Pharaoh

Name: Pharaoh
Author: Pharaoh-so

by Pharaoh-soversion 1.0.283i★ –iComputer or cloud

Registry nameso.pharaoh/pharaoh

Install

Overview

Description from the maker (original English)

Codebase knowledge graph — architectural awareness for AI coding agents via MCP

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi3 of 3 passedChecked from public information; code not scanned yet
UsageiNot measured yet★ –

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Computer or cloud
Transport: stdio, Streamable HTTP
Category: Search & AI memory

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 3 of 3 passed
Runs on the maker’s server: what you ask it goes through their server.
The registry lists no key to fill in.

You need

Runs in the cloudNothing to install; it connects over the internet
npmNode.js installed (for the npx command)

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Works in Claude on the web, desktop and mobile:

Open Settings → Connectors
Press Add custom connector
Paste the address below and press Add
If it asks you to sign in, sign in with the maker

https://mcp.pharaoh.so/mcp

Or run it on your computer

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "pharaoh": {
      "command": "npx",
      "args": [
        "-y",
        "@pharaoh-so/mcp"
      ]
    }
  }
}

Run this in your terminal

claude mcp add --transport http pharaoh https://mcp.pharaoh.so/mcp

Or run it on your computer

claude mcp add pharaoh -- npx -y @pharaoh-so/mcp

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "pharaoh": {
      "url": "https://mcp.pharaoh.so/mcp"
    }
  }
}

Or run it on your computer

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "pharaoh": {
      "command": "npx",
      "args": [
        "-y",
        "@pharaoh-so/mcp"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "pharaoh": {
      "type": "http",
      "url": "https://mcp.pharaoh.so/mcp"
    }
  }
}

Or run it on your computer

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "pharaoh": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@pharaoh-so/mcp"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

ChatGPT connects only to servers on the internet:

Open ChatGPT on the web → Settings → Connectors (Apps)
Press Create or Add (some plans need Developer mode under Advanced first)
Paste the address below, give it a name and save
If it asks you to sign in, sign in with the maker

https://mcp.pharaoh.so/mcp

Menu names can differ slightly by plan and over time.

Your choice stays on this device in a cookie; no account needed.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

The server asks you to sign in before it lists its tools.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026

✓ Pass
Maker matches the repo
The registry name was verified against the domain pharaoh.so (the registry checks domain ownership)
… Not checked yet
Still maintained
We have not read this repo from GitHub yet
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
✓ Pass
Endpoint responds
Responded in 409 ms (HTTP 401)
✓ Pass
Sign-in with OAuth
Declares OAuth sign-in, so your AI app can take you to log in
… Not checked yet
No hidden instructions in tool descriptions
Not checked yet; we read the tool list when we check the endpoint

Compared with others in Search & AI memoryi

More stars than 0% of the other 7249 servers in this category
Published to the registry more recently than 100% of the other 7249 servers in this category
Basic checks equal to or better than 100% of the other 7249 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Pharaoh safe?

It passed 3 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

Either way works: install it on your computer or connect to the cloud version.

Is it still maintained?

The GitHub repo last changed –, and the latest version (1.0.283) reached the registry today.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.

What can I use instead?

In the same category: Context7, Codebase Memory, Exa

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Context7

by upstash

Feeds AI the latest docs for libraries and frameworks before it answers, so code it writes does not use outdated, removed functions.

Computer or cloud★ 64,224MITUpdated today

Install

Codebase Memory

by DeusData

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

Runs on your computer★ 48,148MITUpdated 20 days ago

Install

Exa

by exa-labs

Connect AI agents to Exa for web search, content fetching, and multi-step research.

Runs in the cloud★ 5,213MITUpdated last month

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

@pharaoh-so/mcp

MCP proxy for Pharaoh — maps codebases into queryable knowledge graphs for coding agents.

Pharaoh gives coding agents such as Claude Code, Cursor, Codex and OpenClaw a complete architectural map of your codebase: every function, dependency, module, and connection. Instead of reading files one at a time, your agent queries the knowledge graph and gets instant answers about blast radius, unused code, dependency chains, and more.

This package enables Claude Code to connect to Pharaoh in headless environments (VPS, SSH, containers, CI) where a browser isn't available for OAuth. It acts as a stdio-to-SSE proxy, presenting itself as a local MCP server while relaying all communication to the remote Pharaoh server.

Quick Start

Step 1 — Authenticate

Run the proxy directly to trigger the device authorization flow:

npx @pharaoh-so/mcp

This displays a device code and a URL. Open the URL on any device (phone, laptop, tablet) and enter the code to authorize. Credentials are saved to ~/.pharaoh/credentials.json and remain valid for 7 days, with automatic re-authorization when they expire.

Step 2 — Add to Claude Code

npx @pharaoh-so/mcp

Verify the connection:

claude mcp list

You should see pharaoh listed as a stdio server.

