Hokmah Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Hokmah Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
AI Agent with Architectural Memory — MCP Server
Gives any AI coding agent persistent understanding of codebases via TransitionGraph, IdeaGraph, and WorldModel. Analyze impact, generate tests, write code — all from the graph.
<!-- mcp-name: io.github.davidangularme/hokmah -->
Add to your editor's MCP config (Cursor, Claude Code, VS Code, Windsurf, Cline, JetBrains):
{
"mcpServers": {
"hokmah": {
"type": "streamable-http",
"url": "https://hokmah.dev/mcp"
}
}
}Then ask your agent: "analyze the impact of refactoring the auth module in github.com/owner/repo"
| Tool | Tier | Description |
|---|---|---|
hokmah_analyze | FREE | Impact analysis, risk score, affected files, architectural invariants |
hokmah_connect_project | FREE | Connect a GitHub repo, build the architectural graph |
hokmah_connect_mcp | FREE | Connect an external MCP server for orchestration |
hokmah_generate_tests | PRO | Test generation from the graph (40x fewer tokens) |
hokmah_generate_code | PRO | Code generation with architectural memory |
Hokmah builds a persistent architectural graph from your codebase:
When you ask "what's the impact of changing X?", Hokmah traverses the graph instead of sending your entire codebase to an LLM. That's why analyze is free (zero LLM tokens) and generate uses 40x fewer tokens.
hokmah_analyze + hokmah_connect_project + hokmah_connect_mcp (unlimited)hokmah_generate_tests + hokmah_generate_code (BYOK — bring your own LLM key)Get a Pro key at hokmah.dev.
~/Library/Application Support/Claude/claude_desktop_config.jsonclaude mcp add hokmah --transport streamable-http --url https://hokmah.dev/mcp.vscode/mcp.json in project root~/.windsurf/mcp.jsonThe hosted server at https://hokmah.dev/mcp is the recommended way to use Hokmah. To run the server yourself against your own Hokmah backend:
pip install -r requirements.txt
cp pro_keys.example.json pro_keys.json # edit with your real PRO keys
HOKMAH_API_BASE=http://localhost:8000 python mcp_server.pyEnvironment variables:
HOKMAH_API_BASE — upstream Hokmah API (default http://localhost:8000)HOKMAH_MCP_PORT — port to listen on (default 8001)HOKMAH_PRO_KEYS — path to the PRO keys JSON file (default /home/vpm/mcp-server/pro_keys.json)A reference systemd unit is provided in hokmah-mcp.service.
Catalyst AI Research · Haifa, Israel
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.