archprintSAFE
Infers architecture rules from your TypeScript repo's real import graph, gates each on statistical evidence, and emits them into the tools you already use (ESLint, dependency-cruiser, ts-arch). Turns the boundaries your code already follows into enforcement, so architecture drift gets caught, not ju
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://www.npmjs.com/package/archprint) [](https://github.com/Tommkruix/archprint/actions/workflows/ci.yml) [](https://www.npmjs.com/package/archprint) [](./LICENSE) [](https://tommkruix.github.io/archprint/) [](https://glama.ai/mcp/servers/Tommkruix/archprint) [](https://mcpservers.org/servers/tommkruix/archprint)
Mine the architecture rules your repo already enforces, with the evidence attached.
[Try it in your browser](https://stackblitz.com/github/Tommkruix/archprint-demo), nothing to install · Quick start · Use in CI · Use with AI agents · Docs
What it does, in plain words
Every codebase has unwritten rules. "Pages never talk to the database directly." "Shared code never reaches back into the app." Nobody wrote them down, but the code follows them, until one day someone (or an AI assistant) breaks one without noticing.
Archprint reads a TypeScript project, finds the rules its code already follows, and shows you the proof for each one: how many files follow it, which files break it, and how sure it is. The rules you trust become automatic checks in the tools your team already runs, so a break is caught the next time lint runs (in your editor, a pre-commit hook or CI), not weeks later in review.
Think of it as a building inspector who surveys the house first and writes down how it was actually built, instead of handing you a rulebook from somewhere else.
- **For developers and
fa23706d3802OBSERVED · 2026-10-10Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add archprint -- npx -y [email protected] mcp
Exposed tools (8)
4 read · 4 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
a | read | d |
b | read | d |
no-db-client-in-request-entry | write | A request handler must not import the database client directly. |
no-db-in-request-entry | read | test rule |
no-direct-db-in-request-entry | write | Request handlers must not import a database client directly; go through a service or data-access layer. |
no-ui-layer-in-server-entry | write | A request handler must not import UI components. |
no-x | read | no x |
no-x-in-route | write | A request handler must not import x. |
Trust audit
SAFEgrade B · trust 88/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (3 observation(s))
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (25)
.lintstagedrc.json
.prettierignore
.prettierrc.json
.gcloudignore
.dependency-cruiser.json
C2.tsx
c2.ts
c2.ts
c2.ts
c2.ts
` Evidence: ${deepRel.relativeImporterCount - deepRel.offenderCount}/${deepRel.relativeImporterCount} files with relative imports avoid ../../../`,message: 'Deep relative import: use a workspace alias instead of ../../../',
} from '../../src/cli/adopted-rules.js';
import { injectAdoptionSection, stripAdoptionSection } from '../../src/cli/adoption-readme.js';import { AllowError, runAllow } from '../../src/cli/allow.js';resolve({ url: `http://127.0.0.1:${port}/mcp`, base: `http://127.0.0.1:${port}` });@modelcontextprotocol/sdk, commander, @changesets/cli, @commitlint/cli, @commitlint/config-conventional, @eslint/js, @types/node, @vitest/coverage-v8
react
react
@scope/pkg-b
docs/public/demo/claude-code.gif
docs/public/demo/cursor.gif
| Env access | Read `process.env` only in the config/env layer | Review |
Read these numbers with care: about 50k of the tokens read in both columns are Claude Code's own system prompt,
archprint does not check. About 50k of the tokens read in both columns are Claude Code's own system prompt. This
Gates applied: no_behavioural_pass.
fa23706d3802full audit observations/trust-audit/mcp-server/tommkruix__archprint.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | fa23706d3802 | SAFE | B | 88 | first audit |
Questions
What is the archprint MCP server?
Infers architecture rules from your TypeScript repo's real import graph, gates each on statistical evidence, and emits them into the tools you already use (ESLint, dependency-cruiser, ts-arch). Turns the boundaries your code already follows into enforcement, so architecture drift gets caught, not ju
What tools does archprint expose?
8 in total: 4 read-only, 4 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is archprint safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (88/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does archprint need?
It reads NEXT_PUBLIC_SUPABASE_ANON_KEY, SECRET, SUPABASE_ANON_KEY, SUPABASE_SERVICE_ROLE_KEY and TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does archprint run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @y/p at 0.12.4.
How current is this page?
The grade is for one exact copy of the source (fa23706d3802), read on 2026-10-10. The repository is watched and re-audited when it changes.