com.adrianczuczka/mason
NPM · MASON-CONTEXT · SCANNED AUG 3
Context engineering MCP server — generates CLAUDE.md files via structured codebase analysis
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security88
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (121 of 125), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (121 of 125), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency97
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to adrianczuczka/mason). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 11 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability66
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 3089 tokens (~171/item across 18 items; 18 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
- Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage99
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 98% of tool parameters carry a description.Partial
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · mason-context
claude mcp add com-adrianczuczka-mason -- npx -y mason-context
codex mcp add com-adrianczuczka-mason -- npx -y mason-context
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-adrianczuczka-mason": {
"type": "local",
"command": [
"npx",
"-y",
"mason-context"
],
"enabled": true
}
}
} openclaw mcp add com-adrianczuczka-mason --command npx --arg -y --arg mason-context
mcp_servers:
com-adrianczuczka-mason:
command: "npx"
args: ["-y", "mason-context"] {
"mcpServers": {
"com-adrianczuczka-mason": {
"command": "npx",
"args": [
"-y",
"mason-context"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 +4
- Stability: unverified → 0.27 ▲ functional
- 2 Aug 26 +55
- Known CVEs: unverified → partial ▲ security
- Install scripts: unverified → pass ▲ security
- Provenance: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- The attested source repository moved: adrianczuczka/mason security
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: unverified → excellent ▲ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Licence: MIT functional
- 1 Aug 26 +14
- Tool coverage: unverified → 100 ▲ functional
- 31 Jul 26 −21
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
- 27 Jul 26 44
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/[email protected]
Provenance verified
Ecosystem: npm · Outcome: verified
Reason: verified
- Source repo:
- adrianczuczka/mason
- Certificate issuer:
- https://token.actions.githubusercontent.com
- Certificate SAN:
- https://github.com/adrianczuczka/mason/.github/workflows/publish.yml@refs/tags/v0.6.0
- Rekor log index:
- 2217690486
- Predicate type:
- https://slsa.dev/provenance/v1
- Subject digest:
- sha512:3599d484336fa0687f33b6d233e8368b82d48794b366b36f32251a81cd6556eb67ebf6bd4de33c3d03d475cc3c212629fa00d64fd9a491009f00197ea
- Discovery method:
- attestation_endpoint
Dependencies 121 packages
121 packages in the resolved dependency tree · 106 deprecated · 42 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
analyze_project ~60
Run git history analysis on a codebase. Returns commit convention patterns, stale directories, and frequently changed files. These are aggregate stats across hundreds of commits that would be expensive to compute manually.
| Name | Type | Req | Description |
|---|---|---|---|
| dir | string | yes | Absolute path to the project root directory |
No output schema declared.
No examples provided.
export_to_confluence ~191
Sync the project's concept map to Confluence as product-readable wiki pages: an index page, one page per feature (PM-language descriptions, no file paths), and a changelog page. Hand-edits outside `<!-- mason:start/end:* -->` markers are preserved across syncs. Requires `mason_set_confluence` to have been called first.
| Name | Type | Req | Description |
|---|---|---|---|
| changelogPageTitle | string | — | Title of the changelog page (default: 'Mason — Changelog') |
| dir | string | yes | Absolute path to the project root directory |
| featurePagePrefix | string | — | Prefix for each feature page title (default: 'Feature: ') |
| indexPageTitle | string | — | Title of the index page (default: 'Mason — System Map') |
| parentPageId | string | — | Override the configured parent page ID |
| spaceKey | string | — | Override the configured space key |
No output schema declared.
No examples provided.
full_analysis ~85
One-shot orientation for a project WITHOUT a concept map (get_snapshot returned exists:false). Returns git history stats, project structure with file counts, curated code sample previews (~60 lines each), and test-to-source mapping. On a mapped project, prefer get_snapshot — it is cheaper and answers feature/architecture questions directly.
| Name | Type | Req | Description |
|---|---|---|---|
| dir | string | yes | Absolute path to the project root directory |
No output schema declared.
No examples provided.
generate_snapshot_batch ~238
Map step of the concept-map build. Returns one batch of source files (skeletons of every file in the batch plus a few deeper-read bodies for grounding), along with a system prompt instructing you to derive features and flows for ONLY this batch. Call repeatedly with the returned `nextOffset` until it is null, calling `save_partial_snapshot` between each call. Use product-natural feature names so partials merge cleanly in the reduce step.
| Name | Type | Req | Description |
|---|---|---|---|
| batchSize | integer | — | Files per batch. Defaults to 50. |
| dir | string | yes | Absolute path to the project root directory |
| files | array | — | Scope the batch walk to this explicit file list — e.g. the drift set from mason_check_drift (changedFiles + unmappedFiles). Pass the SAME list on every batch call of one refresh run. Triggers refresh… |
| offset | integer | — | 0-indexed file offset to start the batch at. Omit on the first call; pass the `nextOffset` from the previous response for subsequent calls. |
No output schema declared.
No examples provided.
get_code_samples ~91
Get previews (first ~60 lines) of representative source files from the codebase. Includes entry points, config files, hot files (frequently changed), test examples, and one file per directory for breadth. Read files natively for full content.
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | — | Maximum number of files to sample (default: 15) |
| dir | string | yes | Absolute path to the project root directory |
No output schema declared.
No examples provided.
get_context ~226
CALL THIS FIRST when given a task to implement, a bug to fix, a ticket, or a change request ('add X', 'fix Y', 'refactor Z'). One call returns everything needed to start: the matching features/flows with their files, related tests, blast radius for the key files (git co-change + references), and per-entry freshness — replacing a get_snapshot + get_impact + test-hunting sequence. Cheap, instant, LLM-free. Pass the task in natural language; optionally pass `files` (e.g. from a diff) to anchor the match. For open-ended architecture questions with no task, use get_snapshot instead.
| Name | Type | Req | Description |
|---|---|---|---|
| dir | string | yes | Absolute path to the project root directory |
| files | array | — | Optional file paths already known to be involved (e.g. from a diff or stack trace). Entries containing them are boosted above pure text matches. |
| task | string | yes | The task, bug, or change request in natural language — e.g. 'add rate limiting to the API client' or a ticket description |
No output schema declared.
No examples provided.
get_impact ~136
CALL THIS BEFORE editing, refactoring, or assessing the blast radius of any file. Returns three signals you cannot get by reading the file itself: git co-change history (files that historically change in the same commits), references (files that mention the target by name), and related tests. One call replaces a manual sweep of grep + git log. Also the right tool for 'what would break if I changed X?' questions.
| Name | Type | Req | Description |
|---|---|---|---|
| dir | string | yes | Absolute path to the project root directory |
| files | array | yes | File paths or names to analyze (e.g., ['WeatherRepository.kt'] or ['src/services/auth.ts']) |
No output schema declared.
No examples provided.
get_snapshot ~167
CALL THIS FIRST — before grep, glob, or reading files — for any question about what this codebase does, its features, architecture, data flows, or where something is implemented ('where is X handled?', 'how does Y work?', 'what implements Z?'). Returns the persistent feature-to-file concept map in one cheap, instant, LLM-free call, replacing 5-10 exploration round-trips. Example: 'home screen' → [HomeScreen.kt, HomeViewModel.kt, HomeModule.kt]. Then read only the mapped files. If the map has drifted it says so (with a diff) — trust the freshness signal. If exists:false, the project isn't set up; offer mason_init.
| Name | Type | Req | Description |
|---|---|---|---|
| dir | string | yes | Absolute path to the project root directory |
No output schema declared.
No examples provided.
mason_check_drift ~148
Check how far the concept map has drifted from HEAD. Deterministic (git + filesystem, no LLM). Returns which features/flows are stale and the changed files behind them, new source files not yet mapped, ghost files (mapped but deleted), renames, and a `recommendation`: `up-to-date` (nothing to do), `incremental` (update just the stale entries via save_snapshot), or `full-rebuild` (re-run the Map-Reduce build). Call this before trusting the map in a long session, or periodically to keep the map and any synced wikis fresh.
| Name | Type | Req | Description |
|---|---|---|---|
| dir | string | yes | Absolute path to the project root directory |
No output schema declared.
No examples provided.
mason_complete_init ~104
Mark the project as initialized. Call this after walking the user through the playbook returned by `mason_init`. Writes `.mason/project.json` so future tool calls don't re-run the wizard. Pass `confluenceConfigured: true` if Phase 3 of the playbook ended with Confluence credentials saved.
| Name | Type | Req | Description |
|---|---|---|---|
| confluenceConfigured | boolean | — | True if Confluence was successfully configured during init |
| dir | string | yes | Absolute path to the project root directory |
No output schema declared.
No examples provided.
mason_init ~94
Start here. Checks if Mason is set up for this project. If not, returns a `playbook` of questions the assistant must walk the user through (concept map + optional Confluence sync). Once the walkthrough is done, call `mason_complete_init`. Idempotent: re-running on an already-initialized project just returns the current state.
| Name | Type | Req | Description |
|---|---|---|---|
| dir | string | yes | Absolute path to the project root directory |
No output schema declared.
No examples provided.
mason_set_confluence ~228
Configure Confluence credentials. Two-step flow: (1) call without `spaceKey` to validate the credentials and receive a list of available spaces — relay them to the user. (2) call again with the same `baseUrl`/`email`/`apiToken` plus the chosen `spaceKey` to persist. Credentials are stored in `~/.mason/config.json`. Warn the user that the API token will be visible in chat history before they paste it.
| Name | Type | Req | Description |
|---|---|---|---|
| apiToken | string | yes | API token from id.atlassian.com/manage-profile/security/api-tokens |
| baseUrl | string | yes | Confluence base URL. Accepts `acme`, `acme.atlassian.net`, or `https://acme.atlassian.net` (normalized automatically). |
| string | yes | User's Atlassian account email | |
| parentPageId | string | — | Optional parent page ID under which Mason's index page is created |
| spaceKey | string | — | Confluence space key. Omit on the first call to list available spaces. |
No output schema declared.
No examples provided.
reduce_snapshot ~93
Reduce step of the concept-map build. Returns every partial snapshot plus a system prompt asking you to merge them into one coherent project-wide map. Resolve platform variants into single product features, dedupe near-duplicates, and ensure no file is dropped. After producing the unified map, call `save_snapshot` to persist it (this also clears the partials).
| Name | Type | Req | Description |
|---|---|---|---|
| dir | string | yes | Absolute path to the project root directory |
No output schema declared.
No examples provided.
save_decision ~326
CALL THIS when you learn something about this codebase that the code alone can't tell you: a failed approach ('we tried X, it broke Y'), a deprecation ('don't extend Z'), a workaround and its reason, or a convention settled in review. Best moments: the end of a debugging session, right after a design choice. Records are git-committed to .mason/decisions/ and PR-reviewed like code; get_context surfaces them on matching tasks. Do NOT record anything derivable by reading the code, session trivia, or secrets. Also handles updates (pass id), re-verification (same id + content re-pins to HEAD), and supersession (pass supersedes).
| Name | Type | Req | Description |
|---|---|---|---|
| body | string | yes | The knowledge itself: what was tried/decided, why, and what to avoid. Must contain information NOT derivable by reading the code. |
| category | string | yes | — |
| dir | string | yes | Absolute path to the project root directory |
| files | array | — | Repo-relative files this applies to. Anchors drift-checking: if these change, the decision is flagged for re-verification. |
| force | boolean | — | Save even when a near-duplicate was detected |
| id | string | — | Existing decision id to update. Passing id with unchanged content re-verifies it (re-pins refreshedHash to HEAD). |
| supersedes | string | — | Id of a decision this one replaces — the old record is kept but marked superseded |
| title | string | yes | Short, specific headline — becomes the stable record id |
No output schema declared.
No examples provided.
save_partial_snapshot ~173
Persist the partial concept map you derived for one batch. Call this once per batch, with the `batchId` from the `generate_snapshot_batch` response. Partials accumulate in `.mason/partial-snapshots/` and are merged in the reduce step.
| Name | Type | Req | Description |
|---|---|---|---|
| batchId | string | yes | The `batchId` returned by `generate_snapshot_batch`. |
| dir | string | yes | Absolute path to the project root directory |
| features | object | yes | Partial features for this batch only — files outside the batch will be added by other partials. |
| flows | object | yes | Partial flows whose entire chain is in this batch. Cross-batch flows are reconstructed in reduce. |
| offset | integer | yes | The `offset` returned by `generate_snapshot_batch`. Used to order partials in the reduce step. |
No output schema declared.
No examples provided.
save_snapshot ~170
Save a concept-to-files map as a persistent project snapshot. Maps feature names and data flows to the files that implement them. Persists across conversations — future sessions can call get_snapshot to instantly find relevant files. No API key needed — you are the LLM generating the map.
| Name | Type | Req | Description |
|---|---|---|---|
| dir | string | yes | Absolute path to the project root directory |
| features | object | yes | Map of feature names to their implementing files |
| flows | object | yes | Map of flow names to ordered file chains |
| removeFeatures | array | — | Feature names to delete from the existing map — for features that were renamed or no longer exist. Applied before merging; only meaningful on incremental saves. |
| removeFlows | array | — | Flow names to delete from the existing map. Applied before merging; only meaningful on incremental saves. |
No output schema declared.
No examples provided.
save_verification ~83
Record verify_snapshot verdicts. Entries judged ok are stamped verifiedAt; failures are flagged verificationFailed with your note and surface in mason_check_drift until re-mapped. Verdict notes are required for failures.
| Name | Type | Req | Description |
|---|---|---|---|
| dir | string | yes | Absolute path to the project root directory |
| verdicts | object | yes | Entry name → verdict, exactly as returned by verify_snapshot |
No output schema declared.
No examples provided.
verify_snapshot ~125
Spot-check the concept map's CORRECTNESS (drift checks freshness; this checks entries were right to begin with). Returns a sample of entries — always the never-verified and least-recently-verified first — with skeletons of their claimed files, for you to judge whether the files actually implement what the entry claims. Report verdicts back via save_verification. Run periodically, or after an automated refresh wrote entries no human reviewed.
| Name | Type | Req | Description |
|---|---|---|---|
| dir | string | yes | Absolute path to the project root directory |
| sample | integer | — | Entries to sample (default 5) |
No output schema declared.
No examples provided.