Llmgraph

io.github.brainfoods-studioPublished by GitHub account brainfoods-studiov0.4.7Updated Nov 5, 2026

Who calls this, what breaks, which callers an edit missed: labelled answers. Windows, Python, TS/JS.

VerifiedSTDIODesktop onlyKnowledge & MemoryDeveloper Tools

Overview

AI-generated overview

Local MCP server that gives a coding agent proven call-graph answers: who calls a function, what breaks if it changes, and what it cannot see.

What you can do
  • Find every caller of a function, plus calls it cannot follow
  • Trace everything that depends on a function, directly or indirectly
  • Check saved edits for callers left unupdated
  • Report blind spots such as dynamic calls, unknown types and unreadable files
  • Explain the evidence behind a single answer line
  • Label each answer by confidence, from certain to cannot_see
When to use it
Useful when an agent edits or refactors Python or TypeScript/JavaScript code and needs to know which call sites break, especially where same-named functions make text search ambiguous. Also helps when you want the agent to see and report what it cannot verify rather than guess.
Requirements
Runs locally over stdio via npx (Windows x64; some agents need cmd /c npx). Supports Python and TypeScript/JavaScript only. Requires a one-time Google sign-in, an invite-only beta plan with a trial, and network access to the vendor's site for licence checks. The project folder can be set with --repo or LLMGRAPH_REPO.
Before you install
The engine is closed source and runs under an EULA; the licence check is always on. Usage counts and crash reports are on by default and can be disabled with the telemetry off command. The plugin can stop the agent once when saved edits leave certain breaks, and can be turned off with hook off. Code is analysed locally, but the server contacts the vendor's site.

Installation

In SourceWeft

  1. Open Llmgraph in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[LLMGRAPH: every call graph has blind spots. Ours tells you where they are.]

LLMGRAPH by Brainfoods Studio: the truth layer for coding agents

Every call graph has blind spots. Ours tells you where they are.

[Agent Rules]

A local MCP server and Claude Code plugin that tells your coding agent who calls a function, what breaks if it changes, which callers an edit missed, and what it can't see. Windows x64; Python and TypeScript/JavaScript. Real answers, no sign-up: beta.llmgraph.in/docs/real-answers.

LLMGRAPH inks only the calls it can prove. The ones it can't see, it counts and names in plain words, so your agent sees the blind spots before it edits.

I built LLMGRAPH as the truth layer for coding agents, and the truth includes the blind spots: agents guess; LLMGRAPH proves what it can and names what it can't. In a blind test of 50 questions on three open-source repos, no confident answer was wrong.


Two functions. One name. Your agent can't tell. We can.

grep reads names. LLMGRAPH follows calls. What it can prove, it proves; what it can't, it tells you, down to the line where it stopped.

zod ships two copies of addIssueToContext. A text search mixes them together:

text
$ rg -n addIssueToContext      # zod v3.23.8146 lines, from both copies, mixed together

LLMGRAPH separates them, and shows its work:

text
llmgraph · who_calls addIssueToContext (src/helpers/parseUtil.ts:72): 71 in a set  ⚠︎ type checker starting: answers use our own reading for now; 71 calls unchecked  ◇ within_these 71 calls -> one of 1 (closed: repo only) [c] w1  ⚠︎ plus 7 dynamic calls nearby that could reach anything w2  – ruled out: 71 same-name calls (proven: other target) [c] w3  assumes [c]: our own reading, not confirmed by the checker(lines trimmed)

71 look-alikes ruled out, and it shows why. And where the type checker hasn't confirmed yet, it says so.

Who's holding the other end?

Before your agent pulls a thread, it should know. In requests, change super_len(o) to super_len(o, strict), and ask check_my_changes:

text
llmgraph · check_my_changes: 1 file changed, 16 calls break  16 breaks: misses "strict" w1  ⚠︎ breaks if it runs super_len src/requests/models.py:526 PreparedRequest.prepare_body (within_these, one of 1, closed: repo only) [c] w2  ⚠︎ breaks if it runs super_len src/requests/models.py:575 PreparedRequest.prepare_content_length (within_these, one of 1, closed: repo only) [c] w3  ⚠︎ breaks if it runs super_len tests/test_utils.py:62 TestSuperLen.test_io_streams (within_these, one of 1, closed: repo only) [c] w4  … 13 more test call sites  ⚠︎ plus 9 dynamic calls nearby that could reach super_len w18(lines trimmed)

16 broken calls named, exactly the real ones. A blind tester's text search found the same 16, no more and no fewer. And the 9 dynamic calls it can't follow are marked, not ignored.

Then the type checker catches up. Ask again a few seconds later:

text
llmgraph · who_calls super_len (src/requests/utils.py:135): 16 certain  ✓ certain src/requests/models.py:526 PreparedRequest.prepare_body w33  +1 more (all certain, same file) w34  ✓ certain tests/test_utils.py:62 TestSuperLen.test_io_streams w35  +13 more (all certain, same file) w36  ⚠ plus 9 dynamic calls nearby that could reach anything w37(lines trimmed)

From "our own reading" to 16 certain, on the released program. Its labels never say more than it has proven, and they upgrade the moment it can.

The five labels

Other tools sketch your codebase from rumour and fill the blind spots with confidence. LLMGRAPH works in two colours: ink for what it has proven, a plain warning for what it hasn't, and never one dressed up as the other.

LabelWhat it means
certainWe can prove it is exactly one function.
exactly_theseA known set, and every member really can run here.
within_theseOne of a known list; some listed may never happen here.
maybe_moreThere are candidates, but the door is open.
cannot_seeNothing to go on.

Answers carry no numbers about chance; they say what is ruled out.

Measured on our test projects

Callers are confirmed by the type checker in under a second after your agent asks (Python), and check_my_changes answers in under a second once LLMGRAPH has caught up with a save. On names that also appear in unrelated code, it named no wrong callers where a plain text search returned hundreds of wrong lines, and the agent read less than half as many tokens; on clean, unique names there is no saving.

How we measured, the raw data, and where LLMGRAPH loses: BENCHMARKS.md.

See real answers, no sign-up needed: beta.llmgraph.in/docs/real-answers.

What your agent can ask

ToolWhat it answers
who_callsEvery place that calls this function, plus calls we can't see.
what_breaks_if_changedEverything that depends on this, directly or indirectly, and what we can't see.
check_my_changesManual check of edits: callers you didn't update, and anything we can't see.
what_is_unknownWhere our view is blind (dynamic calls, unknown types, unreadable files) and why.
explainWhy we said this: the evidence behind one answer line.

Your code is read and analysed on your machine, and we never receive your code, paths, symbol or repo names, queries or answers. Checked on the released program: it contacts only beta.llmgraph.in. Usage counts and crash reports are on by default and can be switched off (npx -y llmgraph-mcp telemetry off); the licence check is always on. Privacy page.

Install

Claude Code (plugin):

bash
claude plugin marketplace add brainfoods-studio/llmgraph-agent-pluginclaude plugin install llmgraph@llmgraph

The plugin offers LLMGRAPH's answer before your agent searches for a function or class name, and never blocks the search. When your agent is about to finish, it stops it once if the saved edits left calls that are certain to break, and lists them; it never blocks on anything less, and npx -y llmgraph-mcp hook off turns both off.

Any MCP agent: add the server npx -y llmgraph-mcp (on Windows some agents need cmd /c npx -y llmgraph-mcp), sign in once with Google, and your agent asks. Setup guides for Claude Code, Antigravity, Cursor, Codex, Gemini CLI, Windsurf and OpenCode; tested by us on Claude Code and Antigravity.

Which project it reads: the first answer of each session names it (project: <folder> (from <where>)). Without --repo it is the folder your agent names, else the folder the server started in. If that is not your project, reconnect llmgraph (in Claude Code, /mcp), or name the folder with --repo or LLMGRAPH_REPO in a project .mcp.json (the plugin's own entry names none, as it serves every project):

json
{  "mcpServers": {    "llmgraph": {      "command": "npx",      "args": ["-y", "llmgraph-mcp", "--repo", "C:\\work\\my-project"]    }  }}

Today's limits: Windows x64 · Python and TypeScript/JavaScript (other languages are reported as cannot_see, not counted as nothing) · repos up to the plan's line limit · invite-only beta, request an invite · one plan for individuals with a trial, prices.

This repo holds the open setup files under MIT; the LLMGRAPH engine is closed source and runs on your machine under the EULA. Brainfoods Studio, India · [email protected] · [email protected]

Source: README.md at commit 27408d6

Tools

0
SourceWeft started this package once in an isolated sandbox, without credentials, to list its tools. That failed: the server did not start.

Version history

2
  1. v0.4.7LatestNov 5, 2026
  2. v0.4.6Oct 29, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts