
Cartograph
io.github.anthony-maioPublished by GitHub account anthony-maiov1.3.0Updated Oct 29, 2026
Repo analysis for coding agents with ranked files, dependency maps, and task-scoped context.
Overview
Local MCP server that gives coding agents ranked, task-focused context from a repository instead of dumping the whole codebase.
- What you can do
- Analyze a local repo or GitHub URL: score files, map dependencies, and return compact analysis or embedded top-file contents
- Fetch full contents of specific files after analysis
- Build typed task packets with key files, dependency hubs, validation targets, risks, and task-specific details
- Keep bug-fix packets focused when changed files are supplied, favoring exact validation targets and shared dependencies
- When to use it
- Useful when a coding agent needs to orient itself in a large or unfamiliar repository, or when you want a minimal, task-matched file set for a bug fix or feature without spending model calls on static analysis.
- Requirements
- Runs as a local stdio process from the npm package @anthony-maio/cartograph, so Node.js and the installed CLI are needed. Static analysis needs no API key; the optional model-backed context mode requires a provider (gemini, openai, openrouter, ollama) and a key via --key or CARTOGRAPH_API_KEY, except Ollama. Desktop only.
Installation
In SourceWeft
- Open Cartograph in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
Cartograph
Cartograph provides task-focused repository context for coding agents. It ships a CLI, an MCP server, install adapters for Claude Code, OpenClaw, and Hermes, and agent assets for documentation workflows.
- npm:
@anthony-maio/cartograph - MCP Registry:
io.github.anthony-maio/cartograph - Quickstart:
cartograph.making-minds.ai
Instead of dumping an entire repository into context, Cartograph ranks the files that matter, maps dependencies, caches structured artifacts, and lets the next tool or agent pick up from those artifacts.
The primary workflow is:
analyzeto map the repopacketto prepare the workcontext --staticto load task-matched files without a model call
wiki, host installs, and benchmarks are secondary surfaces built around that core path.
Install
For global use from npm:
For MCP host discovery via the official registry:
io.github.anthony-maio/cartograph- Registry listing
For Claude Code plugin install from this public repo:
For global use from a local checkout:
See CONTRIBUTING.md for the development workflow and SECURITY.md for vulnerability reporting.
Run a complete example
The npm package includes a small refresh-token example. From a new working directory:
The packet should point to src/auth/refresh.js and tests/auth-refresh.test.js. The context bundle includes the clock helper and leaves unrelated billing/catalog files out. The three behavioral checks should pass. Walk through the investigation for expected results and how to apply the same process to your repository.
Hermes plugin
The native Hermes plugin exposes cartograph_analyze for repository orientation and cartograph_context for task-focused source excerpts. Both run locally in static mode without a model API call. Install the npm package and its included adapter:
Run these commands in the same OS environment as Hermes. For Hermes in WSL, use WSL Node and repository paths such as /mnt/d/Development/cartograph. Restart an existing Hermes session to load the tools. The installer binds the plugin to the installed CLI; rerun the install command after moving the package or changing Node.
See the Hermes setup and real-repository example for profile settings, verification, and removal. The plugin caches source excerpts under the selected Hermes profile and supports an optional repository allowlist. Static matching can miss relevant code, so check the returned source before editing.
For a Hermes-managed plugin checkout, see the standalone plugin guide and the commit-pinned installation option.
Claude Code Plugin
This repo also acts as a Claude Code plugin marketplace. The cartograph plugin bundles:
- a plugin-scoped Cartograph MCP server
- slash commands:
/cartograph:analyze,/cartograph:context,/cartograph:wiki - the
use-cartographandrepo-surveyorskills - the documentation-agent bundle:
repo-scout,dependency-tracer,context-picker,api-surface-writer, andwiki-writer
Install it with:
Primary Workflow
If you only remember one thing, remember this:
analyzemaps the repo and tells you what matters.packetturns a concrete job into a reusable working artifact.context --staticselects task-matched files and their nearby dependencies and tests, with their contents. It uses local heuristics and needs no API key.
The separate model-backed context workflow runs when you omit --static; configure a provider before using it. Neither mode proves that a selected file contains the bug.
Command Surface
Legacy compatibility still works:
CLI Usage
For small repos, analyze --static --json now defaults to compact output instead of embedding top-file contents. That keeps tiny repos readable and lets direct file reads stay cheaper than a giant JSON blob. Use --include-contents when you explicitly want embedded snippets.
