Merovingian — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Merovingian (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Cross-repository dependency intelligence for AI agents via MCP.
Merovingian maps cross-repo dependencies — API contracts, shared schemas, consumer relationships — and detects breaking changes before they propagate. It answers: "What else will break if I change this?"
Part of the EvoIntel MCP Suite (Sentinel, Niobe, Merovingian, Seraph, Anno).
$ref resolution (recursive, with cycle detection), allOf/anyOf/oneOf supportpip install merovingian# Register repositories
merovingian register user-service /path/to/user-service --type openapi
merovingian register billing-service /path/to/billing-service
# Scan for contracts
merovingian scan user-service
# Register consumer relationships
merovingian add-consumer billing-service user-service GET /users/{id}
# Check for breaking changes
merovingian breaking user-service
# Full impact assessment with consumer mapping
merovingian impact user-service
# View dependency graph
merovingian graph
# Contract version history
merovingian contracts user-service| Command | Description |
|---|---|
register <name> <path> | Register a repository for scanning |
unregister <name> | Remove a registered repository |
repos | List all registered repositories |
scan <repo> | Scan and update endpoints |
consumers | List consumer relationships |
add-consumer <consumer> <producer> <method> <path> | Register a consumer |
breaking <repo> | Check for breaking changes |
impact <repo> | Full impact assessment with consumer mapping |
contracts <repo> | View contract version history |
graph | View dependency graph |
feedback <target_id> <outcome> | Submit feedback |
audit | View audit log |
Add to your Claude Code configuration (~/.claude.json):
{
"mcpServers": {
"merovingian": {
"command": "merovingian-mcp",
"args": []
}
}
}| Tool | Description |
|---|---|
merovingian_register | Register a repository for contract scanning |
merovingian_consumers | List consumers of endpoints |
merovingian_breaking | Check for breaking changes |
merovingian_impact | Full impact assessment with consumer mapping |
merovingian_contracts | List contract versions |
merovingian_graph | Query the dependency graph |
merovingian_feedback | Submit feedback on assessments |
merovingian_audit | Query the audit log |
Merovingian classifies changes with direction-aware logic:
Breaking (blocks consumers):
Warning:
integer → number)Info (non-breaking):
Merovingian uses layered configuration: TOML file → environment variables → defaults.
Create .merovingian/config.toml in your project root:
[store]
db_name = "merovingian.db"
[scanner]
openapi_patterns = ["openapi.yaml", "openapi.json", "swagger.yaml", "swagger.json"]
pydantic_scan_dirs = ["src", "app", "lib"]
[mcp]
default_query_limit = 50Merovingian solves AI Blindness #3: Cross-Service Dependencies — API contracts, consumer relationships, and breaking changes that span repository boundaries.
Part of the EvoIntel MCP Suite by Evolving Intelligence AI: five tools for five blindnesses no model improvement will ever fix.
| Tool | Blindness | Install |
|---|---|---|
| Sentinel | Project History | pip install git-sentinel |
| Niobe | Runtime Behavior | pip install niobe |
| Merovingian | Cross-Service Dependencies | pip install merovingian |
| Seraph | Code Quality | pip install seraph-ai |
| Anno | Web Content | npm install -g @evointel/anno |
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.