Switching from SSE

If you previously added Pharaoh as an SSE server, remove it first:

claude mcp remove pharaoh

npx @pharaoh-so/mcp

How It Works

Claude Code ← stdio → @pharaoh-so/mcp ← SSE/HTTP → mcp.pharaoh.so

The proxy implements the Model Context Protocol (MCP) specification:

Claude Code launches the proxy as a child process and communicates via stdio (stdin/stdout)
The proxy authenticates with Pharaoh using stored credentials (or triggers device flow)
All MCP messages (tool calls, responses, notifications) are relayed to the remote Pharaoh server over SSE (Server-Sent Events)
Pharaoh queries the knowledge graph and returns architectural data to the proxy
The proxy forwards responses back to Claude Code via stdio

Authentication uses RFC 8628 (OAuth 2.0 Device Authorization Grant) — no browser is needed on the machine running Claude Code.

Available Tools

Once connected, Pharaoh provides these MCP tools:

Orient

Tool	What it answers
`get_codebase_map`	What modules exist and how do they relate?
`get_module_context`	What does this module look like before I modify it?
`search_functions`	Does this function already exist somewhere?
`pharaoh_recon`	Map, module context, search and blast radius in one call

Investigate

Tool	What it answers
`get_blast_radius`	What breaks if I change this function/file/module?

Manage

Tool	What it answers
`pharaoh_account`	Check plan, toggle PR Guard, trigger refresh
`pharaoh_admin`	Org-level administration

Inspect Mode

Use --inspect to dump the full tool manifest as JSON (useful for MCP registry validation and debugging):

npx @pharaoh-so/mcp --inspect

This outputs the complete list of tools with their schemas and exits immediately, without connecting to the server.

CLI Options

Usage: pharaoh-mcp [options]

Options: --server Pharaoh server URL (default: https://mcp.pharaoh.so) --logout Clear stored credentials and exit --inspect Output tool manifest as JSON and exit --help Show help --version Show version number

Configuration

Credentials

Credentials are stored at ~/.pharaoh/credentials.json with 0600 permissions (owner-read/write only). The file contains:

Access token — used to authenticate MCP requests
Refresh token — used to obtain new access tokens when they expire
Expiry timestamp — tokens are refreshed automatically before expiration

To clear credentials:

npx @pharaoh-so/mcp --logout

Custom Server

For self-hosted Pharaoh instances or development, register manually, pinned to a version (npx @pharaoh-so/mcp --version prints the one you have):

claude mcp add --scope user pharaoh -- npx @pharaoh-so/mcp@<version> --server https://your-pharaoh-instance.com

Environment Variables

Variable	Default	Description
`PHARAOH_SERVER_URL`	`https://mcp.pharaoh.so`	Pharaoh server URL (alternative to `--server`)

Requirements

Node.js >= 18
Claude Code or any MCP-compatible agent
A Pharaoh account — sign up at pharaoh.so

Security

Credentials are stored with restrictive file permissions (0600 — owner-read/write only)
Authentication uses the RFC 8628 device authorization flow — no secrets are embedded in the package
All communication with the Pharaoh server uses HTTPS/TLS
The proxy never sends your code or the text of any file. Pharaoh reads your code from GitHub through its GitHub App, maps it into a knowledge graph of structural metadata (function names, file paths, dependency relationships), and deletes the clone when mapping ends.
From 0.3.60, when it connects, the proxy also tells Pharaoh whether your ~/.claude/CLAUDE.md holds the line setup suggests, mentions Pharaoh another way, doesn't, or is missing, and whether setup's block is still in it. In Claude Code started at a git repo's root, it does the same for that project's CLAUDE.md, CLAUDE.local.md, .claude/CLAUDE.md and AGENTS.md. Only these values are sent, never the files' text.
Tokens expire after 7 days and are refreshed automatically
Only use trusted server URLs — the proxy sends your auth token to the configured server
The proxy's only network calls are the device flow, token refresh, the MCP connection, and one registry lookup during interactive setup (below). Over the MCP connection it tells Pharaoh which client it serves (the name and version that client reports) and whether Pharaoh's Claude Code plugin is enabled, which it reads from ~/.claude/settings.json. Nothing else about your machine is sent.

What the installer writes on your machine

npx @pharaoh-so/mcp in a terminal is the interactive setup. Every later proxy start (Claude Code launching the server) repeats the plugin, skill and command steps so a new version takes effect, and nothing else.