The default markdown output from analyze --static is human-first: it highlights what matters, surfaces dependency hubs, and recommends the next commands instead of dumping raw file contents immediately.
Providers
geminiopenaiopenrouterollama
Set the API key with --key or CARTOGRAPH_API_KEY. Ollama does not require a key.
Cache Model
Cartograph writes successful runs into the user cache by default:
- Windows:
%USERPROFILE%\\.cartograph\\cache - POSIX:
~/.cartograph/cache
Each run gets a manifest plus named artifacts, which keeps agent handoffs lightweight and makes cartograph export deterministic.
Host Installs
Installing the package does not modify host configuration. Use the host-specific installer to copy its assets, then enable the integration in that host.
What each target installs:
claude: user-scope skills plus the bundled documentation agents under~/.claudeopenclaw: user-scope skill pack under~/.openclawmcp: a Cartograph MCP config snippet under~/.cartograph/mcphermes: a native tool plugin and local runtime binding under the selected Hermes profile; enable it withhermes plugins enable cartograph
Check status at any time:
Choose Your Surface
- CLI: best default path when you want deterministic local analysis and explicit artifacts.
- Claude Code plugin: best when you want plugin install, bundled skills, slash commands, and a plugin-scoped MCP server.
- OpenClaw skills: best when you want the same Cartograph workflow inside an OpenClaw skill-first environment.
- Hermes plugin: native repository orientation and source-context tools backed by the local CLI.
- MCP Registry: best when your host already prefers tool wiring over shell commands.
MCP Server
Cartograph's MCP server exposes static repo analysis directly to hosts that prefer MCP over shell commands.
Tools:
analyze_repo: score files, map dependencies, and return compact analysis output or embedded top-file contents for a local repo or GitHub URLget_file_contents: fetch full contents for specific files after analysisbuild_task_packet: return a typed task packet with key files, dependency hubs, validation targets, risks, and task-specific details
Bug-fix packets are tuned to stay focused when you provide --changed or changed_files: they keep explicit change surfaces in view, prefer exact validation targets, and bias toward shared dependencies over peripheral utility scripts.
If you want Cartograph's packaged MCP snippet, run:
That writes a reusable config file that points at:
MCP Registry
Cartograph is published in the official MCP Registry with the server name io.github.anthony-maio/cartograph.
Repo-side metadata lives in:
package.jsonvia themcpNamefieldserver.jsonfor registry metadata
The current install artifact published to npm is:
@anthony-maio/cartograph
For repeatable registry releases, this repo also includes a GitHub Actions workflow at
publish-mcp.yml. It is set up for npm trusted publishing on
GitHub Actions, then authenticates to the MCP Registry with GitHub OIDC and publishes server.json.
Packaged Agent Assets
The package currently ships:
- two Claude skills:
use-cartographandrepo-surveyor - five Claude documentation agents:
repo-scout,dependency-tracer,context-picker,api-surface-writer, andwiki-writer - two OpenClaw skills:
use-cartographandrepo-surveyor - bundled OpenProse templates inside both OpenClaw skills for repo-doc and task-context workflows
Skill roles:
use-cartograph: tool-first path when the CLI or MCP server is availablerepo-surveyor: manual fallback path when Cartograph is unavailable or needs verification
Both skills are designed to produce the same downstream contract:
- key files
- dependency hubs
- minimal task context
- doc-ready summary
These assets are meant to pass run IDs and artifact paths between steps instead of copying large prose into the main context.
The Claude plugin marketplace in this repo ships the same skills and agents, plus plugin-first slash commands and a bundled Cartograph MCP server.
Task Packet Benchmark
This repo includes a public benchmark pack for task packets under benchmarks/task-packets.
Use it to compare packet quality across large visible repos with a stable set of task prompts:
The benchmark runner writes packet artifacts to benchmarks/task-packets/output/, which is gitignored.
Curated scorecards and public artifact links are also published on the site:
Example Artifacts
Tracked examples live under docs/examples:
llama-cpp-task-packet.mdllama-cpp-task-packet.jsonllama-cpp-deepwiki.mdtask-packet-benchmark-scorecards.md
These are useful when you want to show what a focused bug-fix packet and a curated repo brief look like on a large public codebase.
Development
License
MIT
Source: README.md at commit e2e06db
Tools
0Version history
3- v1.3.0LatestOct 29, 2026
- v1.2.0Oct 2, 2026
- v1.1.4Sep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts