Tokennuke

io.github.BigJaiPublished by GitHub account BigJaiv1.3.0Updated Oct 24, 2026

Code indexing MCP: 15 tools, 10 languages, hybrid search, call graphs, O(1) retrieval.

Overview

AI-generated overview

Indexes local or remote code repositories so an assistant can search symbols, read exact function source, and trace call graphs.

What you can do
TokenNuke builds a per-repository SQLite index from source code using tree-sitter AST extraction across ten languages. Its 15 tools cover indexing local folders or GitHub/GitLab repositories, listing repositories, file trees and outlines, hybrid keyword-plus-vector symbol search, raw text search, byte-offset symbol retrieval, batch symbol fetch, callee and caller lookups, symbol diffs since the last index, and dependency maps.
When to use it
Useful when an assistant needs to navigate a large codebase without reading whole files, for example finding a function's source, locating callers before changing a signature, reviewing what changed since the last index, or mapping dependencies during refactoring.
Requirements
Runs as a local process installed from PyPI (pip install tokennuke) and started over stdio, or optionally as a streamable HTTP server on a chosen port. It writes per-repository SQLite databases under a local directory. Indexing remote repositories downloads tarballs over the network; private repositories need an authentication token.
Before you install
Indexing a remote repository downloads its contents, and private repositories require an auth token, so treat that credential as sensitive. Index databases are written to a local directory and may contain source code and file contents. The server can force re-indexing and invalidate caches, which changes local index state.

Installation

In SourceWeft

  1. Open Tokennuke in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

TokenNuke

Intelligent code indexing MCP server. 15 tools, 10 languages, tree-sitter AST extraction, hybrid search (FTS5 + vector), call graphs, remote repo indexing, incremental indexing.

Save 99% of tokens — get exact function source via byte-offset seek instead of reading entire files.

Formerly codemunch-pro. Same code, better name.

Install

bash
pip install tokennuke

Quick Start

Claude Desktop / Cline

Add to your MCP client config:

json
{  "mcpServers": {    "tokennuke": {      "command": "tokennuke"    }  }}

HTTP Server

bash
tokennuke --transport streamable-http --port 5002

15 MCP Tools

ToolDescription
index_folderIndex a local directory (incremental, SHA-256 based)
index_repoIndex a GitHub/GitLab repo (tarball download, no git needed)
list_reposList all indexed repositories with stats
invalidate_cacheForce re-index a repository
file_treeGet directory tree with file counts
file_outlineList symbols in a single file
repo_outlineList all symbols in repo (summary)
get_symbolGet full source of one symbol (O(1) byte seek)
get_symbolsBatch get multiple symbols
search_symbolsHybrid search (FTS5 + vector RRF)
search_textFull-text search in file contents
get_calleesWhat does this function call?
get_callersWho calls this function?
diff_symbolsWhat changed since last index? (PR review)
dependency_mapWhat does this file depend on? What depends on it?

10 Languages

Python, JavaScript, TypeScript, Go, Rust, Java, C, C++, C#, Ruby

All via tree-sitter-language-pack — zero compilation, pre-built binaries.

Key Features

O(1) Symbol Retrieval

Every symbol stores its byte offset and length. get_symbol seeks directly to the function source — no reading entire files. A 200-byte function from a 40KB file = 99.5% token savings.

Incremental Indexing

Files are hashed (SHA-256). Only changed files are re-parsed. Re-indexing a 10K file repo after changing one file takes milliseconds.

Hybrid Search (FTS5 + Vector)

Combines BM25 keyword matching with semantic vector similarity using Reciprocal Rank Fusion. Search "authentication middleware" and find auth_middleware, verify_token, and login_handler.

Call Graphs

Traces function calls through the AST. get_callees("main") shows what main calls. get_callers("authenticate") shows who calls authenticate. Supports depth traversal.

Remote Repo Indexing

Index any public GitHub or GitLab repo by URL — no git binary needed. Downloads the tarball via API, extracts, and indexes. Cached locally with SHA-based freshness checks. Supports private repos with auth tokens and sparse paths.

Full-Text Content Search

Search raw file contents — string literals, TODO comments, config values, error messages. Not just symbol names.

How It Works

  1. Parse — tree-sitter builds an AST for each source file
  2. Extract — Walk AST to find functions, classes, methods, types, interfaces
  3. Store — SQLite database per repo with FTS5 virtual tables
  4. Embed — FastEmbed (ONNX, CPU-only) generates 384-dim vectors for semantic search
  5. Graph — Call expressions extracted from function bodies, edges stored and resolved
  6. Serve — FastMCP exposes 15 tools via stdio or HTTP

Architecture

~/.tokennuke/├── myproject_a1b2c3d4e5f6.db    # Per-repo SQLite database├── otherproject_7890abcdef.db└── ...
Each DB contains:├── files          # Indexed files with SHA-256 hashes├── symbols        # Functions, classes, methods, types├── symbols_fts    # FTS5 full-text search index├── symbols_vec    # sqlite-vec 384-dim vector index├── call_edges     # Call graph (caller → callee)└── file_content_fts  # Raw file content search

Use Cases

  • AI Coding Agents: Give your agent surgical access to codebases without burning context
  • Code Review: Find all callers of a function before changing its signature
  • Onboarding: Search symbols semantically — "where is error handling?" finds relevant code
  • Refactoring: Map call graphs before moving functions between modules
  • Documentation: Extract all public APIs with signatures and docstrings

License

MIT

Source: README.md at commit b86a4c5

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.3.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts