Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

com.adrianczuczka/mason

NPM · MASON-CONTEXT · SCANNED AUG 3

Context engineering MCP server — generates CLAUDE.md files via structured codebase analysis

Available components

+34 this week 78 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security88
  • No malware found by supply-chain analysis.Pass
  • Only part of the dependency tree could be resolved (121 of 125), so this covers what we could see, not the whole tree.Partial
  • No install/post-install scripts declared.Pass
  • Only part of the dependency tree could be resolved (121 of 125), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency97
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to adrianczuczka/mason). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 11 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability66
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 3089 tokens (~171/item across 18 items; 18 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
  • Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage99
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 98% of tool parameters carry a description.Partial
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · mason-context

# add to Claude Code
claude mcp add com-adrianczuczka-mason -- npx -y mason-context
# add to Codex CLI
codex mcp add com-adrianczuczka-mason -- npx -y mason-context
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-adrianczuczka-mason": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "mason-context"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add com-adrianczuczka-mason --command npx --arg -y --arg mason-context
# ~/.hermes/config.yaml
mcp_servers:
  com-adrianczuczka-mason:
    command: "npx"
    args: ["-y", "mason-context"]
// mcp.json
{
  "mcpServers": {
    "com-adrianczuczka-mason": {
      "command": "npx",
      "args": [
        "-y",
        "mason-context"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 3 Aug 26 +4
    • Stability: unverified → 0.27 functional
  • 2 Aug 26 +55
    • Known CVEs: unverified → partial security
    • Install scripts: unverified → pass security
    • Provenance: unverified → pass security
    • Malware scan: unverified → pass security
    • Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
    • The attested source repository moved: adrianczuczka/mason security
    • Tool coverage: 100 → unverified functional
    • Schema quality: unverified → excellent functional
    • License: unverified → pass functional
    • Dependency health: unverified → partial functional
    • Maintenance: unverified → pass functional
    • MCP protocol: unverified → pass functional
    • Licence: MIT functional
  • 1 Aug 26 +14
    • Tool coverage: unverified → 100 functional
  • 31 Jul 26 −21
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 −18
    • Malware scan: pass → unverified security
  • 27 Jul 26 44

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance verified

Ecosystem: npm · Outcome: verified

Reason: verified

Source repo:
adrianczuczka/mason
Certificate issuer:
https://token.actions.githubusercontent.com
Certificate SAN:
https://github.com/adrianczuczka/mason/.github/workflows/publish.yml@refs/tags/v0.6.0
Rekor log index:
2217690486
Predicate type:
https://slsa.dev/provenance/v1
Subject digest:
sha512:3599d484336fa0687f33b6d233e8368b82d48794b366b36f32251a81cd6556eb67ebf6bd4de33c3d03d475cc3c212629fa00d64fd9a491009f00197ea
Discovery method:
attestation_endpoint
Dependencies 121 packages

121 packages in the resolved dependency tree · 106 deprecated · 42 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 18 exposed · ~2,738 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
analyze_project ~60

Run git history analysis on a codebase. Returns commit convention patterns, stale directories, and frequently changed files. These are aggregate stats across hundreds of commits that would be expensive to compute manually.

NameTypeReqDescription
dirstringyesAbsolute path to the project root directory

No output schema declared.

No examples provided.

export_to_confluence ~191

Sync the project's concept map to Confluence as product-readable wiki pages: an index page, one page per feature (PM-language descriptions, no file paths), and a changelog page. Hand-edits outside `<!-- mason:start/end:* -->` markers are preserved across syncs. Requires `mason_set_confluence` to have been called first.

NameTypeReqDescription
changelogPageTitlestringTitle of the changelog page (default: 'Mason — Changelog')
dirstringyesAbsolute path to the project root directory
featurePagePrefixstringPrefix for each feature page title (default: 'Feature: ')
indexPageTitlestringTitle of the index page (default: 'Mason — System Map')
parentPageIdstringOverride the configured parent page ID
spaceKeystringOverride the configured space key

No output schema declared.

No examples provided.

full_analysis ~85

One-shot orientation for a project WITHOUT a concept map (get_snapshot returned exists:false). Returns git history stats, project structure with file counts, curated code sample previews (~60 lines each), and test-to-source mapping. On a mapped project, prefer get_snapshot — it is cheaper and answers feature/architecture questions directly.

NameTypeReqDescription
dirstringyesAbsolute path to the project root directory

No output schema declared.

No examples provided.

generate_snapshot_batch ~238

Map step of the concept-map build. Returns one batch of source files (skeletons of every file in the batch plus a few deeper-read bodies for grounding), along with a system prompt instructing you to derive features and flows for ONLY this batch. Call repeatedly with the returned `nextOffset` until it is null, calling `save_partial_snapshot` between each call. Use product-natural feature names so partials merge cleanly in the reduce step.

NameTypeReqDescription
batchSizeintegerFiles per batch. Defaults to 50.
dirstringyesAbsolute path to the project root directory
filesarrayScope the batch walk to this explicit file list — e.g. the drift set from mason_check_drift (changedFiles + unmappedFiles). Pass the SAME list on every batch call of one refresh run. Triggers refresh…
offsetinteger0-indexed file offset to start the batch at. Omit on the first call; pass the `nextOffset` from the previous response for subsequent calls.

No output schema declared.

No examples provided.

get_code_samples ~91

Get previews (first ~60 lines) of representative source files from the codebase. Includes entry points, config files, hot files (frequently changed), test examples, and one file per directory for breadth. Read files natively for full content.

NameTypeReqDescription
countnumberMaximum number of files to sample (default: 15)
dirstringyesAbsolute path to the project root directory

No output schema declared.

No examples provided.

get_context ~226

CALL THIS FIRST when given a task to implement, a bug to fix, a ticket, or a change request ('add X', 'fix Y', 'refactor Z'). One call returns everything needed to start: the matching features/flows with their files, related tests, blast radius for the key files (git co-change + references), and per-entry freshness — replacing a get_snapshot + get_impact + test-hunting sequence. Cheap, instant, LLM-free. Pass the task in natural language; optionally pass `files` (e.g. from a diff) to anchor the match. For open-ended architecture questions with no task, use get_snapshot instead.

NameTypeReqDescription
dirstringyesAbsolute path to the project root directory
filesarrayOptional file paths already known to be involved (e.g. from a diff or stack trace). Entries containing them are boosted above pure text matches.
taskstringyesThe task, bug, or change request in natural language — e.g. 'add rate limiting to the API client' or a ticket description

No output schema declared.

No examples provided.

get_impact ~136

CALL THIS BEFORE editing, refactoring, or assessing the blast radius of any file. Returns three signals you cannot get by reading the file itself: git co-change history (files that historically change in the same commits), references (files that mention the target by name), and related tests. One call replaces a manual sweep of grep + git log. Also the right tool for 'what would break if I changed X?' questions.

NameTypeReqDescription
dirstringyesAbsolute path to the project root directory
filesarrayyesFile paths or names to analyze (e.g., ['WeatherRepository.kt'] or ['src/services/auth.ts'])

No output schema declared.

No examples provided.

get_snapshot ~167

CALL THIS FIRST — before grep, glob, or reading files — for any question about what this codebase does, its features, architecture, data flows, or where something is implemented ('where is X handled?', 'how does Y work?', 'what implements Z?'). Returns the persistent feature-to-file concept map in one cheap, instant, LLM-free call, replacing 5-10 exploration round-trips. Example: 'home screen' → [HomeScreen.kt, HomeViewModel.kt, HomeModule.kt]. Then read only the mapped files. If the map has drifted it says so (with a diff) — trust the freshness signal. If exists:false, the project isn't set up; offer mason_init.

NameTypeReqDescription
dirstringyesAbsolute path to the project root directory

No output schema declared.

No examples provided.

mason_check_drift ~148

Check how far the concept map has drifted from HEAD. Deterministic (git + filesystem, no LLM). Returns which features/flows are stale and the changed files behind them, new source files not yet mapped, ghost files (mapped but deleted), renames, and a `recommendation`: `up-to-date` (nothing to do), `incremental` (update just the stale entries via save_snapshot), or `full-rebuild` (re-run the Map-Reduce build). Call this before trusting the map in a long session, or periodically to keep the map and any synced wikis fresh.

NameTypeReqDescription
dirstringyesAbsolute path to the project root directory

No output schema declared.

No examples provided.

mason_complete_init ~104

Mark the project as initialized. Call this after walking the user through the playbook returned by `mason_init`. Writes `.mason/project.json` so future tool calls don't re-run the wizard. Pass `confluenceConfigured: true` if Phase 3 of the playbook ended with Confluence credentials saved.

NameTypeReqDescription
confluenceConfiguredbooleanTrue if Confluence was successfully configured during init
dirstringyesAbsolute path to the project root directory

No output schema declared.

No examples provided.

mason_init ~94

Start here. Checks if Mason is set up for this project. If not, returns a `playbook` of questions the assistant must walk the user through (concept map + optional Confluence sync). Once the walkthrough is done, call `mason_complete_init`. Idempotent: re-running on an already-initialized project just returns the current state.

NameTypeReqDescription
dirstringyesAbsolute path to the project root directory

No output schema declared.

No examples provided.

mason_set_confluence ~228

Configure Confluence credentials. Two-step flow: (1) call without `spaceKey` to validate the credentials and receive a list of available spaces — relay them to the user. (2) call again with the same `baseUrl`/`email`/`apiToken` plus the chosen `spaceKey` to persist. Credentials are stored in `~/.mason/config.json`. Warn the user that the API token will be visible in chat history before they paste it.

NameTypeReqDescription
apiTokenstringyesAPI token from id.atlassian.com/manage-profile/security/api-tokens
baseUrlstringyesConfluence base URL. Accepts `acme`, `acme.atlassian.net`, or `https://acme.atlassian.net` (normalized automatically).
emailstringyesUser's Atlassian account email
parentPageIdstringOptional parent page ID under which Mason's index page is created
spaceKeystringConfluence space key. Omit on the first call to list available spaces.

No output schema declared.

No examples provided.

reduce_snapshot ~93

Reduce step of the concept-map build. Returns every partial snapshot plus a system prompt asking you to merge them into one coherent project-wide map. Resolve platform variants into single product features, dedupe near-duplicates, and ensure no file is dropped. After producing the unified map, call `save_snapshot` to persist it (this also clears the partials).

NameTypeReqDescription
dirstringyesAbsolute path to the project root directory

No output schema declared.

No examples provided.

save_decision ~326

CALL THIS when you learn something about this codebase that the code alone can't tell you: a failed approach ('we tried X, it broke Y'), a deprecation ('don't extend Z'), a workaround and its reason, or a convention settled in review. Best moments: the end of a debugging session, right after a design choice. Records are git-committed to .mason/decisions/ and PR-reviewed like code; get_context surfaces them on matching tasks. Do NOT record anything derivable by reading the code, session trivia, or secrets. Also handles updates (pass id), re-verification (same id + content re-pins to HEAD), and supersession (pass supersedes).

NameTypeReqDescription
bodystringyesThe knowledge itself: what was tried/decided, why, and what to avoid. Must contain information NOT derivable by reading the code.
categorystringyes
dirstringyesAbsolute path to the project root directory
filesarrayRepo-relative files this applies to. Anchors drift-checking: if these change, the decision is flagged for re-verification.
forcebooleanSave even when a near-duplicate was detected
idstringExisting decision id to update. Passing id with unchanged content re-verifies it (re-pins refreshedHash to HEAD).
supersedesstringId of a decision this one replaces — the old record is kept but marked superseded
titlestringyesShort, specific headline — becomes the stable record id

No output schema declared.

No examples provided.

save_partial_snapshot ~173

Persist the partial concept map you derived for one batch. Call this once per batch, with the `batchId` from the `generate_snapshot_batch` response. Partials accumulate in `.mason/partial-snapshots/` and are merged in the reduce step.

NameTypeReqDescription
batchIdstringyesThe `batchId` returned by `generate_snapshot_batch`.
dirstringyesAbsolute path to the project root directory
featuresobjectyesPartial features for this batch only — files outside the batch will be added by other partials.
flowsobjectyesPartial flows whose entire chain is in this batch. Cross-batch flows are reconstructed in reduce.
offsetintegeryesThe `offset` returned by `generate_snapshot_batch`. Used to order partials in the reduce step.

No output schema declared.

No examples provided.

save_snapshot ~170

Save a concept-to-files map as a persistent project snapshot. Maps feature names and data flows to the files that implement them. Persists across conversations — future sessions can call get_snapshot to instantly find relevant files. No API key needed — you are the LLM generating the map.

NameTypeReqDescription
dirstringyesAbsolute path to the project root directory
featuresobjectyesMap of feature names to their implementing files
flowsobjectyesMap of flow names to ordered file chains
removeFeaturesarrayFeature names to delete from the existing map — for features that were renamed or no longer exist. Applied before merging; only meaningful on incremental saves.
removeFlowsarrayFlow names to delete from the existing map. Applied before merging; only meaningful on incremental saves.

No output schema declared.

No examples provided.

save_verification ~83

Record verify_snapshot verdicts. Entries judged ok are stamped verifiedAt; failures are flagged verificationFailed with your note and surface in mason_check_drift until re-mapped. Verdict notes are required for failures.

NameTypeReqDescription
dirstringyesAbsolute path to the project root directory
verdictsobjectyesEntry name → verdict, exactly as returned by verify_snapshot

No output schema declared.

No examples provided.

verify_snapshot ~125

Spot-check the concept map's CORRECTNESS (drift checks freshness; this checks entries were right to begin with). Returns a sample of entries — always the never-verified and least-recently-verified first — with skeletons of their claimed files, for you to judge whether the files actually implement what the entry claims. Report verdicts back via save_verification. Run periodically, or after an automated refresh wrote entries no human reviewed.

NameTypeReqDescription
dirstringyesAbsolute path to the project root directory
sampleintegerEntries to sample (default 5)

No output schema declared.

No examples provided.