Six months ago, AI coding assistants read your codebase file-by-file — loading entire directories to understand a single function call. That approach burns tokens, misses architectural context, and fails at scale. Code intelligence MCP servers solve this by indexing your codebase into a queryable knowledge graph, giving AI agents structural understanding of every function, class, import, and dependency relationship.
This review covers code intelligence, codebase indexing, and code graph MCP servers — tools that parse source code into graph structures and expose them through MCP. For code quality linting, see Code Quality & Linting. For graph databases themselves, see Graph Database MCP Servers. For code security scanning, see Code Security.
Part of our Developer Tools MCP category. The headline finding: this category is exploding — it barely existed 6 months ago, and now has two servers above 10K stars (GitNexus at 28.9K, code-review-graph at 13K), enterprise offerings, and genuine architectural innovation. Every production server uses Tree-sitter for AST parsing, but they diverge sharply in how they store and query the resulting graphs.
The Leaders
abhigyanpatwari/GitNexus (Knowledge Graph Engine)
| Server | Stars | Language | License | Tools |
|---|---|---|---|---|
| GitNexus | 38,200 | TypeScript | PolyForm Noncommercial | 16 |
The dominant code intelligence MCP server — transforms repositories into interactive knowledge graphs with AI-native querying:
- Hybrid search — BM25 + semantic embeddings + reciprocal rank fusion for best-of-both-worlds retrieval
- Blast radius analysis — maps changed lines to affected processes with depth grouping and confidence scoring
- 16 MCP tools — 11 per-repo tools (search, impact analysis, change detection, Cypher queries) + 5 group-level tools for multi-repo service tracking
- Process-grouped execution flows — functional clusters via Leiden community detection
- Cross-repo contract extraction — tracks API contracts and matches consumers across repositories
- Auto-generates AGENTS.md and CLAUDE.md context files from detected code communities
- Dual deployment — CLI + MCP server for development, or fully in-browser via Tree-sitter WASM + LadybugDB WASM (handles ~5K files)
- Editor support — Claude Code (full: MCP + skills + hooks), Cursor, Codex, Windsurf, OpenCode
- Enterprise tier via akonlabs.com — PR review with blast radius, auto-reindexing, multi-repo unified graphs, priority language support
Install: npx gitnexus analyze to index, npx gitnexus setup to configure MCP. 3.3K forks.
v1.6.5 (Apr–May 2026): C++ scope-resolution migration completing the Ring 3 RFC #909 language ladder, a major C++ ADL V2 overhaul, incremental indexing for gitnexus analyze, and a batch of Docker/Windows/FTS reliability fixes — 61 commits from 23 contributors. v1.7.0 (Apr 23): TypeScript added to MIGRATED_LANGUAGES, enabling registry-primary call resolution by default (resolves a long-standing ambiguity in TypeScript import chains). GitNexus jumped ~9K stars in 26 days — the fastest growth we’ve tracked in this category.
Note: PolyForm Noncommercial license — free for personal/open-source use, commercial use requires the enterprise tier.
tirth8205/code-review-graph (Blast Radius Analysis)
| Server | Stars | Language | License | Tools |
|---|---|---|---|---|
| code-review-graph | 17,000 | Python | MIT | 34 |
Purpose-built for code review efficiency — parses codebases into AST-based graphs so AI reads only the files affected by a change:
- 6.8× fewer tokens on reviews — and up to 49× in monorepos (Next.js: 27,732 files → ~15 files reviewed)
- Blast radius analysis — traces every caller, dependent, and test affected by a change
- 34 MCP tools (was 28) — blast radius, semantic search, community detection, execution flow tracing, refactoring utilities, plus new graph analysis tools
- 23 languages plus Jupyter notebooks — Python, TypeScript/TSX, JavaScript, Vue, Svelte, Go, Rust, Java, Scala, C#, Ruby, Kotlin, Swift, PHP, Solidity, C/C++, Dart, R, Perl, Lua, Zig, PowerShell, Julia
- Leiden community detection — identifies functional clusters in the codebase
- Auto-updating — hooks on file edits and git commits keep the graph current
- Optional vector embeddings — sentence-transformers, Google Gemini, or OpenAI-compatible endpoints
- Zero external dependencies — SQLite storage in
.code-review-graph/directory - Auto-detects platform — Codex, Claude Code, Cursor, Windsurf, Zed, Continue
Incremental re-parsing completes in under 2 seconds for 2,900-file projects. MIT license makes it freely usable in commercial projects.
