
JVM Source Lens
io.github.SintexerPublished by GitHub account Sintexerv1.16.0Updated Oct 24, 2026
Gradle-accurate JVM classpath; fetch Java source, signatures, and class structure for agents.
The publisher's own server: Source
Overview
A local MCP server that gives coding agents Gradle-accurate JVM classpath lookups: class search, structure, signatures and source for the exact library versions
- What you can do
- Search resolved dependency classes by simple name or glob and list their fully qualified names and libraries, plus analyze the project's actual dependency graph and versions per module. Retrieve a class overview or declared signatures, and fetch real method overloads with parameter names and generics. Run regex or substring searches inside a resolved class, or grep text across all classes in one dependency JAR. Read method bodies or line ranges from source as a last resort, flagging whether text is real source or CFR decompilation.
- When to use it
- Useful for Java and Spring Boot projects built with Gradle, especially where third-party or internal libraries lack public Javadocs and the agent would otherwise guess versions or dig through Gradle caches. It keeps context small by returning signatures and structure instead of whole files.
- Requirements
- Runs locally over stdio via npx. Needs Node.js 20 or newer and Java on PATH for the CFR decompiler and javap. The project must be a Gradle build (Maven and Bazel are not supported); the first call on a project runs Gradle and takes several seconds. Optional environment variables set allowed project roots, cache and log directories, a custom CFR JAR, a Gradle timeout and a source output limit.
Installation
In SourceWeft
- Open JVM Source Lens in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
jvmsrc — Give your coding agent a Java IDE
[CI] [npm version] [License: MIT] [Node]
An MCP server and CLI that gives your coding agent the one thing it's missing on JVM codebases: the actual classpath.
The Problem
You use an IDE to write Java. Your coding agent doesn't have one.
When your agent hits an unfamiliar library type — say, a superclass from a proprietary internal library — it spends 25+ turns walking ~/.gradle/caches, opening JARs by hand with jar tf, picking one by guesswork, and trying to answer a question your IDE would answer in one keystroke: does this superclass have a public utility method called X?
The Solution
jvmsrc queries your build tool (Gradle) for this project's resolved classpath, then hands your agent real source, real signatures, and real structure — for the exact version your build actually uses.
- As an MCP server – Connect to Claude Code, Cursor, Windsurf, or any other MCP host and equip your agent with six purpose-built classpath tools.
- As the
jvmsrcCLI – Same engine, scriptable, pipe-friendly, and useful on its own when you just want to read a class.
[jvmsrc resolving a Spring class in Claude Code]
Claude Code resolving HandlerInterceptor signatures via jvmsrc — 3 calls, correct answer, no cache walking.
What it saves, daily
On JVM projects with private libraries and no public Javadocs, jvmsrc is a force multiplier:
- ~50K tokens saved per "what's on this external class" investigation — roughly 70% reduction in cost.
- 15+ agent panic loops avoided daily — no grinding through Gradle caches, opening wrong JARs, or giving up.
- Unlock delegation for complex tasks touching internal SDKs that you previously had to do yourself.
The Difference in Action
Without jvmsrc (The 25-turn blind grind)
User: Override the audit hook from
AbstractTradingService— is there a public utility method on it we should reuse?Agent:
- Searches workspace for AbstractTradingService.java ➔
0 hits- Runs:
find ~/.gradle -name "trading-core*"- Finds 4 versions:
2.1.0,2.3.0,2.4.1,3.0.0-SNAPSHOT- Guesses: Picks
trading-core-2.4.1.jar(the project actually uses3.0.0-SNAPSHOT!)- Runs:
jar tfandjavap -pon the wrong JAR- [22 turns later] "I don't see a utility method, you'll have to implement it yourself."
Reality:
3.0.0-SNAPSHOTaddedmaskSensitiveFields()as a protected helper exactly for this case. The agent didn't hallucinate — it was just blind.
With jvmsrc (The 3-turn instant resolution)
User: Override the audit hook from
AbstractTradingService— is there a public utility method on it we should reuse?Agent:
search_classes("AbstractTradingService")➔ Finds FQN & exact resolved library.get_class_structure(scope: "overview")➔ DiscoversmaskSensitiveFields()in3.0.0-SNAPSHOT.get_method_signature("maskSensitiveFields")➔ Gets accurate signature and generics.Result: Writes the override correctly on the first try. No cache walking, no guessing, no wrong version.
How It Works
- Build Tool Inquiry:
jvmsrcqueries your active build tool (e.g., Gradle) for the exact resolved classpath configuration. - Intelligent Caching: It caches the resolved classpath, tracking changes to build files to stay current.
- Precision AI Tools: Instead of full-code dumping, it exposes precise, high-granularity tools (signatures, structure, search) to keep context windows small and token usage ultra-low.
Installation & Quick Start
1. Install CLI
Or use it directly via npx:
[!IMPORTANT]
Requires Node ≥ 20 and Java onPATH(for CFR decompiler +javap).
2. Add the MCP server
Paste this into your AI assistant config (Cursor, Claude Code, Windsurf, etc.), then restart the host:
Optional: jvmsrc config (or jvmsrc config --project /path/to/gradle-project) prints a paste-ready block plus environment hints. Most users can skip it and copy the snippet above.
MCP Server Reference
The MCP server runs over stdio via jvmsrc mcp. The default config needs no environment variables:
Private repository credentials (optional)
Only needed when your Gradle build requires credential env vars for a private Maven/Artifactory/Nexus-style repo. MCP hosts often do not inherit your interactive shell, so those vars must be set on the jvmsrc MCP process (then restart the server).
REPO_USER / REPO_PASS below are sample names only — they are not required by jvmsrc. Use whatever variable names your project’s Gradle scripts document:
Omit the env block entirely when the project does not need them.
Tools your agent gets
[!TIP]
Every source response includessourceAvailable:truefor real sources (Javadoc, parameter names, generics),falsefor CFR decompilation (structure reliable, names may be synthetic).
[!NOTE]
Multimodule: omitmodulePathand jvmsrc auto-picks the unique owning module; on a miss it lists candidatemodulePaths. Methods:search_classesmatches declared method names when the index has source enrichment; for body text in a known JAR usesearch_in_artifact.get_class_sourcemethodNamesalso walks superclasses for unmatched names.
Make your agent use it
Tool descriptions help, but a built-in Bash tool the agent already trusts will often win. Two small additions make jvmsrc the default for dependency questions.
1. Add a rule to your agent's instructions (CLAUDE.md, AGENTS.md, Cursor rules) — many clients do not show MCP server instructions at all:
2. (Claude Code) Block the shell fallbacks with a hook. docs/hooks/block-jvm-fallbacks.mjs denies javap, unzip/jar on JARs, and ~/.gradle/caches / ~/.m2 access, and tells the agent to use jvmsrc instead, so it redirects instead of silently reading the wrong version. Save the script somewhere stable and add to .claude/settings.json (project) or ~/.claude/settings.json (all projects):
Set JVMSRC_HOOK_DISABLE=1 to switch it off temporarily. Other clients have their own hook mechanisms; check their current docs before porting.
Check that your client shows the server instructions: ask the agent "What instructions does the jvmsrc MCP server give?". If it cannot answer, rely on the rule in step 1.
[!NOTE] Inputs are forgiving.
projectRootcan be omitted (the workspace is used, or setJVMSRC_PROJECT_ROOT);modulePathacceptsapp,/app,:app, or a file/directory inside the module (omit it, or pass"*", to search all modules);classNameaccepts a simple name,Outer.Inner, or a trailing.class/.java. The first call on a project runs Gradle (typically 5–10s); later calls use the cache. PassforceRefresh: trueonly after something changed that the build files do not show, such as a SNAPSHOT republish.
How It Compares
Target Audience
Primarily Java + Spring Boot projects on Gradle. Other JVM languages (Kotlin, Scala) and Android work today on a best-effort basis and are on the roadmap as first-class targets — see ROADMAP.md.
If you're on Maven or Bazel, it's planned but not shipping yet. Star the repo or open an issue and I'll prioritize accordingly.
Detailed Reference
Requirements & Compatibility
Runtime: Node.js ≥ 20, Java on PATH.
Project types: JVM codebases (Java, Kotlin, Scala, Groovy). jvmsrc calls the build tool, not your editor.
Point -p / projectRoot at the Gradle root (settings.gradle(.kts) or root build.gradle(.kts)). Uses ./gradlew when present, else gradle on PATH. Maven-only trees get an explicit unsupported error.
Known Limitations
Early software; the supported path is narrow:
Composite builds, Android-only layouts, and exotic configurations are not fully validated. See ROADMAP.md.
Security & Privacy
- No telemetry.
- Local only — caches and diagnostics stay on disk; never writes under your project root.
- Subprocesses via argv only (no shell interpolation) — see SECURITY.md.
- Optional
JVMSRC_ALLOWED_ROOTSto lock down which projects jvmsrc may resolve.
CLI Command Reference
Useful flags: -p / --project, --module (:core:api), --configuration, --include-test, --force-refresh, --verbose (Gradle stderr only), --method, --start-line / --end-line.
Repo fixture for testing:
test/fixtures/gradle-smoke —
jvmsrc get com.smoke.Core -p test/fixtures/gradle-smoke --module :core.
Troubleshooting
- Resolution failures: Run
jvmsrc diagnostics last(orjvmsrc diagnostics last 5) - Custom JDK install roots: Add once with
jvmsrc config jdk-roots add /path/to/jdks - JDK mismatch debugging: Run
jvmsrc doctor java -p /path/to/project - After upgrading jvmsrc: Restart your MCP host
- Stale classpath: Run
jvmsrc resolve --force-refresh
Environment Variables
Defaults follow env-paths conventions per OS. Full layout: SPEC.md §6.
When JVMSRC_JAVA_HOME is not set, jvmsrc auto-discovers local JDKs from common paths such as ~/.jdks (IntelliJ), ~/.gradle/jdks, SDKMan, jenv, asdf, and OS-specific system install directories, plus your global configured JDK roots from jvmsrc config jdk-roots ....
AI Agent Reviews
Finally, an MCP That Doesn't Make Me Decompile JARs
"This tool is a revelation for anyone tired of LLMs hallucinating non-existent Spring APIs. It actually reads bytecode, providing accurate class definitions and source lookups without the usual 'vibes-based' guesswork. The
search_classesfunctionality is incredibly precise, and the thoughtful implementation ofjavapfallback and granular scope controls (overview/declared/effective) makes navigating complex JARs painless. It’s fast, honest when it can't find a class, and handles cache management perfectly. A must-have for any dev struggling with dependency hell — it’s like having a senior engineer who actually enjoys reading documentation." — Claude (AI Reviewer)
Project Documentation
Building from Source
Full contributor workflow: CONTRIBUTING.md.
I built jvmsrc because I kept running into the same wall: agents that are great at writing Java but blind to the actual classpath. If it saves you the same 25-turn grind it saved me, that's exactly why this exists. Found a bug, have an idea, or just want to say it helped? Open an issue or a PR — I read everything.
License
MIT — see LICENSE.
Source: README.md at commit 56c4bf0
Tools
0Version history
1- v1.16.0LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
Other Source integrations
Source
app.sourceOfficial publisher
Remote MCP endpoint from Source that gives an assistant access to marketing attribution and analytics for websites connected to Source.

ArxSource
Published by GitHub account nicolaiprodromov
Local MCP server that lets an assistant search arXiv, read papers section by section or in LaTeX, follow citations, and find a paper's code.
SourceMed
io.sourcemed
SourceMed gives an assistant a source-verified clinical evidence library: ask evidence questions, browse shelves, and read cited cards.

Spree Commerce: open-source B2B and marketplace ecommerce
Published by GitHub account spree
Spree's MCP server lets an AI assistant merchandise a Spree store's catalog, answer reporting questions and manage store setup in plain language.

PlushSource
Published by GitHub account quickman924
Local MCP server over a bundled directory of custom plush manufacturers, letting an assistant search, filter, compare and cite listings.