Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
作者提供的说明(英文原文)
Structural code intelligence over MCP: symbols, callers, imports and blast radius, 40+ languages.
这三项永远不会合并成一个分数:意见、测量和人气是不同的东西。
我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。
选择你使用的 AI 应用,然后复制设置。
CODEINDEX_WORKSPACE, CODEINDEX_NO_DAEMON, CODEINDEX_DAEMON_IDLE_SECS你需要
你用的是哪个应用?
在上方选择你的应用。我们会记住它,下次按钮会显示“安装到 …”。
打开 Claude Desktop → Settings → Developer → Edit Config,把下面的内容粘贴到 claude_desktop_config.json
{
"mcpServers": {
"codeindex": {
"command": "npx",
"args": [
"-y",
"@munhq/codeindex"
],
"env": {
"CODEINDEX_WORKSPACE": "your-value",
"CODEINDEX_NO_DAEMON": "your-value",
"CODEINDEX_DAEMON_IDLE_SECS": "your-value"
}
}
}
}在终端中运行这条命令
claude mcp add codeindex --env CODEINDEX_WORKSPACE=your-value --env CODEINDEX_NO_DAEMON=your-value --env CODEINDEX_DAEMON_IDLE_SECS=your-value -- npx -y @munhq/codeindex运行前请先填写空着的值。
粘贴到项目中的 .cursor/mcp.json,或 ~/.cursor/mcp.json
{
"mcpServers": {
"codeindex": {
"command": "npx",
"args": [
"-y",
"@munhq/codeindex"
],
"env": {
"CODEINDEX_WORKSPACE": "your-value",
"CODEINDEX_NO_DAEMON": "your-value",
"CODEINDEX_DAEMON_IDLE_SECS": "your-value"
}
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
粘贴到项目中的 .vscode/mcp.json
{
"servers": {
"codeindex": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@munhq/codeindex"
],
"env": {
"CODEINDEX_WORKSPACE": "your-value",
"CODEINDEX_NO_DAEMON": "your-value",
"CODEINDEX_DAEMON_IDLE_SECS": "your-value"
}
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
这个服务器在你的电脑上运行,而 ChatGPT 只能连接互联网上的服务器。请选择其他应用。
你的选择通过 Cookie 保存在这台设备上,无需账户。
CODEINDEX_WORKSPACE envCODEINDEX_NO_DAEMON envCODEINDEX_DAEMON_IDLE_SECS env这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同,请以 README 为准。
它在你的电脑上运行;安装后,工具列表会显示在你的 AI 应用中。
我们检查的是任何人都能看到的信息;我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月6日
注册名称已通过 GitHub 账户 munhq 验证,该账户拥有此仓库
我们还没有从 GitHub 读取这个仓库
我们还没有从 GitHub 读取这个仓库
它在你的电脑上运行,没有互联网端点
在你的电脑上运行,改用本地设置
它在你的电脑上运行;我们只能读取互联网端点的工具列表
与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时,星标数才计入。
它在 1 项适用的基础检查中通过了 1 项。我们没有阅读代码。在添加密钥或令牌之前,请先看看这个服务器要求哪些权限,并使用只具备所需权限的密钥。
注册中心没有列出必需的密钥,不过有些服务器会在首次使用时要求你登录。
它在你的电脑上运行。你的 AI 应用会在需要时启动它,数据不会经过作者的服务器(除非它自己调用在线服务)。
GitHub 仓库最后更新于–,最新版本(0.6.2)于3天前进入注册中心。
支持 MCP 的应用,例如 Claude Desktop、Claude Code、Cursor 和 VS Code。你的电脑上还需要有 Node.js。
同一分类中有:Spec Driven Development, Remote Desktop Commander, Dechonet MCP
同一分类中其他作者的服务器,按星标数排序。
如何看卡片:★ GitHub 星标i三大支柱:评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。
A structural code intelligence engine that runs as an MCP server for AI coding agents.
It indexes your codebase with tree-sitter (40+ languages), builds a trigram full-text index, an inverted word index, and a dependency graph — then exposes them through 16 MCP tools.
┌─────────────┐ MCP (stdio) ┌───────────┐ ┌──────────────────┐
│ AI Agent │ ◄─────────────► │ codeindex │ socket │ codeindex daemon │ │ (Claude, │ 16 tools, │ (relay) │ ◄────────► │ one per │ │ Cursor…) │ JSON-RPC └───────────┘ │ workspace │ └─────────────┘ └────────┬─────────┘ ┌─────────────┐ MCP (stdio) ┌───────────┐ │ │ AI Agent │ ◄─────────────► │ codeindex │ ◄───────────────────┘ │ (session 2)│ │ (relay) │ tree-sitter parse (40+ langs) └─────────────┘ └───────────┘ trigram + word index dependency graph one file watcher snapshot persistence
Every session on a repository speaks plain stdio MCP, as before. Behind that, they share one index: the tree is parsed once, watched once and written once, however many agents are attached. Eight sessions on one repository used to be eight copies of the same index, eight file watchers and eight writers of the same snapshot; measured on a 720-file project, each session went from 87 MB to 7 MB, against one shared 77 MB daemon.
AI coding agents spend tokens reading entire files. codeindex answers structural questions — symbol outlines, definitions, callers, blast radius, dependency chains — in a few hundred tokens instead of thousands.
One plan_change call returns: where a symbol is defined, every call site, the file's architectural role (god module / stable core / island / driver), hardcoded literals to check, and the full transitive blast radius if the file changes.
The shortest path, if you have Node 18+. Nothing else to install, no key, no config — the package is a 4 KB wrapper that fetches the binary for your platform and verifies it against the published checksums:
claude mcp add codeindex -- npx -y @munhq/codeindex
No Node, or you want the skill and the hook as well:
# Prebuilt binary + skill + MCP registration, in one command
curl -fsSL https://raw.githubusercontent.com/munhq/codeindex/main/install.sh | sh
cd zig && ./fetch-vendor.sh && zig build -Doptimize=ReleaseFast
Docker, for hosts that install MCP servers as images. The workspace is bind-mounted read-only; codeindex never writes to it:
docker run -i --rm -v "$PWD:/workspace:ro" munhq/codeindex
Register with your AI agent:
# Claude Code — the plugin is the one-step path. It ships the skill, both
claude plugin marketplace add munhq/codeindex claude plugin install codeindex@codeindex
claude mcp add -s user codeindex -- ~/.local/bin/codeindex --mcp
{ "mcpServers": { "codeindex": { "command": "npx", "args": ["-y", "@munhq/codeindex"] } } }
Every listing points at the same server: npm @munhq/codeindex, the official MCP registry as io.github.munhq/codeindex, and Smithery as munhq/codeindex.
The next time your agent starts, codeindex indexes your project in the background and serves structural queries.
| Tool | What it does |
|---|---|
status | Index stats: file count, symbol count, indexing state, token savings %, the indexed workspace and whether a watcher is live |
search | Trigram-accelerated full-text search across all indexed files |
find_symbol | Find symbol definitions (functions, structs, classes…) by name |
find_word | Exact word/identifier lookup in the inverted word index |
find_callers | Call sites of a symbol, each with the function that holds it. Matched by name, so a same-named definition elsewhere is included |
get_outline | Structural outline of a file (symbols, line counts) |
get_tree | Directory tree with file metadata |
get_imports | What files does a given file import/depend on |
get_imported_by | Reverse dependencies — who imports this file |
get_change_impact | Transitive blast radius: what breaks if a file changes |
plan_change | Full refactor plan for a symbol or file — definitions, callers, file role, literals, blast radius |
get_hot_files | Recently changed files sorted by recency |
read_file | Read file contents with optional line range |
read_symbol | Read just a symbol's source code (with optional context lines) |
index_workspace | Index or re-index a project directory; a session that works in another checkout moves to that checkout's index |
analyze | Run one of 22 code analyses (see below) |
analyze tool)| Analysis | What it finds |
|---|---|
security | Hardcoded secrets, SQL injection patterns, unsafe blocks, eval usage |
dead_code | Symbols nothing names outside their own definition, split from the unused public API of a library package |
unwrap_audit | .unwrap() / expect / panic! sites (Rust), ranked by whether a request handler, a loop or main reaches them |
test_coverage | Files without test coverage |
architecture | Architectural smells — god modules, circular deps, islands |
crossref | Cross-file symbol references |
type_drift | Type signature mismatches across modules |
db_schema | Tables the migrations create that no code names, and SQL ORM models no migration creates |
migration_parity | Missing migrations for schema changes |
manifest_compliance | package.json / Cargo.toml / go.mod compliance issues |
literal_scan | Hardcoded URLs, IPs, ports, absolute paths, TODOs |
coupling | Module coupling metrics |
cycles | Circular dependency detection |
duplication | Reinvented free functions — the same job written twice |
clones | Copy-pasted function bodies, ignoring names and whitespace |
spawn_scan | An interpreter started on a loop or a timer, across files, ranked by startup cost times spawn rate |
deps | Dependency inventory — duplicate versions, unreferenced crates, single-use crates |
leak_shapes | Shapes a leak has, each paired with the runtime series that decides it |
logic_shapes | A fixed byte constant against the memory limit of the unit that deploys it, and replicas × pool size against a pooler's connection capacity |
call_cost | Loops over rows ranked by the database and HTTP round trips each element costs, counted through the call graph |
field_contention | One declared-state field written by two or more owners |
health | Roll-up of the analyses above into one index-health report |
40+ languages via tree-sitter: Rust, Python, TypeScript/TSX, Go, Zig, C, C++, Java, Ruby, Bash, C#, Kotlin, Lua, Scala, Elixir, R, Swift, Dart, Haskell, TOML, JSON, YAML, HTML, CSS, SCSS, SQL, HCL, Dockerfile, Markdown, Nix, Make, and more.
codeindex --mcp # Run as MCP server (stdio)
codeindex --mcp --no-daemon # ...without sharing the workspace daemon codeindex --daemon-idle-secs 0 # Keep the daemon resident indefinitely codeindex --workspace ./my-project # Index a specific directory codeindex --project-id my-project # Project identifier codeindex -v # Print version codeindex -h # Print help
CODEINDEX_WORKSPACE=/path/to/project # Same as --workspace CODEINDEX_PROJECT_ID=my-project # Same as --project-id
A server that registers without telling an agent when to reach for it stays idle, and an idle index saves nothing however cheap its calls are. The plugin ships three things for that, in the order they act:
Bash as well as Read/Grep/Glob, because a permission mode that routes file work through the shell is where most scans actually happen.Advice loses to habit, so the narrow case where the index is strictly better is refused rather than argued with: an identifier search that is the whole command line, in a project that has been indexed before. It never refuses a file read — the bytes are required before an Edit — never refuses a line that also builds or tests, and stops refusing after three times in a session, so it can never be the reason a session cannot proceed.
That is on by default, and it is one switch to turn off — no file to edit by hand. It is a plugin option, so /plugin shows it as "Refuse a scan the index answers better" and Claude Code passes your answer to the hook. Outside the plugin, or for a single session, CODEINDEX_ENFORCE=0 in the environment overrides the option and CODEINDEX_ENFORCE=1 restores it.
Measure the effect rather than assuming it: python3 plugin/measure_routing.py counts, per session, how many code questions went to a scan and how many went to the index, across every Claude Code home on the machine.
In --mcp mode the working directory belongs to the client, not to you, and it is regularly not your project: Claude Code launches a plugin's MCP server from the plugin's own directory and a user-scope server from its config directory. So the workspace is resolved in this order, and the first usable answer wins:
--workspace or CODEINDEX_WORKSPACE. An explicit answer is never overridden.CLAUDE_PROJECT_DIR, which Claude Code sets in every MCP server it spawns..git, `package.jso只显示了开头部分;其余内容请在仓库中阅读