Mcp Repo Mapper — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Repo Mapper (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<!-- mcp-name: io.github.LovRanRan/mcp-repo-mapper -->
mcp-repo-mapper is a FastMCP server for deterministic repository structure mapping. It scans a local codebase and exposes file structure, language counts, Python import dependencies, circular dependency detection, framework detection, entry point candidates, and a cached repo structure resource.
The server does not call an LLM and does not execute user code. It is intended as a grounded structure tool for codebase onboarding agents such as wayfinder.
mcp-repo-mapper is the structure layer in a three-server MCP tool stack for Project 6 wayfinder, a codebase onboarding agent.
mcp-repo-mapper maps repository structure, languages, entry points, framework evidence, and Python dependency edges.mcp-ast-explorer provides symbol-grounded Python definition, signature, reference, call-chain, and class-hierarchy lookups.mcp-test-runner runs local pytest/Jest checks and coverage summaries so agent claims can be verified against execution.In wayfinder, this server feeds the architecture-mapping step before semantic explanation or test verification begins.
scan_repo(path) returns a typed repo scan with files, language breakdown, entry points, Python dependency graph, and detected frameworks.find_circular_deps(path) returns circular dependencies from the static dependency graph.language_breakdown(path) returns language counts by file count and bytes.detect_framework(path) detects FastAPI, Flask, Django, Express, and Spring using registry-based markers.find_entry_points(path) returns ranked entry point candidates such as Python mains, FastAPI apps, package start scripts, Dockerfiles, and Node indexes.repo-structure://{url_hash} returns a cached JSON scan result after a tool call has populated the cache.uv sync --extra devRun the server locally:
uv run mcp-repo-mapperuv run ruff check .
uv run mypy
uv run pytestResource reads use a cache populated by tool calls:
scan_repo(path) or another scan-backed tool.repo-structure://{url_hash}.The public resource uses repo-structure://... because URL schemes cannot contain underscores.
ast parsing.MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.