Squatch Codebook Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Squatch Codebook Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Reason over your own local notes with a hyperdimensional (FHRR) codebook — query, related, neighbors, walk, analogy. No LLM in the loop, nothing leaves your machine. An MCP server, so it works in Claude Desktop (Chat) and Claude Code.
uvx fetches + runs)uvx --from git+https://github.com/squatch-c-c/squatch-codebook-mcp squatch-codebook-mcpRequires uv (curl -LsSf https://astral.sh/uv/install.sh | sh).
~/Library/Application Support/Claude/claude_desktop_config.json (macOS):
{
"mcpServers": {
"codebook": { "command": "uvx", "args": ["--from", "git+https://github.com/squatch-c-c/squatch-codebook-mcp", "squatch-codebook-mcp"] }
}
}Restart Claude. Now in Chat or Code you can ask things like "use codebook to find notes in ~/notes related to hyperdimensional computing" and it answers geometrically over your local files.
| Tool | What it does |
|---|---|
codebook_build(notes_dir, glob="*.md") | Index a folder; list its notes (run first). |
codebook_query(notes_dir, text, …) | Notes most related to a phrase. |
codebook_related(notes_dir, note_id, …) | Related notes (geometric + link recall). |
codebook_neighbors(notes_dir, note_id, …) | Nearest notes by cosine similarity. |
codebook_walk(notes_dir, start_id, steps=4) | Reasoning walk along the LINKS relation. |
codebook_analogy(notes_dir, a, b, c, …) | a:b :: c:? over your notes. |
All paths are local; every tool reads only the directory you point it at. Part of the Squatch working system.
FSL-1.1-ALv2 (Functional Source License) — source-available; converts to Apache-2.0 two years after each release. Use freely except a Competing Use. © 2026 Tom Rankin.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.