (open source, runs over stdio, makes no network calls) that exposes 9 read-only tools:
get_line_counts- per-file line counts (total, code, blank, comment) with sorting, extension filters, and project-wide totalsget_functions- function and method detection; per-file counts, or per-function line metrics viadetail=lineswith amin_linesfilter for hunting oversized functionsget_complexity_metrics- max/average nesting depth and parameter counts (JSX props included), import counts, a per-file cognitive-complexity score, and per-function cyclomatic complexity with high/extreme severity bands, plus hotspots flagged for deeply nested or over-parameterized functionscheck_thresholds- flags files and functions exceeding size thresholds (defaults: 300 lines per file, 100 per function)get_code_inventory- classes with their methods, functions, interfaces/types, enums, and constants, each marked exported or not; private symbols hidden by defaultget_documentation_coverage- coverage percentage plus every function, class, or method missing a doc comment (JSDoc, Python docstrings, Rust///, and other per-language formats)get_code_smells- TODO/FIXME/HACK/XXX/BUG/UNUSED/DEPRECATED markers found by scanning actual comments via the AST (no false positives from string literals), plusas unknown as/as any asdouble casts in TypeScriptget_prop_drilling- parameter names threaded through many functions and files, with forwarding evidence and a high/medium/low risk
6068986cce6aOBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add scopewalker-mcp -- npx -y [email protected]
Exposed tools (9)
9 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
check_thresholds | read | |
find_dead_code | read | |
get_code_inventory | read | |
get_code_smells | read | |
get_complexity_metrics | read | |
get_documentation_coverage | read | |
get_functions | read | |
get_line_counts | read | |
get_prop_drilling | read |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (5)
codeInventoryGoMethods.ts
.markdownlint.json
.mcpbignore
extensions: ["ts,../../outside/*"],
@modelcontextprotocol/sdk, fast-glob, ignore, tree-sitter, tree-sitter-c, tree-sitter-cpp, tree-sitter-go, tree-sitter-java
Gates applied: no_behavioural_pass.
6068986cce6afull audit observations/trust-audit/mcp-server/timohaa__scopewalker-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 6068986cce6a | SAFE | B | 89 | first audit |
Questions
What is the scopewalker-mcp MCP server?
Codebase analysis MCP server for AI agents: complexity metrics, size thresholds, prop drilling, and code smell detection built on tree-sitter and tokei.
What tools does scopewalker-mcp expose?
9 in total: 9 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is scopewalker-mcp safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does scopewalker-mcp need?
No credential environment variables were found in its source, so it appears to need none.
How does scopewalker-mcp run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as scopewalker-mcp at 1.4.0.
How current is this page?
The grade is for one exact copy of the source (6068986cce6a), read on 2026-10-11. The repository is watched and re-audited when it changes.