Cartograph

io.github.anthony-maioPublished by GitHub account anthony-maiov1.3.0Updated Oct 29, 2026

Repo analysis for coding agents with ranked files, dependency maps, and task-scoped context.

VerifiedSTDIODesktop onlyKnowledge & MemoryDeveloper Tools

Overview

AI-generated overview

Local MCP server that gives coding agents ranked, task-focused context from a repository instead of dumping the whole codebase.

What you can do
  • Analyze a local repo or GitHub URL: score files, map dependencies, and return compact analysis or embedded top-file contents
  • Fetch full contents of specific files after analysis
  • Build typed task packets with key files, dependency hubs, validation targets, risks, and task-specific details
  • Keep bug-fix packets focused when changed files are supplied, favoring exact validation targets and shared dependencies
When to use it
Useful when a coding agent needs to orient itself in a large or unfamiliar repository, or when you want a minimal, task-matched file set for a bug fix or feature without spending model calls on static analysis.
Requirements
Runs as a local stdio process from the npm package @anthony-maio/cartograph, so Node.js and the installed CLI are needed. Static analysis needs no API key; the optional model-backed context mode requires a provider (gemini, openai, openrouter, ollama) and a key via --key or CARTOGRAPH_API_KEY, except Ollama. Desktop only.
Before you install
Analysis writes run manifests and artifacts to a local cache directory by default. Static matching can miss relevant code, so returned source should be checked before editing. The non-static context mode sends repository content to the chosen model provider and needs an API key. Host installers modify host configuration files under user directories.

Installation

In SourceWeft

  1. Open Cartograph in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Cartograph

Cartograph provides task-focused repository context for coding agents. It ships a CLI, an MCP server, install adapters for Claude Code, OpenClaw, and Hermes, and agent assets for documentation workflows.

Instead of dumping an entire repository into context, Cartograph ranks the files that matter, maps dependencies, caches structured artifacts, and lets the next tool or agent pick up from those artifacts.

The primary workflow is:

  1. analyze to map the repo
  2. packet to prepare the work
  3. context --static to load task-matched files without a model call

wiki, host installs, and benchmarks are secondary surfaces built around that core path.

Install

bash
npm installnpm run build

For global use from npm:

bash
npm install -g @anthony-maio/cartograph

For MCP host discovery via the official registry:

For Claude Code plugin install from this public repo:

text
/plugin marketplace add anthony-maio/cartograph/plugin install cartograph@making-minds-tools

For global use from a local checkout:

bash
npm install -g .

See CONTRIBUTING.md for the development workflow and SECURITY.md for vulnerability reporting.

Run a complete example

The npm package includes a small refresh-token example. From a new working directory:

sh
npm init -ynpm install @anthony-maio/[email protected]npx cartograph analyze ./node_modules/@anthony-maio/cartograph/examples/auth-refresh --staticnpx cartograph packet ./node_modules/@anthony-maio/cartograph/examples/auth-refresh --type bug-fix --task "fix refresh token expiry"npx cartograph context ./node_modules/@anthony-maio/cartograph/examples/auth-refresh --task "fix refresh token expiry" --static --jsonnode --test ./node_modules/@anthony-maio/cartograph/examples/auth-refresh/tests/auth-refresh.test.js

The packet should point to src/auth/refresh.js and tests/auth-refresh.test.js. The context bundle includes the clock helper and leaves unrelated billing/catalog files out. The three behavioral checks should pass. Walk through the investigation for expected results and how to apply the same process to your repository.

Hermes plugin

The native Hermes plugin exposes cartograph_analyze for repository orientation and cartograph_context for task-focused source excerpts. Both run locally in static mode without a model API call. Install the npm package and its included adapter:

sh
npm install -g @anthony-maio/[email protected]cartograph install hermeshermes plugins enable cartographcartograph doctor hermes

Run these commands in the same OS environment as Hermes. For Hermes in WSL, use WSL Node and repository paths such as /mnt/d/Development/cartograph. Restart an existing Hermes session to load the tools. The installer binds the plugin to the installed CLI; rerun the install command after moving the package or changing Node.

