
Llmgraph
io.github.brainfoods-studioPublished by GitHub account brainfoods-studiov0.4.7Updated Nov 5, 2026
Who calls this, what breaks, which callers an edit missed: labelled answers. Windows, Python, TS/JS.
Overview
Local MCP server that gives a coding agent proven call-graph answers: who calls a function, what breaks if it changes, and what it cannot see.
- What you can do
- Find every caller of a function, plus calls it cannot follow
- Trace everything that depends on a function, directly or indirectly
- Check saved edits for callers left unupdated
- Report blind spots such as dynamic calls, unknown types and unreadable files
- Explain the evidence behind a single answer line
- Label each answer by confidence, from certain to cannot_see
- When to use it
- Useful when an agent edits or refactors Python or TypeScript/JavaScript code and needs to know which call sites break, especially where same-named functions make text search ambiguous. Also helps when you want the agent to see and report what it cannot verify rather than guess.
- Requirements
- Runs locally over stdio via npx (Windows x64; some agents need cmd /c npx). Supports Python and TypeScript/JavaScript only. Requires a one-time Google sign-in, an invite-only beta plan with a trial, and network access to the vendor's site for licence checks. The project folder can be set with --repo or LLMGRAPH_REPO.
Installation
In SourceWeft
- Open Llmgraph in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
LLMGRAPH by Brainfoods Studio: the truth layer for coding agents
Every call graph has blind spots. Ours tells you where they are.
A local MCP server and Claude Code plugin that tells your coding agent who calls a function, what breaks if it changes, which callers an edit missed, and what it can't see. Windows x64; Python and TypeScript/JavaScript. Real answers, no sign-up: beta.llmgraph.in/docs/real-answers.
LLMGRAPH inks only the calls it can prove. The ones it can't see, it counts and names in plain words, so your agent sees the blind spots before it edits.
I built LLMGRAPH as the truth layer for coding agents, and the truth includes the blind spots: agents guess; LLMGRAPH proves what it can and names what it can't. In a blind test of 50 questions on three open-source repos, no confident answer was wrong.
Two functions. One name. Your agent can't tell. We can.
grep reads names. LLMGRAPH follows calls. What it can prove, it proves; what it can't, it tells you, down to the line where it stopped.
zod ships two copies of addIssueToContext. A text search mixes them together:
LLMGRAPH separates them, and shows its work:
71 look-alikes ruled out, and it shows why. And where the type checker hasn't confirmed yet, it says so.
Who's holding the other end?
Before your agent pulls a thread, it should know. In requests, change super_len(o) to super_len(o, strict), and ask check_my_changes:
16 broken calls named, exactly the real ones. A blind tester's text search found the same 16, no more and no fewer. And the 9 dynamic calls it can't follow are marked, not ignored.
Then the type checker catches up. Ask again a few seconds later:
From "our own reading" to 16 certain, on the released program. Its labels never say more than it has proven, and they upgrade the moment it can.
The five labels
Other tools sketch your codebase from rumour and fill the blind spots with confidence. LLMGRAPH works in two colours: ink for what it has proven, a plain warning for what it hasn't, and never one dressed up as the other.
Answers carry no numbers about chance; they say what is ruled out.
Measured on our test projects
Callers are confirmed by the type checker in under a second after your agent asks (Python), and check_my_changes answers in under a second once LLMGRAPH has caught up with a save. On names that also appear in unrelated code, it named no wrong callers where a plain text search returned hundreds of wrong lines, and the agent read less than half as many tokens; on clean, unique names there is no saving.
How we measured, the raw data, and where LLMGRAPH loses: BENCHMARKS.md.
See real answers, no sign-up needed: beta.llmgraph.in/docs/real-answers.
What your agent can ask
Your code is read and analysed on your machine, and we never receive your code, paths, symbol or repo names, queries or answers. Checked on the released program: it contacts only beta.llmgraph.in. Usage counts and crash reports are on by default and can be switched off (npx -y llmgraph-mcp telemetry off); the licence check is always on. Privacy page.
Install
Claude Code (plugin):
The plugin offers LLMGRAPH's answer before your agent searches for a function or class name, and never blocks the search. When your agent is about to finish, it stops it once if the saved edits left calls that are certain to break, and lists them; it never blocks on anything less, and npx -y llmgraph-mcp hook off turns both off.
Any MCP agent: add the server npx -y llmgraph-mcp (on Windows some agents need cmd /c npx -y llmgraph-mcp), sign in once with Google, and your agent asks. Setup guides for Claude Code, Antigravity, Cursor, Codex, Gemini CLI, Windsurf and OpenCode; tested by us on Claude Code and Antigravity.
Which project it reads: the first answer of each session names it (project: <folder> (from <where>)). Without --repo it is the folder your agent names, else the folder the server started in. If that is not your project, reconnect llmgraph (in Claude Code, /mcp), or name the folder with --repo or LLMGRAPH_REPO in a project .mcp.json (the plugin's own entry names none, as it serves every project):
Today's limits: Windows x64 · Python and TypeScript/JavaScript (other languages are reported as cannot_see, not counted as nothing) · repos up to the plan's line limit · invite-only beta, request an invite · one plan for individuals with a trial, prices.
This repo holds the open setup files under MIT; the LLMGRAPH engine is closed source and runs on your machine under the EULA. Brainfoods Studio, India · [email protected] · [email protected]
Source: README.md at commit 27408d6
Tools
0Version history
2- v0.4.7LatestNov 5, 2026
- v0.4.6Oct 29, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts