com.kage-core/kage
NPM · @KAGE-CORE/KAGE-GRAPH-MCP · SCANNED AUG 3
Verified memory for coding agents: claims cited against code, stale withheld, savings receipts.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security87
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (98 of 102), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (98 of 102), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (GPL-3.0-only).Pass
- Actively maintained (last published 9 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability43
- AI-judged instruction clarity (poor).Fail
- Tool/resource definitions use about 4519 tokens (~68/item across 66 items; 66 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
- Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage72
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 17% of tool parameters carry a description.Partial
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · @kage-core/kage-graph-mcp
claude mcp add com-kage-core-kage -- npx -y @kage-core/kage-graph-mcp
codex mcp add com-kage-core-kage -- npx -y @kage-core/kage-graph-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-kage-core-kage": {
"type": "local",
"command": [
"npx",
"-y",
"@kage-core/kage-graph-mcp"
],
"enabled": true
}
}
} openclaw mcp add com-kage-core-kage --command npx --arg -y --arg @kage-core/kage-graph-mcp
mcp_servers:
com-kage-core-kage:
command: "npx"
args: ["-y", "@kage-core/kage-graph-mcp"] {
"mcpServers": {
"com-kage-core-kage": {
"command": "npx",
"args": [
"-y",
"@kage-core/kage-graph-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Aug 26 +33
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → partial ▲ security
- Install scripts: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Tool coverage: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Maintenance: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Stability: unverified → 0.23 ▲ functional
- License: unverified → pass ▲ functional
- Licence: GPL-3.0-only functional
- 1 Aug 26 +17
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Dependency health: partial → unverified ▼ functional
- MCP protocol: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- 31 Jul 26 +3
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 −61
- Known CVEs: partial → unverified ▼ security
- Install scripts: pass → unverified ▼ security
- Provenance: fail → unverified ▼ security
- Malware scan: pass → unverified ▼ security
- Maintenance: pass → unverified ▼ functional
- Dependency health: partial → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- License: pass → unverified ▼ functional
- First check of Schema quality: unverified functional
- Licence: GPL-3.0-only functional
- 28 Jul 26 +25
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → partial ▲ security
- Install scripts: unverified → pass ▲ security
- Schema quality: unverified → poor ▲ functional
- Maintenance: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- License: unverified → pass ▲ functional
- Licence: GPL-3.0-only functional
- 27 Jul 26 42
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/@kage-core/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Dependencies 98 packages
98 packages in the resolved dependency tree · 97 deprecated · 29 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
kage_audit ~48
Audit whether repo memory and code intelligence are trustworthy: validation, memory inbox, structured context coverage, code graph precision, graph links, and concrete recommendations.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_benchmark ~61
Return Kage proof metrics, or set mode=memory_quality / memory_scale for synthetic memory retrieval benchmarks.
| Name | Type | Req | Description |
|---|---|---|---|
| mode | string | — | — |
| project_dir | string | yes | — |
| sizes | array | — | — |
| top_k | number | — | — |
No output schema declared.
No examples provided.
kage_benchmark_compare ~62
Compare the same task on the same repo with and without Kage. Reports estimated baseline discovery tokens/steps versus Kage recall/code-graph context, with evidence and caveats.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
| task | string | yes | — |
No output schema declared.
No examples provided.
kage_branch_overlay ~40
Build and return branch overlay metadata: branch, head, merge-base, changed files, and pending packet IDs.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_capabilities ~44
Return an evidence-backed Kage memory-system capability audit across repo memory, collaboration/session proof, benchmarks, and dashboard/viewer readiness.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_capture ~138
Create a repo-local Kage memory packet immediately. Org/global promotion still requires explicit human review. Capture is rejected if every referenced path is missing from the repo; set allow_missing_paths to record anyway.
| Name | Type | Req | Description |
|---|---|---|---|
| allow_missing_paths | boolean | — | — |
| body | string | yes | — |
| graph_nodes | array | — | Code-graph node references (symbol/route/file) this memory is about. |
| paths | array | — | — |
| project_dir | string | yes | — |
| stack | array | — | — |
| summary | string | — | — |
| tags | array | — | — |
| title | string | yes | — |
| type | string | — | — |
No output schema declared.
No examples provided.
kage_cleanup_candidates ~54
Find conservative cleanup candidates from Kage's code graph. Reports unreferenced source files, unused exports, and internal-looking unused symbols with confidence and reasons; never auto-deletes.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_code_graph ~72
Query the source-derived codebase graph: files, symbols, imports, calls, routes, tests, package scripts. This is generated from code, not learned memory.
| Name | Type | Req | Description |
|---|---|---|---|
| json | boolean | — | — |
| limit | number | — | — |
| project_dir | string | yes | — |
| query | string | — | — |
No output schema declared.
No examples provided.
kage_code_index ~56
Write external code index artifacts consumed by the code graph. Prefers SCIP when scip-typescript and scip are installed, then falls back to the built-in LSP-compatible symbol index.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_compact ~89
Consolidate repo memory: prune dead citations, deprecate hard-stale packets, and surface near-duplicate clusters to merge (via kage_supersede). Defaults to a dry run; pass dry_run=false to apply pruning/deprecation. Duplicate merging stays an agent decision — no hosted LLM is used.
| Name | Type | Req | Description |
|---|---|---|---|
| dry_run | boolean | — | — |
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_conflicts ~53
List repo-local memory packet pairs that contradict each other (same cited path, same subject, opposing claim). Resolve each with kage_supersede, or keep both intentionally.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_context ~175
Primary kage entry point. Validates memory health, recalls relevant packets, and queries both the code graph and knowledge graph — all in one call. Call this at the start of every task instead of calling kage_validate, kage_recall, kage_code_graph, and kage_graph separately.
| Name | Type | Req | Description |
|---|---|---|---|
| changed_files | array | — | Optional changed files for pre-edit or PR risk context |
| limit | number | — | Max memory packets to return (default 5) |
| project_dir | string | yes | Absolute path to the project root |
| query | string | yes | The task or question — used for both memory recall and code graph search |
| session_id | string | — | Optional active agent session id for memory reconciliation |
| targets | array | — | Optional files the agent may edit or explain; used for risk context |
No output schema declared.
No examples provided.
kage_context_slot_delete ~35
Delete a repo-local context slot by label.
| Name | Type | Req | Description |
|---|---|---|---|
| label | string | yes | — |
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_context_slot_set ~98
Create or update a repo-local pinned context slot. Use for durable, high-signal repo guidance that should always be included without loading all memory.
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | — |
| description | string | — | — |
| label | string | yes | — |
| paths | array | — | — |
| pinned | boolean | — | — |
| project_dir | string | yes | — |
| size_limit | number | — | — |
| tags | array | — | — |
No output schema declared.
No examples provided.
kage_context_slots ~46
List repo-local pinned context slots. Pinned slots are small, reviewable facts that Kage includes in recall/context before task-specific memory.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_contributors ~48
Build local contributor profiles from git history: commits, recent activity, touched files, modules, ownership silos, hotspot ownership, and commit category mix.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_decisions ~60
Summarize Kage why-memory for a repo: decisions, gotchas, runbooks, conventions, code explanations, path coverage, weak/stale memory, and important code paths that still lack decision memory.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_dependency_path ~74
Find how two files are connected in Kage's source-derived code graph. Reports direct dependency direction, reverse impact direction, or undirected graph connection.
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | yes | Source file path or unique suffix |
| project_dir | string | yes | — |
| to | string | yes | Target file path or unique suffix |
No output schema declared.
No examples provided.
kage_distill ~48
Distill stored observations for one session into repo-local memory candidates. Org/global promotion still requires explicit human review.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
| session_id | string | yes | — |
No output schema declared.
No examples provided.
kage_docs_search ~109
Search this repo's OWN committed documentation (README, docs/**, *.md, common doc dirs — including any framework/API docs checked into the repo). BM25 over heading-anchored chunks from .agent_memory/indexes/docs-index.json. Returns ranked doc hits with doc_path, heading, line, and snippet. This indexes only files on disk in the project, never the internet.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | — | — |
| project_dir | string | yes | — |
| query | string | yes | — |
No output schema declared.
No examples provided.
kage_feedback ~50
Record usefulness feedback on an approved repo-local memory packet: helpful, wrong, or stale.
| Name | Type | Req | Description |
|---|---|---|---|
| kind | string | yes | — |
| packet_id | string | yes | — |
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_fetch ~90
Fetch the full content of a specific node from the kage knowledge graph. Use after kage_search to get the complete fix, pattern, or decision.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | The domain the node belongs to, e.g. 'database', 'auth', 'payments' |
| node_id | string | yes | The node slug, e.g. 'prisma-serverless-connection-exhaustion' |
No output schema declared.
No examples provided.
kage_graph ~55
Query the repo-local Kage knowledge graph. Returns typed, evidence-backed graph facts from entities, edges, and episodes.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | — | — |
| project_dir | string | yes | — |
| query | string | yes | — |
No output schema declared.
No examples provided.
kage_graph_insights ~54
Return deterministic code graph intelligence: central files, dependency cycles, import communities, and short entry flows. Use to orient agents before broad architectural edits.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | Absolute path to the project root |
No output schema declared.
No examples provided.
kage_graph_registry ~73
Build a signed graph-registry manifest for generated memory graph, code graph, indexes, metrics, audit, inbox, source packet IDs, packet hashes, and repo git state.
| Name | Type | Req | Description |
|---|---|---|---|
| full | boolean | — | Force a full code graph rebuild instead of reusing unchanged graph artifacts. |
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_graph_visual ~42
Export the repo-local Kage knowledge graph as Mermaid flowchart text for visual inspection.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | — | — |
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_inbox ~44
Return an actionable memory review inbox: pending packets, stale packets, duplicates, missing structured context, validation issues, and recommended actions.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_install_policy ~37
Install or update the repo AGENTS.md policy that tells coding agents to use Kage automatically.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_learn ~194
Capture an actual reusable learning from the current session as repo-local memory. Prefer this over diff proposal when the agent knows what was learned. Capture is rejected if every referenced path is missing from the repo; set allow_missing_paths to record anyway (e.g. a file you are about to create).
| Name | Type | Req | Description |
|---|---|---|---|
| allow_missing_paths | boolean | — | — |
| discovery_tokens | number | — | Approximate token cost of producing this knowledge (exploration + reasoning). Stored on the packet so recall receipts can report replay value; a conservative per-type default is estimated when omitte… |
| evidence | string | — | — |
| graph_nodes | array | — | — |
| learning | string | yes | — |
| paths | array | — | — |
| project_dir | string | yes | — |
| stack | array | — | — |
| tags | array | — | — |
| title | string | — | — |
| type | string | — | — |
| verified_by | string | — | — |
No output schema declared.
No examples provided.
kage_learning_ledger ~61
Return an agent-facing ledger that classifies observed session events into save, ignore, needs-evidence, or already-distilled memory decisions.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | — | — |
| project_dir | string | yes | — |
| session_id | string | — | — |
No output schema declared.
No examples provided.
kage_list_domains ~33
List all domains in the kage knowledge graph with their node counts and top tags. Use to orient before searching.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
kage_memory_access ~45
Report which repo-local memory packets have actually been recalled recently. This uses local ignored access telemetry and does not mutate shareable packet files.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_memory_audit ~53
Return the repo-local audit trail for explicit memory mutations: capture, feedback, review, supersede, deprecate, and delete.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | — | — |
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_memory_handoff ~45
Return a teammate/agent handoff queue by combining memory inbox, lifecycle, audit, timeline, and lineage into concrete next actions.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_memory_lifecycle ~50
Return a repo-local memory lifecycle report: healthy, hot, cold, stale, disputed, ungrounded, pending, generated, and concrete review actions.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_memory_lineage ~39
Return memory supersession chains so agents can use current replacement packets and keep retired memory as audit history.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_memory_reconcile ~65
Return agent-owned memory reconciliation work when source files linked to existing memory changed. Agents must update, supersede, or mark stale memory before final handoff.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | — | — |
| project_dir | string | yes | — |
| session_id | string | — | — |
No output schema declared.
No examples provided.
kage_memory_timeline ~49
Return recent repo-memory activity for teammate handoff: added, updated, pending, and deprecated packets with review actions.
| Name | Type | Req | Description |
|---|---|---|---|
| days | number | — | — |
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_metrics ~51
Return concise Kage adoption and quality metrics: code graph counts, language/parser coverage, memory graph evidence coverage, pending/approved packets, validation state, and readiness score.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_module_health ~44
Return local module health scorecards from Kage's code graph, test signals, cleanup candidates, git churn, and ownership concentration.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_observe ~124
Store an automatic local observation event from an agent session. Observations are privacy-scanned, deduplicated, and never published automatically.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | — | — |
| command | string | — | — |
| exit_code | number | — | — |
| metadata | object | — | — |
| path | string | — | — |
| project_dir | string | yes | — |
| session_id | string | — | — |
| summary | string | — | — |
| text | string | — | — |
| timestamp | string | — | — |
| tool | string | — | — |
| type | string | yes | — |
No output schema declared.
No examples provided.
kage_pr_check ~59
Check whether repo memory, code graph, memory graph, and stale-memory state are ready for merge. Leads with a human summary of team memories invalidated by the current change — relay it to the developer.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_pr_summarize ~49
Create a PR/branch memory summary from local git diff metadata and write repo-local change memory. Use when a branch is ready to hand off.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_profile ~50
Return a compact project profile for agent orientation: repo totals, languages, top code+memory concepts, key files, memory focus, run commands, and next actions.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_propose_from_diff ~50
Create or update a branch review summary and repo-local change-memory packet from local git status and diff metadata. Org/global promotion still requires explicit human review.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_quality ~45
Return memory quality metrics: useful memory ratio, duplicate burden, stale/wrong feedback, evidence coverage, path grounding, and review queue size.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_recall ~142
Recall repo-local Kage memory from .agent_memory packets. Returns an agent-ready context block plus ranked packet summaries.
| Name | Type | Req | Description |
|---|---|---|---|
| docs | boolean | — | If true, append a Docs section (<=3 hits) drawn from this repo's own committed documentation. |
| embeddings | boolean | — | — |
| explain | boolean | — | — |
| json | boolean | — | — |
| limit | number | — | — |
| max_context_tokens | number | — | — |
| project_dir | string | yes | — |
| query | string | yes | — |
| structural_hops | number | — | If >0, append a bounded N-hop code-graph blast radius seeded from the recalled memory's files. |
No output schema declared.
No examples provided.
kage_refresh ~106
Rebuild repo indexes, code graph, memory graph, metrics, and stale-memory metadata. Agents should run this after meaningful file/content changes before PR checks; push-only or same-tree commits do not need another refresh. On non-default git branches metadata-only packet rewrites are skipped (quiet refresh) to avoid merge conflicts; pass force to persist them anyway.
| Name | Type | Req | Description |
|---|---|---|---|
| force | boolean | — | Persist packet metadata rewrites even on a non-default branch |
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_registry_recommend ~44
Recommend documentation packs, skills, and optional MCPs for this repo based on its package metadata. Recommendations never install anything automatically.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.
kage_review_artifact ~35
Create a Markdown review artifact summarizing pending memory packets for PR or human review.
| Name | Type | Req | Description |
|---|---|---|---|
| project_dir | string | yes | — |
No output schema declared.
No examples provided.