Local · MCP-native · Zero infra

Codebase intelligence
for humans and AI agents

Scan a project once. View a 3D dependency graph. Compare git refs. Ship findings to GitHub. All from a single page, all running on your machine.

🔍

Scan a project

Point at a local folder or paste a GitHub URL. Get a self-contained 3D HTML report.
📐

Diff vs git ref

PR-review mode. See what changed structurally between two refs — files, issues, edges, deltas.
📖

How it works

Architecture, MCP tools, comparison with Madge / Sourcegraph / CodeQL / Semgrep.

What's in the box

One scan. Multiple outputs.

🎯

3D dependency graph

Self-contained HTML. Three.js + force-graph inlined. Opens offline.

🛡️

Security scanner

Hardcoded secrets, eval, XSS, CORS, SQL injection, missing auth.

🔍

CVE check

--cve hits OSV.dev for every package.json dep.

🌳

AST mode

@ast-grep/napi (Rust + tree-sitter). Accurate JS/TS/Python parsing in-process.

🧩

tsconfig paths

Resolves @/components/Foo. Detects monorepos (pnpm, npm/yarn, Lerna, Turbo).

📊

SARIF v2.1.0

For GitHub Code Scanning, GitLab, SonarQube, VS Code SARIF Viewer.

🚦

CI gate

--fail-on <sev> + baseline. Block PRs on new issues.

📐

Diff mode

--since main via git-worktree. Two-ref structural diff.

🤖

MCP server

12 tools for Claude Code / Cursor / any agent. Cache on disk.

💾

Deterministic JSON

Byte-identical re-runs. Honors SOURCE_DATE_EPOCH.

🪶

Inline suppressions

// diagram3-disable-next-line for intentional patterns.

📦

Docker image

307 MB Alpine. Mount /work, get MCP over stdio.