oxcode — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited oxcode (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
oxcode indexes source code into a graph and serves it to coding agents. It is built on [oxgraph](https://github.com/oxgraph/oxgraph) — a storage-agnostic, zero-copy-friendly graph/hypergraph topology substrate for Rust — and stores the index in a native oxgraph database under .oxcode/index.oxgdb/.
The CLI keeps raw OxQL available, but agent navigation should usually start with context, symbols, files, and the call graph commands because they expand graph IDs back into function names, definition ranges, signatures, docstrings, source previews, and call-site source context.
Prebuilt binary (recommended — no Rust toolchain, grammars are statically linked so it runs offline):
# macOS / Linux
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/oxgraph/oxcode/releases/latest/download/oxcode-cli-installer.sh | sh# Windows (PowerShell)
powershell -ExecutionPolicy ByPass -c "irm https://github.com/oxgraph/oxcode/releases/latest/download/oxcode-cli-installer.ps1 | iex"Or download an archive from the Releases page. With Cargo instead:
cargo binstall oxcode-cli # prebuilt, no compile
cargo install oxcode-cli # build from sourceThis installs one oxcode binary — the CLI plus the MCP server (oxcode mcp). (The crate is oxcode-cli because the bare oxcode name is taken on crates.io; the command is still oxcode.)
cd your-project
oxcode index
oxcode context "How does authentication work?"Add the server to your agent. For Claude Code (~/.claude.json):
{
"mcpServers": {
"oxcode": { "type": "stdio", "command": "oxcode", "args": ["mcp"] }
}
}Once wired, have the agent call oxcode_watch once: it builds the index and keeps it current as files change. Across multiple agents on one repo a file lock elects a single writer (the one watcher/re-indexer) while the rest serve reads, so you can run as many as you like. Then ask questions with oxcode_explore.
Optionally auto-allow the tools in ~/.claude/settings.json (the query tools are read-only; oxcode_watch only builds/maintains the local index): mcp__oxcode__oxcode_watch, _explore, _search, _callers, _callees, _symbol, _files, _status.
#### Claude Code plugin (one-command install)
Instead of hand-editing the config above, install the bundled plugin from the oxgraph marketplace — it wires up the MCP server for you:
/plugin marketplace add oxgraph/oxgraph
/plugin install oxcode@oxgraphThe plugin still needs the oxcode binary on your PATH and an indexed project (steps 1–2). See claude-plugin/README.md.
#### Other MCP clients (registry / npm)
oxcode is listed in the official MCP Registry as io.github.snowmead/oxcode, so registry-aware clients can discover it. For clients that prefer an npx launch command there's also an npm package:
{
"mcpServers": {
"oxcode": { "command": "npx", "args": ["-y", "@snowmead/oxcode-mcp"] }
}
}@snowmead/oxcode-mcp is a thin wrapper that runs oxcode mcp, so it still needs the oxcode binary on your PATH (step 1) — if you have it, command: "oxcode" above is the simpler config.
per-language extractor walks it (hand-written) or runs a tree-sitter query (generic), emitting symbol nodes (file, module, class, struct, trait, interface, function, method, field, …) and edges (contains, calls, imports, references, implements). Qualified names are normalized to a ::-joined internal form regardless of the language's own separator, so the resolver and graph are language-neutral.
exact qualified name → enclosing module scope → in-scope imports → receiver type → bare name. Ambiguous matches are kept and marked, not dropped.
stable symbol identities, so re-indexing is O(change), not O(repo). Personalized PageRank over the graph powers the context command's bounded, relevance-ranked output.
Run oxcode languages to list the registered extractors. Coverage is tiered:
| Language | Extensions | Tier |
|---|---|---|
| Rust | .rs | High-fidelity |
| Go | .go | High-fidelity |
| TypeScript | .ts .tsx .mts .cts | High-fidelity |
| JavaScript | .js .jsx .mjs .cjs | High-fidelity |
| Python | .py .pyi | Generic |
| Java | .java | Generic |
| C | .c .h | Generic |
| C++ | .cpp .cc .cxx .hpp .hh .hxx | Generic |
| C# | .cs | Generic |
| PHP | .php | Generic |
| Ruby | .rb | Generic |
| Swift | .swift | Generic |
| Kotlin | .kt .kts | Generic |
| Scala | .scala .sc | Generic |
| Dart | .dart | Generic |
| Lua | .lua | Generic |
| Luau | .luau | Generic |
| Objective-C | .m .mm | Generic |
| Pascal/Delphi | .pas .dpr .dpk .lpr | Generic |
| Svelte | .svelte | Embedded script |
| Vue | .vue | Embedded script |
| Liquid | .liquid | Recognized |
calls (self/this/Go receivers), precise qualified names, and imports (including TypeScript path-based ESM imports).
Each is a tree-sitter query plus a profile entry (crates/oxcode-core/src/extract/profiles.rs); containment comes from byte-span nesting. It yields symbols and approximate call edges that resolve at the scoped/simple tiers (no receiver typing), so some edges are marked ambiguous.
<script> blocks are extracted as TypeScriptat offsets accurate to the original component file.
reported as skipped, not silently dropped.
Adding a language is a tree-sitter query + a profile entry; promoting one to high fidelity is a hand-written extractor that reuses the shared extract/walker.rs scaffolding.
oxcode index --path path/to/rust/project
oxcode status --path path/to/rust/project
oxcode context "How does entry reach helper?" --path path/to/rust/project --limit 8 --json
oxcode symbols "entry helper" --path path/to/rust/project --limit 20 --json
oxcode symbols "entry helper" --path path/to/rust/project --kind function --kind method
oxcode files "runtime scheduler" --path path/to/rust/project --limit 20 --json
oxcode symbol crate::entry --path path/to/rust/project --json
oxcode calls crate::entry --depth 2 --path path/to/rust/project
oxcode callers crate::helper --depth 2 --path path/to/rust/project
oxcode query "MATCH ELEMENTS WHERE qualified_name = 'crate::entry'" --path path/to/rust/project
oxcode query "MATCH RELATIONS TYPE calls" --format expand --path path/to/rust/project
oxcode query "GRAPH calls WALK FROM 12 DEPTH 2 DIRECTION both LIMIT 100" --path path/to/rust/projectThe generated .oxcode/ directory writes its own .gitignore, so the index is never committed by accident.
Useful selectors for navigation commands:
element:<id> for a concrete OxGraph element IDmy_crate::auth::tenant_middleware(qualified names are anchored at the crate, so the first segment is the package name with - normalized to _)
name:<name> for a simple function namefile:<path>:<line> for the innermost symbol covering a source linesymbols accepts repeatable --kind <kind> filters. Valid kinds are:
file, module, namespace, package, class, struct, enum,trait, interface, impl_block, function, method, field, variable, constant, type_alias, macro
context is deterministic and graph-derived. It ranks entry-point symbols for the task text, then expands nearby calls, contains, references, and implements relationships.
query and explain execute raw OxQL/Cypher. For keyword discovery, use symbols; do not pass plain English phrases to query.
Accepted OxQL profile:
CATALOGMATCH ELEMENTSMATCH ELEMENTS HAS LABEL <label>MATCH ELEMENTS WHERE <property> = '<value>'MATCH RELATIONS TYPE <type>GRAPH calls WALK FROM <element-id> DEPTH <n> [DIRECTION outgoing|incoming|both] [LIMIT n]Agent-task benchmark on the Tokio codebase: an agent answers "How does tokio schedule and run async tasks?" with and without each tool, measuring efficiency and blind-judged answer quality. oxcode and codegraph were measured on different agent harnesses, so the comparable unit is each tool's improvement vs its own no-tool baseline, not absolute numbers.
| arm | answer quality | tokens | cost | tool calls | wall time |
|---|---|---|---|---|---|
| baseline (no tool) | 0.98 | — | — | — | — |
| oxcode — codex/gpt-5.5, CLI, n=6 | 0.96 (tied) | +15% | +4% | −4% | +14% |
| oxcode — codex/gpt-5.5, MCP, n=6 | 0.93 | −74% | −57% | −84% | −60% |
| codegraph — Opus 4.8, MCP, published | not measured | −38% | even | −57% | −18% |
Percentages are change vs that tool's own no-tool baseline (negative = reduction, better; quality is the blind LLM-judge score, 0–1). All oxcode rows come from one n=6 release suite on Tokio. Absolute medians: tokens 395k (baseline) → 455k (CLI) → 104k (MCP); cost $0.17 → $0.18 → $0.07; tool calls 28 → 27 → 5; wall 97s → 111s → 39s.
The MCP server is the headline. Delivering the same bounded, PageRank-curated context through a one-call oxcode_explore MCP tool — instead of a CLI the agent composes — cuts tool calls 84%, tokens 74%, cost 57%, and wall 60% vs the no-tool baseline, exceeding codegraph's published reductions (−57% tool calls / −38% tokens). The CLI arm is statistically tied with the baseline: the agent treats a shell binary as a supplement to its own grep/read, not a replacement — so the gap was always tool delivery, not index quality. The one cost the quality gate exposes (and a quality-blind benchmark like codegraph's would hide): MCP answer quality dips to 0.93 vs 0.98, a completeness trade-off from the leaner exploration. codegraph numbers are from its README, re-validated 2026-06-02.
Full methodology, confidence intervals, and reproduction: docs/agent-eval-results.md and docs/agent-eval-methodology.md.
The workspace uses a hybrid Rust architecture:
oxcode-model: storage-neutral vocabulary shared across the workspace —code-graph kinds, identifier newtypes, the graph schema catalog, the selector grammar, the extraction/resolution IR, and agent-facing report DTOs
oxcode-core: indexing, extraction, reference resolution, OxGraph storage,navigation, formatting, and the public ProjectIndex facade
oxcode-cli: the oxcode binary — the CLI commands plus the oxcode mcpsubcommand, an MCP server (stdio) exposing the read-only queries to coding agents (the one-call oxcode_explore tool plus oxcode_search, oxcode_callers/oxcode_callees, oxcode_symbol, oxcode_files, oxcode_status) and oxcode_watch, which builds and keeps the index current as files change — a cross-process file lock elects one writer per repo while other instances serve reads
oxcode-core is split into focused internal modules: scan, extract (with per-language extractors and shared CST/cargo helpers), resolve, store::oxgraph (with its write path), format, paths, and error. The model crate's typed schema is the single source of truth that the storage layer derives property registration, read-key caching, and indexes from. Reads run through ProjectIndex, which opens the database once and resolves the property-key schema; ProjectIndex::with_session runs several reads against one shared snapshot so multi-step navigation stays internally consistent.
The extract module hosts the hand-written extractors (Rust, Go, TypeScript/JavaScript), the generic query-driven extractor with its per-language .scm queries and profiles, the Svelte/Vue embedded-script host, and the statically-linked grammar registry. See the Languages table above.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.