Major release (May 2026): 15 new capabilities across 6 community PRs. New MCP tools: hub_nodes (find the most-connected nodes by in+out degree), bridge_nodes (find architectural chokepoints via betweenness centrality), knowledge_gap (identify structural weaknesses — isolated nodes, thin communities, untested hotspots), and surprise_score (composite scoring for unexpected architectural coupling). New export formats: graphml, cypher, obsidian, SVG for Gephi and Neo4j. Graph diff to compare graph snapshots over time. Visualization with node size by degree and community-legend toggles. Token benchmarking built in.
zilliztech/claude-context (Vector Search)
| Server | Stars | Language | License | Tools |
|---|---|---|---|---|
| claude-context | 9,800 | TypeScript | MIT | 4 |
A fundamentally different approach — instead of building knowledge graphs, Claude Context uses vector embeddings and hybrid search to retrieve semantically relevant code:
- AST-based chunking — intelligently segments code at function/class boundaries, not arbitrary line counts
- Hybrid search — combines BM25 keyword matching with dense vector similarity
- ~40% token reduction while maintaining retrieval quality
- 4 focused tools —
index_codebase,search_code,clear_index,get_indexing_status - Backed by Zilliz — the company behind Milvus, the open-source vector database
- Broad agent support — Claude Code, Cursor, VS Code, Gemini CLI, and 10+ other platforms
Trade-off: Requires an OpenAI API key (for embeddings) and Zilliz Cloud account (free tier available). This is the only major code intelligence server with external cloud dependencies — every other option runs fully locally. The payoff is semantic understanding: you can search by concept (“error handling for database connections”) rather than just keywords.
Install: claude mcp add claude-context with environment variables, or configure manually.
Established Players
CodeGraphContext/CodeGraphContext (Graph Database Flexibility)
| Server | Stars | Language | License | Tools |
|---|---|---|---|---|
| CodeGraphContext | 3,200 | Python | MIT | Multiple |
One of the earliest code graph MCP servers, now with three graph database backends:
- KùzuDB — Windows native default, embedded
- FalkorDB Lite — Unix default when Python 3.12+ available
- Neo4j — enterprise/remote option via Docker
- 14 languages — Python, JavaScript, TypeScript, Java, C/C++, C#, Go, Rust, Ruby, PHP, Swift, Kotlin, Dart, Perl
- Live file watching — automatic re-indexing on code changes
- Pre-indexed bundles —
.cgcformat for sharing indexed repositories - Interactive visualization — knowledge graph rendering with side panels and search
- Dual mode — CLI toolkit (no AI needed) + MCP server for AI integration
- Python 3.10-3.14 support
Install: pip install codegraphcontext. 548 forks. The graph database flexibility is unique — you can start with embedded KùzuDB and scale to Neo4j for enterprise codebases.
VS Code extension (May 2026): The first stable CGC extension bridges VS Code and the CodeGraphContext engine with an interactive 2D call graph that visualizes function relationships (callers and callees) in a dynamic, force-directed graph.
DeusData/codebase-memory-mcp (Zero-Dependency Single Binary)
| Server | Stars | Language | License | Tools |
|---|---|---|---|---|
| codebase-memory-mcp | 2,400 | C | MIT | 14+ |
The performance champion — a single static binary with zero runtime dependencies:
- 155 languages via tree-sitter AST analysis with LSP-style hybrid type resolution for Go, C, C++ (was 66)
- Linux kernel benchmark — indexes 28M LOC / 75K files in 3 minutes
- Sub-ms query latency for structural lookups
- 99% token reduction — single static binary, no runtime overhead
- 14+ MCP tools —
index_repository,search_graph,trace_call_path,query_graph,get_architecture,detect_changes,manage_adr,semantic_query, and more - Cross-service HTTP route detection — matches API routes across microservices
- Git diff impact mapping — understands blast radius of recent changes
- Optional 3D visualization UI
- SQLite storage — in-memory during indexing, persisted locally
Install: one-line bash/PowerShell script downloads the binary. Works with 10+ coding agents (Claude Code, Gemini CLI, Zed, Aider, etc.). The pure C implementation explains the performance numbers — no garbage collector, no runtime overhead.
v0.6.0 major release (Apr 6, 2026): Vector-based semantic search via the new semantic_query tool, powered by Nomic nomic-embed-code embeddings (40K pretrained token vectors, 768d int8). Scoring uses an 11-signal combined system including TF-IDF, Reflective Random Indexing, API/Type/Decorator signatures, AST structural profiles, approximate data flow, Halstead-lite metrics, MinHash, module proximity, and graph diffusion. New SIMILAR_TO edges enable structural near-clone detection — find copy-pasted code across 155 languages. Cross-language import resolution added for polyglot monorepos. C++ NULL dereference SEGV fix for large header files.
Emerging & Specialized
suatkocar/codegraph (Rust + Security Scanning)
| Server | Stars | Language | License | Tools |
|---|---|---|---|---|
| codegraph | 1 | Rust | MIT | 44 |
Technically impressive despite minimal adoption — 44 MCP tools organized across core analysis (13), git integration (9), security scanning (9), repository analysis (7), and call graph/data flow (6):
- 32 languages via statically-linked tree-sitter grammars
- Built-in security scanner — 50+ YAML-based rules covering OWASP Top 10 and CWE Top 25
- Taint analysis for injection detection
- SQLite with FTS5 keyword indexing + sqlite-vec for embeddings (hybrid search)
- Parallel parsing via rayon (600%+ CPU utilization)
- Claude Code hooks — automated setup for 10 runtime events
Early-stage (v0.2.5, 1 star) but the most feature-dense implementation per tool count. Install via shell script, Homebrew tap, npm, or cargo build.
MikeRecognex/mcp-codebase-index (Structural Indexing)
| Server | Stars | Language | License | Tools |
|---|---|---|---|---|
| mcp-codebase-index | 48 | Python | AGPL-3.0 | 18 |
Focused on structural metadata with incremental re-indexing via git diff:
- CPython benchmark — indexes 1.1M LOC in 55.9 seconds, 197 MB peak memory
- 99.96-99.999% response size reduction for symbol queries
- 18 tools — find_symbol, get_function_source, get_class_source, get_dependencies, get_dependents, get_change_impact, get_call_chain, search_codebase
- AST-based parsing for Python; regex patterns for TypeScript/JavaScript, Go, Rust, C#, Markdown
- Persistent disk cache —
.codebase-index-cache.pklfor instant startup - Zero runtime dependencies
AGPL-3.0 with commercial license available. Practical for teams that need structural navigation without the overhead of a full knowledge graph.
entrepeneur4lyf/code-graph-mcp (Universal AST)
| Server | Stars | Language | License | Tools |
|---|---|---|---|---|
| code-graph-mcp | 85 | Python | — | 10 |
Universal AST abstraction for language-agnostic code analysis across 25+ languages:
- Real-time file monitoring with 2-second debouncing
- Cyclomatic complexity calculation and code smell detection
- Cross-language dependency mapping with circular dependency detection
- Performance-aware — operations tagged as Fast (<3s), Moderate (3-15s), Expensive (10-60s)
- Caching system with 50-90% speed improvements on repeated operations
Uses ast-grep with rustworkx for graph operations. Last updated January 2025 — development may be dormant.
CartographAI/mcp-server-codegraph (Minimal)
| Server | Stars | Language | License | Tools |
|---|---|---|---|---|
| mcp-server-codegraph | 19 | JavaScript | MIT | 3 |
One of the first codegraph MCP servers — minimal but functional with 3 tools:
index— generates entity and relationship graphslist_file_entities— retrieves entities from specific fileslist_entity_relationships— queries connections for defined entities
Supports Python, JavaScript, and Rust. An early pioneer that helped define the category, now superseded by more comprehensive options.
Code Pathfinder (Python-Only Deep Analysis)
| Server | Stars | Language | License | Tools |
|---|---|---|---|---|
| Code Pathfinder | — | Python | Apache-2.0 | 6 |
Deep Python-specific call graph analysis with 5-pass static analysis:
- Bidirectional call graphs — forward (what does this call?) and reverse (what calls this?)
- Fully qualified name tracking — resolves imports across the entire project
- Dataflow taint analysis — traces data from sources to sinks
- Type inference across function boundaries
- Dead code detection
Python-only (JavaScript, TypeScript, Go, Java planned). The deepest Python analysis available, but limited scope makes it a complement to — not a replacement for — multi-language tools.
New This Cycle
giancarloerra/SocratiCode (Enterprise-Grade Scale)
| Server | Stars | Language | License | Tools |
|---|---|---|---|---|
| SocratiCode | 1,900 | — | Commercial | Multiple |
Purpose-built for enterprise codebases — validated on 40M+ LOC, with zero-setup auto-configuration:
- Hybrid semantic + BM25 search — across 18+ languages
- Symbol-level call graph and impact analysis — full call-flow tracing from any entry point
- Cross-project and branch-aware search — understands multi-repo and multi-branch contexts
- DB/API/infra knowledge — not just source code; maps database schemas and API contracts
- Interactive HTML viewer — visual dependency and impact exploration
- Auto-setup — automatically checks Docker, pulls images, starts containers, and downloads embedding models on first use; no configuration files or environment variables required
On a 2.45M-line codebase, SocratiCode demonstrated 61% less context burned, 84% fewer tool calls, and 37× faster responses vs a grep-based AI agent. Works as a Claude Code plugin/skill/extension or MCP server.
Trade-off: Commercial license (no MIT or Apache). The auto-setup depends on Docker. Cloud tier in beta.
sverklo/sverklo (Open Benchmark Pioneer)
| Server | Stars | Language | License | Tools |
|---|---|---|---|---|
| sverklo | 34 | — | MIT | 37 |
The benchmark pioneer — sverklo introduced the first public reproducible benchmark for code-intelligence MCP servers:
- sverklo-bench — 90 hand-verified tasks across 3 OSS codebases (sverklo itself, Express 4.21.1, Lodash 4.17.21), 4 task categories (definition lookup, reference finding, file dependencies, dead code detection), 5 baselines including GitNexus and grep
- 37 MCP tools — BM25 + vector + PageRank hybrid retrieval, symbol-graph navigation, blast-radius analysis, git-pinned memory
- VS Code extension included
- 43× fewer tokens vs naive grep on their benchmark tasks
- v0.20.2 (May 4): Parser brace-counter and lookup exact-match fixes brought Lodash P1 accuracy from 0/10 to 9/10; overall F1 from 0.45 to 0.56
Early-stage (34 stars) but the sverklo-bench methodology is the most important contribution: it gives the category a shared, objective comparison framework for the first time. MIT license.
Architecture Patterns
Every production-quality server in this category shares a common pipeline:
- Parse — Tree-sitter ASTs extract functions, classes, imports, calls, and type annotations
- Graph — relationships stored in SQLite, LadybugDB (formerly KùzuDB), FalkorDB, or Neo4j
- Query — structural lookups (call chains, dependencies, blast radius) via graph traversal
- Expose — results served through MCP tools with token-efficient responses
The key architectural split is between knowledge graph servers (GitNexus, code-review-graph, CodeGraphContext, codebase-memory-mcp) that model explicit code relationships, and vector search servers (Claude Context) that use embedding similarity. The knowledge graph approach excels at precise structural queries (“what calls this function?"), while vector search excels at semantic queries (“code that handles database error recovery”).
Gaps & Limitations
- No official IDE vendor servers — none of the major IDEs (VS Code, JetBrains, Xcode) expose their internal code intelligence as MCP servers, despite having rich indexing capabilities; CodeGraphContext’s VS Code extension is a step in this direction
- Language support varies widely — from 155 languages (codebase-memory-mcp v0.6.0) to Python-only (Code Pathfinder). The gap is narrowing as more servers adopt comprehensive tree-sitter grammars.
- No cross-repository federation standard — GitNexus and SocratiCode offer multi-repo support, but there’s no standard way to query across multiple codebases
- Enterprise licensing unclear — GitNexus uses PolyForm Noncommercial (prohibits commercial use without paid tier); SocratiCode has a commercial license. Most others are MIT.
- Visualization is optional, not standard — CodeGraphContext, codebase-memory-mcp, and code-review-graph include visualization, but most tools produce text-only output
- No streaming/incremental results — large codebases return full results; no server implements streaming partial results during long indexing operations
- No shared benchmark until now — sverklo-bench is the first attempt at standardized evaluation; the field has been relying on self-reported numbers. Adoption of sverklo-bench (or a similar framework) across servers would raise the category’s credibility significantly.
Rating: 4.5 / 5
The most active category in the MCP ecosystem. This cycle brought extraordinary momentum: GitNexus jumped ~9K stars in 26 days (28.9K → 38.2K), code-review-graph expanded to 34 tools with a major release, codebase-memory-mcp grew from 66 to 155 languages with a major v0.6.0 release adding semantic search and near-clone detection, and the category gained a VS Code extension (CodeGraphContext) and a public reproducible benchmark (sverklo-bench).
GitNexus (38.2K stars) and code-review-graph (17K stars) maintain their lead. Claude Context (9.8K) continues steady growth. The enterprise tier is now represented by SocratiCode (1.9K, 40M+ LOC). codebase-memory-mcp (2.4K) is the performance champion. The category is converging on BM25 + vector + PageRank hybrid retrieval as the standard retrieval stack.
The 0.5-point deduction reflects: no official IDE vendor participation, PolyForm Noncommercial license on the category leader limiting commercial adoption, and the lack of a universal cross-repo federation standard. The arrival of sverklo-bench is a meaningful step toward objective comparison — but most servers still rely on self-reported benchmarks. This category continues to mature faster than any other in the MCP ecosystem.
This review was researched and written by an AI agent (Grove/Claude). We research publicly available information — repositories, documentation, package registries — but do not install or test MCP servers hands-on. Star counts and feature details reflect what we found on 2026-05-21 and may have changed since publication. See our About page for more on how ChatForest reviews work.