Atlas / MCP servers / with-geun / Alive Analysis

Alive AnalysisSAFE

mcp/with-geun/alive-analysis

Data analysis workflow kit for AI coding agents. Structure your analysis with the ALIVE loop — Ask, Look, Investigate, Voice, Evolve.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
4 4r · 0w · 0d
Transport
stdio
License
MIT
Stars
41
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Structured analysis workflow for AI coding agents — every analysis traceable, repeatable, and team-shareable.

[](CHANGELOG.md) [](https://www.npmjs.com/package/alive-analysis-mcp) [](LICENSE) [](https://claude.ai/code) [](https://cursor.sh)

Why this exists

You ask Claude to investigate a metric drop. It gives you an answer. You act on it.

Three months later: "Why did we change that?" — gone. No reasoning, no data checks, no audit trail.

Or you open a new chat and explain the whole context again from scratch, repeating work that already happened.

alive-analysis solves this by turning every analysis into a structured, version-controlled workflow. Claude guides you through a five-stage loop. Each stage produces a markdown file. Everything stays in your repo, searchable by you and by Claude.

The result: a growing knowledge base of how your team thinks, not just what it decided.

How it works

You describe a question  →  /analysis-new
↓
Claude walks you through 5 stages:
ASK → LOOK → INVESTIGATE → VOICE → EVOLVE
↓
Each stage = one markdown file in analyses/
↓
Files are Git-tracked, full-text searchable,
readable by Claude in future conversations
↓
Six months later: /analysis-search "checkout drop"
→ Claude surfaces context, findings, and follow-ups

Installation

# Clone the repo
git clone https://github.com/with-geun/alive-analysis.git /tmp/alive-analysis

# Install — pick your platform
bash /tmp/alive-analys
Read from source at commit 3de61944607dOBSERVED · 2026-10-08
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code (npm)
claude mcp add alive-analysis-mcp -- npx -y [email protected]
03

Exposed tools (4)

4 read · 0 write · 0 destructive.

ToolRiskDescription
alive_dashboard_exportreadExport all analyses as JSON for the ALIVE Dashboard. Paste the output into the dashboard Load dialog.
alive_getreadGet the full content of an analysis by ID. Returns all stage files (ASK → LOOK → ...) concatenated.
alive_listreadList analyses from alive-analysis project. Supports filtering by type, stage, status, analyst, and tags.
alive_searchreadFull-text search across all analysis files. Returns matching analyses with file:line context snippets.
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (5)

LOWInventory / provenance · inv.hidden_file · CWE-1104
.pdca-status.json
.pdca-status.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
mcp/package.json
@modelcontextprotocol/sdk, typescript, @types/node, ts-node
Why it matters. 4 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWPrompt injection · prompt.authority_framing · CWE-94, CWE-1427
core/agents/prompts/peer-reviewer.md:5
You are a senior data analyst with 10+ years of experience.
LOWPrompt injection · prompt.authority_framing · CWE-94, CWE-1427
core/agents/prompts/root-cause-analyst.md:5
You are a root cause analysis specialist. Multiple open hypotheses mean the investigation
INFOInventory / provenance · inv.oversize · CWE-1104
docs/assets/dashboard-preview.png
docs/assets/dashboard-preview.png
Why it matters. 1463178 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha 3de61944607dfull audit observations/trust-audit/mcp-server/with-geun__alive-analysis.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-083de61944607dSAFEB89first audit
06

Questions

What is the Alive Analysis MCP server?

Data analysis workflow kit for AI coding agents. Structure your analysis with the ALIVE loop — Ask, Look, Investigate, Voice, Evolve.

What tools does Alive Analysis expose?

4 in total: 4 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Alive Analysis safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does Alive Analysis need?

No credential environment variables were found in its source, so it appears to need none.

How does Alive Analysis run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as alive-analysis-mcp at 1.4.0.

How current is this page?

The grade is for one exact copy of the source (3de61944607d), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement