Bit Lantern

io.github.ZaguanLabsPublished by GitHub account ZaguanLabsv1.0.0-preview.30Updated Oct 26, 2026

Local, read-only structural code navigation and bounded dependency analysis for source repositories.

The publisher's own server: Red Atlas Api

VerifiedSTDIODesktop onlyKnowledge & MemoryDeveloper Tools

Overview

AI-generated overview

Local, read-only MCP server that indexes a source repository and gives coding agents structural code navigation and bounded dependency analysis.

What you can do
  • Build a disposable SQLite index of a workspace for structural code navigation
  • Look up definitions with exact source ranges and find references
  • Trace static call relationships between code elements
  • Produce architecture summaries and edit-impact evidence for connected coding agents
When to use it
Useful when a coding agent needs to navigate a large or unfamiliar codebase: locating definitions and references, following call relationships, or judging what an edit might affect. It is read-only and local, so it suits teams that want code context without sending source to a remote service.
Requirements
Runs as a local process on the desktop via an MCPB bundle; pick the release asset matching your OS and CPU architecture. Minimum platforms: macOS 15 on Apple silicon, 64-bit Linux with glibc 2.35+ (ARM64 or x86-64), or 64-bit Windows 11 25H2+. The universal launcher variant needs Node.js 18 or newer and a writable temporary directory. No authentication, environment variables or headers are declared.
Before you install
The runtime is separate proprietary software under its own license and EULA, not the Apache-licensed packaging repository. macOS and Windows preview binaries are not yet platform-signed, so review the platform-safety documentation rather than weakening OS security controls. It writes a disposable index inside each workspace and sends navigation results to the connected coding agent.

Installation

In SourceWeft

  1. Open Bit Lantern in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Bit Lantern MCP Registry packaging

[smithery badge]

This repository contains the inspectable packaging metadata and locked build recipe used to publish Bit Lantern to the official MCP Registry.

Bit Lantern is a local, read-only MCP server for structural code navigation. It builds a disposable SQLite index inside each workspace and provides bounded definitions, exact source ranges, references, static call relationships, architecture summaries, and edit-impact evidence to connected coding agents.

Install

Use an MCP Registry client that supports MCPB packages and choose the release asset matching your operating system and CPU architecture. Each bundle starts:

text
bitlantern mcp

The current Preview 30 target matrix is:

TargetMinimum platform
aarch64-apple-darwinmacOS 15 on Apple silicon
aarch64-unknown-linux-gnu64-bit Linux with glibc 2.35+ on ARM64
x86_64-unknown-linux-gnu64-bit Linux with glibc 2.35+ on x86-64
x86_64-pc-windows-msvc64-bit Windows 11 25H2+ on x86-64

Preview binaries for macOS and Windows are not yet platform-signed. Review the installation and platform-safety documentation and do not weaken operating-system or organization security controls.

Reproduce the MCPB artifacts

The build is locked to Bit Lantern 1.0.0-preview.30, the exact signed public release-manifest digest, all four source-archive digests and byte lengths, and @anthropic-ai/mcpb 2.1.2.

Requirements: Bash, curl, jq, Node.js/npm, sha256sum, tar, and unzip.

bash
./scripts/build-mcpb.sh(cd dist/packages && sha256sum --check SHA256SUMS)

The script downloads only immutable Preview 30 release objects from download.atlasscout.dev, verifies them before extraction, and packages one native target per .mcpb file. Generated artifacts remain under dist/ and are not committed to Git.

For directories that accept only one downloadable MCPB artifact per listing, build the universal package:

bash
./scripts/build-smithery-mcpb.sh

That package contains Brotli-compressed copies of three verified native executables. Its Node.js launcher selects the matching target, verifies the decoded byte length and SHA-256, and runs it from a private temporary directory that is removed on exit. It supports macOS/ARM64, Linux/x86-64, and Windows/x86-64 and requires Node.js 18 or newer and a writable temporary directory. No startup download is required. Smithery currently limits MCPB uploads to 25 MiB, so Linux/ARM64 users should install its target-specific package from the official MCP Registry or GitHub release. Bit Lantern itself remains a native executable; the launcher is used only for cross-platform MCPB distribution.

Run the launcher's integrity, argument-forwarding, and cleanup checks with node --test smithery/launcher.test.cjs before building the final release bundle.

The official MCPB CLI records the packaging time in each ZIP. Rebuilding verifies and packages the same native inputs, but does not promise a byte-identical .mcpb digest. The immutable release-asset digests used by MCP clients are recorded in server.json and RELEASE_EVIDENCE.md.

The source archives additionally provide OpenPGP signatures, Sigstore bundles, SPDX SBOMs, and aggregate checksums through the signed public release manifest.

Licensing boundary

The packaging metadata, build scripts, and repository documentation are licensed under Apache License 2.0. Bit Lantern itself is separate proprietary software. The executables and product materials inside MCPB release assets remain governed by the Bit Lantern Proprietary License and EULA included in every bundle.

Installing or using an MCPB asset constitutes use of the proprietary runtime, not a grant under this repository's Apache license.

Privacy and support

Bit Lantern indexes locally. It does not transmit repository paths, symbols, queries, tool calls, editor state, Git remotes, index metrics, or source code to the Bit Lantern licensing service. Navigation results are sent to the coding agent the user connects.

Source: README.md at commit b5db017

Tools

0
SourceWeft started this package once in an isolated sandbox, without credentials, to list its tools. That failed: the package type cannot run in the sandbox.

Version history

2
  1. v1.0.0-preview.30LatestOct 26, 2026
  2. v1.0.0-preview.29Sep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Atlas integrations