MCP Tools Reference

CodeGraph exposes 149 built-in MCP tools from src/mcp/tools/. This page is generated from the current source tree so the tool list, module grouping, and parameter summaries stay aligned with the implementation.

Each section below lists the tools defined in one module. Use this page as a quick contract reference; detailed behavior is still best understood from the matching source file and integration guides.

Audit and Scope Tools

Source module: src/mcp/tools/audit_diff.py

codegraph_analysis_status

Show when the last full scan happened and whether a new one is due.

Parameters: project (‘’)

codegraph_audit_diff

Diff warnings between two analysis runs (GOST R 71207-2024, section 8.9).

Parameters: run1 (‘’), run2 (‘’), hide_fp (False), compare_last (False), project (‘’)

codegraph_audit_progress

Aggregate new/fixed/remaining findings for a reporting period.

Parameters: from_date (required), to_date (required), project (‘’)

codegraph_scopes_check

Check analysis scope for a file (GOST R 71207-2024, section 5.4).

Parameters: file_path (‘’), severity (‘medium’), rule_id (‘’)

Call Graph Tools

Source module: src/mcp/tools/callgraph.py

codegraph_find_callees

Find all methods called by the given method (forward call graph traversal).

Parameters: method_name (required), max_depth (None), direct_only (False)

codegraph_find_callers

Find all methods that call the given method (reverse call graph traversal).

Parameters: method_name (required), max_depth (None), direct_only (False)

codegraph_impact

Analyze the blast radius of changes to a method.

Parameters: method_name (required)

CI and Watch Tools

Source module: src/mcp/tools/ci_ops.py

codegraph_ci_exec

Execute CI-related CPG operations.

Parameters: action (‘status’), db_path (‘’)

codegraph_hooks

Introspect CodeGraph webhook and hook configuration.

Parameters: action (‘list’)

codegraph_watch

Monitor CPG database for changes and incremental updates.

Parameters: action (‘status’)

CLI Bridge Tools

Source module: src/mcp/tools/cli_bridge.py

codegraph_cli_bridge

Introspect CodeGraph CLI commands (read-only, does not execute).

Parameters: action (‘list’)

Compliance Tools

Source module: src/mcp/tools/compliance.py

codegraph_compliance

Check codebase compliance against coding standards and regulations.

Parameters: query (‘Check compliance’), standard (‘’)

Compliance Tools

Source module: src/mcp/tools/compliance_57580.py

codegraph_compliance_maturity

Assess process maturity per GOST R 57580.2.

Parameters: project (‘’)

codegraph_compliance_report_57580

Generate GOST R 57580.3 compliance report.

Parameters: project (‘’), type (‘executive’), format (‘json’), language (‘ru’)

codegraph_compliance_report_delta

Compare two GOST R 57580.3 reports (delta analysis).

Parameters: old_id (‘’), new_id (‘’)

Compliance Tools

Source module: src/mcp/tools/compliance_gost.py

codegraph_compliance_gost

Evaluate GOST R 56939-2024 compliance for the active project.

Parameters: action (‘evaluate’), format (‘markdown’), language (‘ru’), process_filter (‘’), include_traceability (False), report_id_old (‘’), report_id_new (‘’)

Compose Tools

Source module: src/mcp/tools/compose.py

codegraph_compose

Run a composite analysis workflow combining multiple scenarios.

Parameters: query (required), orchestrator (‘s18’), language (‘en’), scenario (‘’)

Context and Session Tools

Source module: src/mcp/tools/context.py

codegraph_context_accept_handoff

Accept ownership transfer for an explicit OpenViking-backed agent context session.

Parameters: session_id (required), agent_id (‘mcp-agent’)

codegraph_context_archive_session

Archive an explicit OpenViking-backed agent context session.

Parameters: session_id (required), agent_id (‘mcp-agent’)

codegraph_context_browse

Browse the OpenViking URI tree for an explicit agent session.

Parameters: session_id (required), uri (required), level_limit (3), node_limit (200), agent_id (‘mcp-agent’)

codegraph_context_close_session

Close an explicit OpenViking-backed agent context session.

Parameters: session_id (required), agent_id (‘mcp-agent’)

codegraph_context_commit

Trigger background memory extraction for an explicit agent session.

Parameters: session_id (required), agent_id (‘mcp-agent’)

codegraph_context_commit_status

Read background memory extraction status for an explicit agent session.

Parameters: session_id (required), agent_id (‘mcp-agent’)

codegraph_context_fetch

Fetch semantic context candidates for an explicit agent session.

Parameters: session_id (required), query (required), target_uri (‘’), limit (5), include_needs_review (False), agent_id (‘mcp-agent’)

codegraph_context_list_knowledge

List authoritative OpenViking knowledge lifecycle records for the active project.

Parameters: lifecycle_state (‘’), provenance_type (‘’), agent_id (‘mcp-agent’)

codegraph_context_list_sessions

List authoritative explicit context sessions for the current MCP owner.

Parameters: agent_id (‘mcp-agent’), include_inactive (False), limit (50)

codegraph_context_mark_knowledge_deprecated

Manually mark one knowledge governance record as deprecated.

Parameters: knowledge_uri (required), reason (required), agent_id (‘mcp-agent’)

codegraph_context_open_session

Open or reconnect an explicit OpenViking-backed agent context session.

Parameters: session_id (‘’), agent_id (‘mcp-agent’)

codegraph_context_read

Read a specific OpenViking URI for an explicit agent session.

Parameters: session_id (required), uri (required), level (‘read’), agent_id (‘mcp-agent’)

codegraph_context_record_used_context

Persist used-context trace for an explicit agent session.

Parameters: session_id (required), items_json (‘[]’), agent_id (‘mcp-agent’)

codegraph_context_reject_handoff

Reject ownership transfer for an explicit OpenViking-backed agent context session.

Parameters: session_id (required), agent_id (‘mcp-agent’)

codegraph_context_revoke_share

Revoke explicit session sharing for one participant.

Parameters: session_id (required), target_user_id (required), agent_id (‘mcp-agent’)

codegraph_context_session_metadata

Return authoritative metadata for one explicit context session.

Parameters: session_id (required), agent_id (‘mcp-agent’)

codegraph_context_share_session

Share or hand off an explicit OpenViking-backed agent context session.

Parameters: session_id (required), target_user_id (required), access_mode (‘read_only’), target_agent_id (‘’), detail (‘’), agent_id (‘mcp-agent’)

Return one fused payload of OpenViking context and graph evidence.

Parameters: query (required), limit (10), target_uri (‘’), session_id (‘’), include_graph (True), include_needs_review (False)

codegraph_project_context

Get full context of the active CodeGraph project.

Parameters: none

codegraph_project_context_status

Return the active context-backend status for the current project scope.

Parameters: none

codegraph_project_context_sync_status

Return project-level OpenViking sync status for the active project.

Parameters: none

codegraph_skill_list

List curated CodeGraph skills visible to external agents.

Parameters: category (‘’), interface (‘mcp’), include_needs_review (False)

Cross-Repository Tools

Source module: src/mcp/tools/cross_repo.py

codegraph_cross_repo

Analyze cross-repository dependencies and interactions.

Parameters: query (‘Analyze cross-repository dependencies’), analysis_type (‘full’)

Dashboard V2 Tools

Source module: src/mcp/tools/dashboard_v2.py

codegraph_dashboard_audit_report

Run freshness-orchestrated audit report for a project.

Parameters: name (‘’), language (‘ru’), force_refresh (False)

codegraph_dashboard_compare

Compare 2-10 projects across 12 audit quality dimensions.

Parameters: projects (‘’), dimensions (‘’)

codegraph_dashboard_compare_periods

Compare two adjacent snapshot-backed periods for a project.

Parameters: name (‘’), baseline_period (‘30d’), comparison_period (‘7d’)

codegraph_dashboard_compliance_heatmap

Get compliance heatmap — projects x processes matrix.

Parameters: group_id (‘’), standard (‘gost-56939’)

codegraph_dashboard_drilldown

Drill down from a project/category aggregate to findings and source locations.

Parameters: name (‘’), category (‘’), limit (50)

codegraph_dashboard_engineering_bootstrap

Get bootstrap bundle for an engineering integration profile.

Parameters: profile_id (‘github-sentry’), project_name (‘’)

codegraph_dashboard_engineering_dora

Get project DORA metrics with explainable raw events.

Parameters: name (‘’), window (‘30d’)

codegraph_dashboard_engineering_dora_aggregates

Get engineering DORA aggregates for project/team/portfolio scopes.

Parameters: group_by (‘project’), window (‘30d’), group_id (‘’), team (‘’), limit (20)

codegraph_dashboard_engineering_ingest

Import provider-fed engineering events for a supported profile.

Parameters: profile_id (‘github-sentry’), payload_json (‘{}’)

codegraph_dashboard_engineering_integration_profiles

List engineering integration profiles or fetch a single profile contract.

Parameters: profile_id (‘’)

codegraph_dashboard_engineering_manual_import

Import canonical engineering events via manual JSON payload.

Parameters: profile_id (‘manual-json’), payload_json (‘{}’)

codegraph_dashboard_engineering_release_health

Get engineering release health for a specific release.

Parameters: name (‘’), release_id (‘’)

codegraph_dashboard_engineering_release_issues

Get runtime issue drill-down for a release.

Parameters: name (‘’), release_id (‘’), limit (50)

codegraph_dashboard_engineering_releases

List canonical engineering release records for a project.

Parameters: name (‘’), limit (20)

codegraph_dashboard_gocpg_command_log

List audited GoCPG command records for operators.

Parameters: project_name (‘’), correlation_id (‘’), caller_surface (‘’), command_name (‘’), status (‘’), limit (0)

codegraph_dashboard_metrics

Get canonical dashboard metric samples for Grafana-style dashboards.

Parameters: group_id (‘’), organization (‘’), team (‘’), environment (‘’), criticality (‘’), language (‘’), domain (‘’), service_type (‘’), min_risk (‘’), period (‘live’)

codegraph_dashboard_notifications_bootstrap

Bootstrap a project notification runtime and backfill real records.

Parameters: user_id (‘mcp-user’), project_name (‘’), channel (‘’), delivery_mode (‘’), events_csv (‘’), minimum_severity (‘high’), include_sensitive_details (False), create_subscription (True)

codegraph_dashboard_notifications_create

Create a notification subscription using canonical notification entities.

Parameters: user_id (‘mcp-user’), channel (‘’), events_csv (‘risk_change,release_gate_fail’), scope (‘portfolio’), project_name (‘’), saved_view_id (‘’), delivery_mode (‘immediate’), minimum_severity (‘’), include_sensitive_details (False), schedule_json (‘’), quiet_hours_json (‘’), enabled (True)

codegraph_dashboard_notifications_delete

Delete a notification subscription.

Parameters: subscription_id (‘’), user_id (‘mcp-user’)

codegraph_dashboard_notifications_deliveries

List notification deliveries using the canonical delivery contract.

Parameters: user_id (‘mcp-user’), limit (100), status (‘’), channel (‘’), event_type (‘’), project_name (‘’), record_type (‘all’)

codegraph_dashboard_notifications_event_catalog

Get the versioned notification event catalog.

Parameters: none

codegraph_dashboard_notifications_list

List notification subscriptions for a user.

Parameters: user_id (‘mcp-user’)

codegraph_dashboard_notifications_pending

List pending notification deliveries.

Parameters: user_id (‘mcp-user’), limit (100), channel (‘’)

codegraph_dashboard_notifications_process_pending

Process due pending notification deliveries.

Parameters: none

codegraph_dashboard_notifications_summary

Get notification runtime summary for a user.

Parameters: user_id (‘mcp-user’)

codegraph_dashboard_notifications_test

Send a dry-run notification and return the same preview contract as REST.

Parameters: user_id (‘mcp-user’), channel (‘’), events_csv (‘risk_change’), scope (‘portfolio’), project_name (‘’), saved_view_id (‘’), delivery_mode (‘immediate’), sample_event_type (‘’), message (‘’), severity (‘’), minimum_severity (‘’), include_sensitive_details (False), schedule_json (‘’), quiet_hours_json (‘’), enabled (True)

codegraph_dashboard_notifications_update

Update an existing notification subscription.

Parameters: subscription_id (‘’), user_id (‘mcp-user’), channel (‘’), events_csv (‘’), scope (‘’), project_name (‘’), saved_view_id (‘’), delivery_mode (‘’), minimum_severity (‘’), include_sensitive_details (False), schedule_json (‘’), quiet_hours_json (‘’), enabled (True)

codegraph_dashboard_portfolio

Get portfolio overview — aggregated health across all registered projects.

Parameters: group_id (‘’), organization (‘’), team (‘’), environment (‘’), criticality (‘’), language (‘’), domain (‘’), service_type (‘’), period (‘live’)

codegraph_dashboard_project

Get health score for a single project.

Parameters: name (‘’)

codegraph_dashboard_red_zone

Get red zone items — critical issues requiring immediate attention.

Parameters: group_id (‘’), organization (‘’), team (‘’), environment (‘’), criticality (‘’), service_type (‘’), severity (‘critical,high’), category (‘’)

codegraph_dashboard_release_compare

Compare two release gate runs and attach snapshot deltas where available.

Parameters: name (‘’), from_run_id (‘’), to_run_id (‘’)

codegraph_dashboard_saved_views

Manage persistent dashboard saved views.

Parameters: action (‘list’), user_id (‘mcp-user’), view_id (‘’), name (‘’), scope (‘portfolio’), filters_json (‘{}’), projects (‘’), view_format (‘json’)

codegraph_dashboard_snapshot_create

Create a manual snapshot using the same canonical contracts as REST/CLI.

Parameters: scope (‘project’), project_name (‘’), group_id (‘’), reason (‘’), trigger_source (‘mcp’), analyzer_version (‘’), rule_version (‘’), source_ref (‘’), immutable (False), retention_class (‘standard’)

codegraph_dashboard_snapshot_export

Export a snapshot or snapshot compare report.

Parameters: snapshot_id (‘’), baseline_snapshot_id (‘’), format (‘json’), language (‘ru’), include_drilldown (False), drilldown_limit (3)

codegraph_dashboard_snapshot_get

Get snapshot metadata by ID.

Parameters: snapshot_id (‘’)

codegraph_dashboard_snapshot_policy

Get immutable snapshot governance policy.

Parameters: none

codegraph_dashboard_snapshots_compare

Compare two snapshots by IDs.

Parameters: from_snapshot_id (‘’), to_snapshot_id (‘’), include_drilldown (False), drilldown_limit (3)

codegraph_dashboard_snapshots_list

List materialized dashboard snapshots by scope.

Parameters: scope (‘project’), project_name (‘’), group_id (‘’), limit (20)

Get historical trends for a project.

Parameters: name (‘’), period (‘30d’)

Diff Context Tools

Source module: src/mcp/tools/diff_context.py

codegraph_diff_context

Analyze the impact of code changes using the CPG.

Parameters: base_ref (‘HEAD~1’), changed_files (‘’)

Docs Sync Tools

Source module: src/mcp/tools/docs_sync.py

codegraph_docs_sync

Check documentation coverage across all CodeGraph interfaces.

Parameters: interfaces (‘’), language (‘en’), output_format (‘markdown’)

Dynamic Tools

Source module: src/mcp/tools/dynamic.py

codegraph_dynamic_correlate

Correlate static and dynamic findings.

Parameters: static_findings_json (‘’), dynamic_run_id (‘’), dynamic_findings_json (‘’), line_tolerance (10)

codegraph_dynamic_fuzz_targets

Generate prioritized fuzz targets from CPG.

Parameters: language (‘’), max_targets (50), min_priority (0.3)

codegraph_dynamic_import

Import dynamic analysis results (SARIF, Valgrind, *SAN).

Parameters: input_path (‘’), format (‘sarif’), content (‘’), project (‘’), commit (‘’)

codegraph_dynamic_runs

List dynamic analysis runs.

Parameters: project (‘’), limit (20)

Edit Preview Tools

Source module: src/mcp/tools/edit_preview.py

codegraph_edit_preview

Preview AST information for a code target before editing.

Parameters: file_path (required), target_name (required), target_type (‘function’)

Enterprise Tools

Source module: src/mcp/tools/enterprise.py

codegraph_rbac

Inspect RBAC roles and permissions.

Parameters: action (‘roles’), role (‘’)

codegraph_siem

Manage SIEM integration for security event dispatching.

Parameters: action (‘status’)

codegraph_vault

Manage HashiCorp Vault integration for secret management.

Parameters: action (‘status’)

Explain Tools

Source module: src/mcp/tools/explain.py

codegraph_diagram

Generate architecture diagrams: call graph, file dependency, or component.

Parameters: diagram_type (‘callgraph’), target (‘’)

codegraph_explain

Get comprehensive analysis of a method.

Parameters: method_name (required)

File Context Tools

Source module: src/mcp/tools/file_context.py

codegraph_file_context

Get CPG analysis context for a specific file.

Parameters: file_path (required)

Gitverse Tools

Source module: src/mcp/tools/gitverse.py

codegraph_gv_commit_status

Update commit status in GitVerse.

Parameters: project_id (required), commit_sha (required), state (required), token (required), url (‘https://gitverse.ru/api/v1’)

codegraph_gv_pr_info

Get GitVerse pull request information and diff.

Parameters: project_id (required), pr_number (required), token (required), url (‘https://gitverse.ru/api/v1’)

codegraph_gv_review

Review a GitVerse pull request using CPG analysis.

Parameters: project_id (required), pr_number (required), token (required), url (‘https://gitverse.ru/api/v1’), task_description (‘’)

codegraph_gv_summary

Generate a summary for a GitVerse pull request.

Parameters: diff_content (required), title (‘’), description (‘’)

Hotspot and Risk Tools

Source module: src/mcp/tools/hotspots.py

codegraph_hotspots

Find code hotspots ranked by a specific metric.

Parameters: metric (‘complexity’), limit (None)

Hypothesis Tools

Source module: src/mcp/tools/hypothesis.py

codegraph_hypothesis

Run hypothesis-driven security analysis on CPG.

Parameters: action (required), language (‘C’), max_hypotheses (None), min_priority (None), category (‘’), human_language (‘en’)

Infra Tools

Source module: src/mcp/tools/infra.py

codegraph_config

Introspect CodeGraph configuration (read-only).

Parameters: section (‘summary’)

codegraph_domain

Manage domain plugins for language-specific analysis.

Parameters: action (‘list’), domain_name (‘’)

codegraph_import_status

Check project import status and supported languages.

Parameters: action (‘status’)

Issues Tools

Source module: src/mcp/tools/issues.py

codegraph_issues_bulk_create

Create issues from a list of findings.

Parameters: findings (‘[]’)

codegraph_issues_create

Create an issue in the configured tracker from a finding.

Parameters: title (‘’), description (‘’), severity (‘medium’), finding_id (‘’), cwe_id (‘’), file_path (‘’), line (0)

codegraph_issues_status

Get current status of an issue from the tracker.

Parameters: issue_id (‘’)

codegraph_issues_sync

Bidirectional sync between CodeGraph findings and issue tracker.

Parameters: findings (‘[]’), tracked_issues (‘{}’), close_on_fix (True), min_severity (‘high’)

Patterns Tools

Source module: src/mcp/tools/patterns.py

codegraph_pattern_findings

Query persisted structural pattern findings from the CPG database.

Parameters: rule_id (None), severity (None), filename (None), category (None), limit (None)

codegraph_pattern_fix

Apply structural pattern fixes (autofix via SSR rules).

Parameters: rule_id (None), dry_run (True)

codegraph_pattern_generate

Generate and validate a YAML pattern rule from a natural language description.

Parameters: description (required), language (required), with_fix (True)

Search for structural code patterns using AST-based matching.

Parameters: pattern (required), language (required), max_results (None)

codegraph_pattern_stats

Get aggregated statistics for structural pattern findings.

Parameters: none

codegraph_pattern_test

Test a YAML pattern rule against a code snippet.

Parameters: rule_yaml (required), code_snippet (required), language (required)

Projects Tools

Source module: src/mcp/tools/projects.py

codegraph_project_delete

Delete a project from the registry.

Parameters: name (required), delete_data (False)

codegraph_project_list

List all registered projects with their status.

Parameters: none

codegraph_project_rename

Rename a project.

Parameters: old_name (required), new_name (required)

codegraph_project_switch

Switch active project by name.

Parameters: name (required)

Query Tools

Source module: src/mcp/tools/query.py

codegraph_query

Execute a SQL query on the Code Property Graph (CPG) database.

Parameters: sql (required), limit (None)

Reindex Tools

Source module: src/mcp/tools/reindex.py

codegraph_reindex

Manage vector search collections for the active project.

Parameters: action (‘status’), collection (‘’), replace (False), language (‘en’), sections (‘’)

Release Gate Tools

Source module: src/mcp/tools/release_gate.py

codegraph_release_gate_check

Run release gate checks for the active project.

Parameters: profile (‘standard’), version (‘’), format (‘json’), language (‘ru’)

codegraph_release_gate_profiles

List available release gate profiles.

Parameters: none

codegraph_release_gate_suppress

Manage release gate suppressions (accepted risks).

Parameters: action (‘list’), finding_id (‘’), reason (‘’), expires_at (‘’), project (‘’)

Risk Tools

Source module: src/mcp/tools/risk.py

codegraph_risk_assess

Risk assessment using SVR x STP matrix per GOST R 57580.3-2022.

Parameters: project (‘’), format (‘json’), language (‘ru’)

codegraph_risk_checklist

Generate self-assessment checklist per GOST R 57580.3.

Parameters: project (‘’), level (2)

codegraph_risk_dashboard

Full risk dashboard: KIR values + KPUR status + alerts.

Parameters: project (‘’)

codegraph_risk_detail

Detailed risk assessment for a specific finding.

Parameters: finding_id (‘’), project (‘’)

codegraph_risk_events

Get classified risk events per GOST R 57580.3 appendices A-D.

Parameters: project (‘’), classification (‘’)

codegraph_risk_kir

Calculate Key Risk Indicators (KIR) from CPG data.

Parameters: project (‘’), format (‘json’)

codegraph_risk_kpur

Calculate Control Risk Level Indicators (KPUR) by 3 groups.

Parameters: project (‘’)

codegraph_risk_matrix

Risk matrix 5x5 (SVR x STP) showing finding distribution.

Parameters: project (‘’)

codegraph_risk_threat_model_57580

Generate GOST R 57580.3 threat model.

Parameters: project (‘’), format (‘json’), language (‘ru’)

Sca Tools

Source module: src/mcp/tools/sca.py

codegraph_sbom_audit

Audit project dependencies for known vulnerabilities.

Parameters: sources (‘osv’), fail_on (‘’), format (‘json’), project (‘’)

codegraph_sbom_generate

Generate SBOM (Software Bill of Materials) for a project.

Parameters: format (‘cyclonedx’), project (‘’)

codegraph_sbom_sync

Sync local vulnerability cache.

Parameters: sources (‘osv,nvd,bdu_fstec’), force (False)

Search Tools

Source module: src/mcp/tools/search.py

Search the codebase using hybrid semantic + graph search.

Parameters: query (required), limit (None)

Security Tools

Source module: src/mcp/tools/security.py

codegraph_autofix

Generate automated fix suggestions for security vulnerabilities.

Parameters: method_name (required), cwe (‘’)

codegraph_taint_analysis

Run taint analysis to find data flow paths from sources to sinks.

Parameters: method_name (required), source_category (‘user_input’), sink_category (‘sql’)

Sourcecraft Tools

Source module: src/mcp/tools/sourcecraft.py

codegraph_sc_commit_status

Update commit pipeline status in SourceCraft.

Parameters: project_id (required), commit_sha (required), state (required), token (required), url (‘https://api.sourcecraft.yandex.cloud’)

codegraph_sc_completion

Get code completion context for SourceCraft IDE.

Parameters: file_path (required), line (required), prefix (‘’)

codegraph_sc_mr_info

Get SourceCraft merge request information and diff.

Parameters: project_id (required), mr_iid (required), token (required), url (‘https://api.sourcecraft.yandex.cloud’)

codegraph_sc_navigate

Navigate to symbol definition, references, and call hierarchy.

Parameters: symbol (required), file_path (‘’)

codegraph_sc_review

Review a SourceCraft merge request using CPG analysis.

Parameters: project_id (required), mr_iid (required), token (required), url (‘https://api.sourcecraft.yandex.cloud’), task_description (‘’)

codegraph_sc_suggestions

Get code context suggestions at cursor position (SourceCraft IDE).

Parameters: file_path (required), line (required), column (0)

codegraph_sc_summary

Generate a summary for a SourceCraft merge request.

Parameters: diff_content (required), title (‘’), description (‘’)

codegraph_sc_test_hints

Get test generation hints for a method (SourceCraft IDE).

Parameters: method_name (required), file_path (‘’)

Standards Check Tools

Source module: src/mcp/tools/standards_check.py

codegraph_standards_check

Run coding standards check on the codebase.

Parameters: query (‘Check coding standards’), category (‘’), severity (‘’)

Supply Chain Tools

Source module: src/mcp/tools/supply_chain.py

codegraph_supply_chain_scan

Scan supply chain for security risks: typosquatting, low trust, integrity issues.

Parameters: format (‘json’), fail_on (‘’), language (‘ru’), project (‘’)

codegraph_supply_chain_trust

Assess trust scores for project dependencies.

Parameters: min_score (0.0), project (‘’)

Tech Debt Tools

Source module: src/mcp/tools/tech_debt.py

codegraph_tech_debt

Get technical debt summary: dead methods, complexity hotspots, quality score.

Parameters: none

Threat Model Tools

Source module: src/mcp/tools/threat_model.py

codegraph_threat_model_dfd

Generate Data Flow Diagram from project CPG.

Parameters: format (‘mermaid’)

codegraph_threat_model_generate

Generate STRIDE threat model from project CPG.

Parameters: min_severity (‘low’), include_inferred (True), language (‘ru’), format (‘json’)