Path	Mode	When	What
`~/.pharaoh/`	`0700`, set again on every start	Always	Credentials and the Claude Code plugin marketplace
`~/.pharaoh/credentials.json`	`0600`	After sign-in	Access token, refresh token, expiry
`~/.pharaoh/claude-marketplace/`	—	`~/.claude/` exists	The one-plugin marketplace Claude Code installs as `pharaoh@pharaoh`: the skills and the Grep routing hook. Rewritten when the package version changes
`~/.claude/commands/plan.md`, `review.md`	—	`~/.claude/` exists	Slash commands. A file is written only when it is absent or is Pharaoh's: it carries the front-matter comment `# managed-by: pharaoh-mcp`, or has the exact header and `$ARGUMENTS` footer of a Pharaoh command from 0.3.46 or earlier. Any other file with that name is yours: it is kept, a symlink is never followed, and the setup output names it. Rename your file to keep both. 0.3.51 and earlier also wrote `sessions.md`; later versions delete it while it carries the marker
`~/.claude.json`	—	Interactive setup	Removes earlier `pharaoh` entries, then `claude mcp add --scope user pharaoh -- npx @pharaoh-so/mcp@`
`~/.claude/settings.json`	—	Interactive setup, and only if the file already exists	Adds to `permissions.allow`, each by full name: `mcp__pharaoh__get_codebase_map`, `mcp__pharaoh__get_module_context`, `mcp__pharaoh__search_functions`, `mcp__pharaoh__get_blast_radius`, `mcp__pharaoh__get_unused_code`, `mcp__pharaoh__pharaoh_recon`, `mcp__pharaoh__pharaoh_account`. The setup prints a line saying what it did. The proxy never creates this file and never touches it on a start
`~/.agents/skills/pharaoh-review/`	—	`~/.codex/` exists	The review skill for Codex (`$pharaoh-review`), rewritten on every start. Other tools share `~/.agents/skills/`, so nothing else there is touched
`~/.openclaw/skills/`, `~/.openclaw/openclaw.json`	—	`~/.openclaw/` exists	Skills prefixed `pharaoh-`, and an `mcpServers.pharaoh` entry running `npx @pharaoh-so/mcp@` . An entry that is not an `npx @pharaoh-so/mcp` command is left alone

Versions 0.3.46 and earlier wrote one rule, mcp__pharaoh, on every proxy start. That prefix auto-approved every Pharaoh tool, including account deletion and pharaoh_admin, so a prompt injection could run them without a human prompt. The next interactive setup replaces that rule with the list above; account deletion, pharaoh_admin and any tool not listed prompt before they run. To take the blanket rule out by hand, delete mcp__pharaoh from permissions.allow.

Pinned version and upgrades

Every registration the setup writes runs the exact version that wrote it (npx @pharaoh-so/mcp@ ). A new release on npm changes nothing on your machine until you upgrade:

npx @pharaoh-so/mcp@latest

This signs you in again, rewrites the registration with the new version and refreshes the plugin. The interactive setup asks the npm registry for the newest version and prints a one-line hint when there is one; proxy starts never check.

Reporting Vulnerabilities

If you discover a security vulnerability, please report it responsibly by emailing security@pharaoh.so. Do not open a public issue.

Troubleshooting

"Connection refused" or "ECONNREFUSED"

The Pharaoh server may be temporarily unavailable. Check status.pharaoh.so or try again in a few minutes.

"Token expired" or "401 Unauthorized"

Re-authenticate by running the proxy directly:

npx @pharaoh-so/mcp

Or clear credentials and start fresh:

npx @pharaoh-so/mcp --logout

npx @pharaoh-so/mcp

"pharaoh" not showing in `claude mcp list`

Make sure you added it with the correct command:

npx @pharaoh-so/mcp

Note the -- separator between pharaoh and npx.

Device code not working

Ensure you're opening the URL on a device with browser access
The device code expires after 15 minutes — request a new one by re-running the command
Check that you're logged into GitHub when authorizing

Slow startup

The first run after installation may take a moment as npm downloads the package. Subsequent runs use the cached version. To pre-install globally:

npm install -g @pharaoh-so/mcp

claude mcp add --scope user pharaoh -- pharaoh-mcp

How Pharaoh Works

Pharaoh parses your repositories using tree-sitter and maps structural metadata into a Neo4j knowledge graph. The graph contains:

Functions — names, signatures, complexity scores, export visibility
Files — paths, module membership, language classification
Modules — logical groupings detected from directory structure
Dependencies — import/export relati

Only the beginning is shown; read the rest in the repo

Pharaoh

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

Or run it on your computer

Or run it on your computer

Or run it on your computer

Or run it on your computer

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Search & AI memoryi

Common questions

Alternatives

Context7

Codebase Memory

Exa

README from the maker

@pharaoh-so/mcp

Quick Start

Step 1 — Authenticate

Step 2 — Add to Claude Code

Switching from SSE

How It Works

Available Tools

Orient

Investigate

Manage

Inspect Mode

CLI Options

Configuration

Credentials

Custom Server

Environment Variables

Requirements

Security

What the installer writes on your machine

Pinned version and upgrades

Reporting Vulnerabilities

Troubleshooting

"Connection refused" or "ECONNREFUSED"

"Token expired" or "401 Unauthorized"

"pharaoh" not showing in claude mcp list

Device code not working

Slow startup

How Pharaoh Works

"pharaoh" not showing in `claude mcp list`