See the Hermes setup and real-repository example for profile settings, verification, and removal. The plugin caches source excerpts under the selected Hermes profile and supports an optional repository allowlist. Static matching can miss relevant code, so check the returned source before editing.

For a Hermes-managed plugin checkout, see the standalone plugin guide and the commit-pinned installation option.

Claude Code Plugin

This repo also acts as a Claude Code plugin marketplace. The cartograph plugin bundles:

  • a plugin-scoped Cartograph MCP server
  • slash commands: /cartograph:analyze, /cartograph:context, /cartograph:wiki
  • the use-cartograph and repo-surveyor skills
  • the documentation-agent bundle: repo-scout, dependency-tracer, context-picker, api-surface-writer, and wiki-writer

Install it with:

text
/plugin marketplace add anthony-maio/cartograph/plugin install cartograph@making-minds-tools

Primary Workflow

If you only remember one thing, remember this:

bash
cartograph analyze <repo> --staticcartograph packet <repo> --type <type> --task "<task>"cartograph context <repo> --task "<task>" --static --json
  • analyze maps the repo and tells you what matters.
  • packet turns a concrete job into a reusable working artifact.
  • context --static selects task-matched files and their nearby dependencies and tests, with their contents. It uses local heuristics and needs no API key.

The separate model-backed context workflow runs when you omit --static; configure a provider before using it. Neither mode proves that a selected file contains the bug.

Command Surface

bash
cartograph analyze <repo> [options]cartograph packet <repo> --type <type> --task "<task>" [--changed <paths...>]cartograph context <repo> --task "<task>" [options]cartograph wiki <repo> [options]cartograph export <run-id> --to <path> [--artifact <name>]cartograph install <claude|openclaw|mcp|hermes>cartograph uninstall <claude|openclaw|mcp|hermes>cartograph doctor [target] [--json]cartograph mcp

Legacy compatibility still works:

bash
cartograph <repo> --staticcartograph <repo> -c "trace auth flow"

CLI Usage

bash
# Map the repocartograph analyze ./my-project --static
# Prepare a concrete jobcartograph packet ./my-project --type bug-fix --task "fix auth refresh bug" --changed src/auth/service.ts tests/auth/service.test.ts
# Load the minimum file set for that jobcartograph context ./my-project --task "add user authentication" --static --json
# Force embedded snippets when you really want themcartograph analyze ./my-project --static --json --include-contents
# Full wiki outputcartograph wiki ./my-project -p gemini -k $CARTOGRAPH_API_KEY -o wiki.md
# Export a cached artifact to an explicit pathcartograph export run-abc123 --to ./artifacts/wiki.md
# Run the MCP server directlycartograph mcp

For small repos, analyze --static --json now defaults to compact output instead of embedding top-file contents. That keeps tiny repos readable and lets direct file reads stay cheaper than a giant JSON blob. Use --include-contents when you explicitly want embedded snippets.

The default markdown output from analyze --static is human-first: it highlights what matters, surfaces dependency hubs, and recommends the next commands instead of dumping raw file contents immediately.

Providers

  • gemini
  • openai
  • openrouter
  • ollama

Set the API key with --key or CARTOGRAPH_API_KEY. Ollama does not require a key.

Cache Model

Cartograph writes successful runs into the user cache by default:

  • Windows: %USERPROFILE%\\.cartograph\\cache
  • POSIX: ~/.cartograph/cache

Each run gets a manifest plus named artifacts, which keeps agent handoffs lightweight and makes cartograph export deterministic.

Host Installs

Installing the package does not modify host configuration. Use the host-specific installer to copy its assets, then enable the integration in that host.

bash
cartograph install claudecartograph install openclawcartograph install mcpcartograph install hermes

What each target installs:

  • claude: user-scope skills plus the bundled documentation agents under ~/.claude
  • openclaw: user-scope skill pack under ~/.openclaw
  • mcp: a Cartograph MCP config snippet under ~/.cartograph/mcp
  • hermes: a native tool plugin and local runtime binding under the selected Hermes profile; enable it with hermes plugins enable cartograph

Check status at any time:

bash
cartograph doctorcartograph doctor --json

Choose Your Surface

  • CLI: best default path when you want deterministic local analysis and explicit artifacts.
  • Claude Code plugin: best when you want plugin install, bundled skills, slash commands, and a plugin-scoped MCP server.
  • OpenClaw skills: best when you want the same Cartograph workflow inside an OpenClaw skill-first environment.
  • Hermes plugin: native repository orientation and source-context tools backed by the local CLI.
  • MCP Registry: best when your host already prefers tool wiring over shell commands.

MCP Server

Cartograph's MCP server exposes static repo analysis directly to hosts that prefer MCP over shell commands.

Tools:

  • analyze_repo: score files, map dependencies, and return compact analysis output or embedded top-file contents for a local repo or GitHub URL
  • get_file_contents: fetch full contents for specific files after analysis
  • build_task_packet: return a typed task packet with key files, dependency hubs, validation targets, risks, and task-specific details

Bug-fix packets are tuned to stay focused when you provide --changed or changed_files: they keep explicit change surfaces in view, prefer exact validation targets, and bias toward shared dependencies over peripheral utility scripts.

If you want Cartograph's packaged MCP snippet, run:

bash
cartograph install mcp

That writes a reusable config file that points at:

json
{  "mcpServers": {    "cartograph": {      "command": "cartograph",      "args": ["mcp"]    }  }}

MCP Registry

Cartograph is published in the official MCP Registry with the server name io.github.anthony-maio/cartograph.

Repo-side metadata lives in:

The current install artifact published to npm is:

  • @anthony-maio/cartograph

For repeatable registry releases, this repo also includes a GitHub Actions workflow at publish-mcp.yml. It is set up for npm trusted publishing on GitHub Actions, then authenticates to the MCP Registry with GitHub OIDC and publishes server.json.

Packaged Agent Assets

The package currently ships:

  • two Claude skills: use-cartograph and repo-surveyor
  • five Claude documentation agents: repo-scout, dependency-tracer, context-picker, api-surface-writer, and wiki-writer
  • two OpenClaw skills: use-cartograph and repo-surveyor
  • bundled OpenProse templates inside both OpenClaw skills for repo-doc and task-context workflows

Skill roles:

  • use-cartograph: tool-first path when the CLI or MCP server is available
  • repo-surveyor: manual fallback path when Cartograph is unavailable or needs verification

Both skills are designed to produce the same downstream contract:

  • key files
  • dependency hubs
  • minimal task context
  • doc-ready summary

These assets are meant to pass run IDs and artifact paths between steps instead of copying large prose into the main context.

The Claude plugin marketplace in this repo ships the same skills and agents, plus plugin-first slash commands and a bundled Cartograph MCP server.

Task Packet Benchmark

This repo includes a public benchmark pack for task packets under benchmarks/task-packets.

Use it to compare packet quality across large visible repos with a stable set of task prompts:

bash
npm run benchmark:task-packets -- --listnpm run benchmark:task-packets -- --case llama-cpp-bug-fix --dry-run

The benchmark runner writes packet artifacts to benchmarks/task-packets/output/, which is gitignored.

Curated scorecards and public artifact links are also published on the site:

Example Artifacts

Tracked examples live under docs/examples:

These are useful when you want to show what a focused bug-fix packet and a curated repo brief look like on a large public codebase.

Development

bash
npm installnpm testnpm run checknpm run buildnpm run pack:smoke

License

MIT

Source: README.md at commit e2e06db

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

3
  1. v1.3.0LatestOct 29, 2026
  2. v1.2.0Oct 2, 2026
  3. v1.1.4Sep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts