
Attocode Code Intelligence
io.github.eren23Published by GitHub account eren23v0.1.26Updated Nov 4, 2026
Local code search, symbol navigation and change impact for coding agents. No model, no API key.
Overview
Local code search, symbol navigation and change-impact analysis for coding agents, running on your machine with no model or API key.
- What you can do
- Find code: semantic and fast search, symbol search, repository bootstrap and relevant-context gathering
- Read symbols: definitions, source, cross-references and call graphs
- See structure: dependencies, codebase exploration and project summaries
- Plan changes: impact analysis, test suggestions and change review
- Check the server: capabilities and setup diagnostics
- Optional full profile adds rules, security scans, history and snapshot tools
- When to use it
- Useful when a coding agent works in a repository and needs to locate code, follow references or estimate what a change touches. It is a local, offline alternative to hosted code search; the README notes measured search quality but no demonstrated speed or accuracy gain for agents.
- Requirements
- Runs as a local stdio process via uvx or a uv tool install; needs Python 3.12 or later and Git. A project path or workspace root must be supplied, or a repository marker such as .git must be found. No API key or network access is required by default.
Installation
In SourceWeft
- Open Attocode Code Intelligence in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
attocode-code-intel
Local code search and navigation for coding agents and for people. It runs as an MCP server for Codex, Claude Code, Cursor and other MCP clients, and as a command in your terminal. It needs no model, no API key and no network.
Status: beta. We measured the search quality (see What we measured). We have not shown that it makes agents faster or more accurate.
Quickstart
You need Python 3.12 or later and Git.
Then restart your agent. init configures Codex, Claude Code and Cursor. Use --client claude, --client codex or --client cursor for one client. Codex needs a trusted project for a project configuration. Claude Code can ask you to enable the project MCP server.
To check the setup, run attocode-code-intel doctor. It starts the configured server, calls two tools and shows the result for each client.
The probe also reports the executable and server version returned by
that new probe. An already running client session must be checked separately.
For other clients (VS Code, Zed, Windsurf, Claude Desktop and more), run attocode-code-intel install <target>. attocode-code-intel commands lists the targets.
To run the server without an installation, use uvx. This is a configuration for any MCP client that starts a local command:
You can omit --project if the client sends one workspace root. Otherwise the server looks for a repository marker such as .git in the working folder and its parents, but never selects your home folder. If it finds no repository, it stops with an error.
To use the latest source, install from a clone of this repository: uv tool install /path/to/attocode/packages/code-intel.
What your agent gets
Version 0.1.26 gives Rust precision lookups a shared five-second budget and fixes cancelled startup cleanup when a child retains inherited pipes. Other languages keep two seconds; longer reloads still return partial evidence.
Version 0.1.25 uses OpenAI embeddings only when you set ATTOCODE_EMBEDDING_MODEL=openai. Before, an OPENAI_API_KEY in the environment was enough to send code chunks to OpenAI at index time. Rust references are also more reliable while rust-analyzer loads.
Version 0.1.24 adds ATTOCODE_INTEL_RANKING_PROVIDER=openrouter, a preset for the opt-in hosted rerank. In a frozen trial with 24 short questions, the rerank found 24 of 26 labeled files in the first five results, against 20 without it; see Hosted rerank. Rerank stays off by default, because it sends source excerpts to OpenRouter.
Version 0.1.23 is listed in the official MCP Registry and documents a uvx quick start. The opt-in hosted rerank now accepts the dated model ID that OpenRouter returns; see Hosted rerank. Rerank stays off by default.
Version 0.1.22 adds an opt-in discovery budget of up to 100,000 files
(ATTOCODE_INTEL_DISCOVERY_MAX_FILES; the default stays 50,000). It also packages
the LLM client, so ATTOCODE_FLAG_CONFIDENCE=llm and LLM rule synthesis work from
a PyPI install when an OpenRouter or Anthropic key is set.
Version 0.1.21 includes configured search-discovery coverage, OCaml interface parsing and more conservative Go/Rust fallback evidence. The existing 100 ms native budget and 50,000-file discovery safety ceiling remain; bounded fallback is heuristic.
Version 0.1.20 improves native OCaml/Perl call candidates and conservative workspace import candidates for OCaml, Perl and Crystal. Physical paths and ambiguity remain guarded; native limits, ranking and dependencies are unchanged. Optional grammars must be explicitly available before analysis; navigation never downloads them.
Version 0.1.19 restores source text into spare space after fitting a complete compact search page. Existing hits, visible text, source lines and continuations remain protected within the same response budget; ranking and retrieval are unchanged.
Version 0.1.7 also provides changes and trace commands: investigate a diff,
follow source-backed caller paths, export JSON/Markdown, and check or refresh saved
evidence. MCP equivalents change_context and trace_flow are local full-profile
tools. Version 0.1.8 adds exact file/symbol selection and bounded changed-class
summaries, with --class-mode expand for class-wide callers. Version 0.1.9 keeps
Python docstrings and parameter types, and lists impact results nearest first.
Version 0.1.10 shows the best test hit second for "tested" searches, and counts
Swift Tests/ folders as tests. Version 0.1.11 counts more test file names as
tests, such as _test.dart and Perl .t scripts and t/ modules. Version
0.1.12 makes doctor --client claude read the local-scope entry that
claude mcp add writes to ~/.claude.json. Version 0.1.13 fills compact search
pages within their budget, offers bounded deeper searches, and repairs stale
navigation indexes after successful restart parsing. Version 0.1.18 restores the ready phase after a failed snapshot load is followed by a complete fallback rebuild. Incomplete recovery stays guarded.
Version 0.1.17 lets a later explicit inspection retry a failed selected-file parse after a one-second cooldown, preserving immediate-repeat and source guards. Version 0.1.16 stabilizes tied symbol pages and reduces the Docker image while preserving runtime contracts. It adds bounded online maintenance evidence; the preview and restart experiments did not justify product changes. Version 0.1.15 adds parser ownership by thread, one language-server stderr reader, bounded native recovery without static callers and release install verification on GitHub runners. Version 0.1.14 adds bounded selected-file recovery, safe navigation publication, guarded Elixir definitions and doctor probe identity. See the change investigation guide.
The agent sees 16 tools (the daily profile):
- When the agent knows a symbol,
inspect_symbol(symbol_name="...", task_hint="...")gives the definition, the source, the references and candidate tests in one call. - In an unfamiliar repository,
bootstrap(task_hint="...")finds the relevant code and gives a map. impact_analysisandsuggest_testshelp plan the checks for a change.
For all tools (about 140: rules, security scans, history, snapshots and more), add --profile full to init. The tool catalog lists them. The search details page describes ranking, the response format and the experimental rerankers.
For an experimental local seven-tool surface (0.1.5 or later), use
init --profile lean and restart your client. It advertises bootstrap,
search_symbols, inspect_symbol, semantic_search, impact_analysis,
suggest_tests and capabilities, with conditional routing instructions
and 2,000-token responses. Without file watching, notify_file_changed
is an eighth tool. Advanced tools require a full-profile session.
This opt-in profile has no demonstrated completion benefit; see the
completed pilot.
Commands for people
Run these in your project:
Search matches the words of the code and its paths. It does not use embeddings unless you install the semantic extra.
What we measured
- Search. We ran the 560 issues of Loc-Bench V1, with the full issue as the query. For 53.2% of them, the first five files held all files of the fix (file Acc@5 0.532). On a mix of 10 public benchmarks, file Acc@5 was 0.425. See the first-stage results and the matrix results.
- Agents. In four studies, Claude Code (Sonnet 5.5) named the files to edit for an issue. The server did not raise file Acc@5. Each run with the server cost 1.4 to 2.1 times as much. When the agent could choose, it seldom called the server. See the agent pilot and study R3.
The R6 review study found no demonstrated review benefit. The completed R7 repair pilot also found no demonstrated benefit; its reviewed decision is to stop expansion. The 2026-10-22 investigation pilot stopped incomplete after its first task pair because structured-output/tool calls failed the frozen protocol. It provides no quality, cost or time benefit evidence.
Limits and troubleshooting
- First search. The first tool call starts the index build. A search waits up to 15 seconds for the index. On a large repository, a search can report that the index is warming. Then search again. An empty result during warm-up does not prove that the code is absent.
- Index location. The index is in
.attocode/in your project. When the server makes that folder, it adds a.gitignore, so the index stays out of commits. - What the index reads. By default the server discovers at most 50,000 eligible files and skips files over 1 MB. From 0.1.22, the discovery budget setting allows an explicit limit up to 100,000; the selected index can be smaller under its independent file limit. It skips files that
.gitignoreignores, and folders that start with a dot. It also skips folders nameddist,build,out,output,target,env,tmp,vendororcoverage, and binary, media and lock files. If a build-named folder contains real source, explicitly re-include it with a root.gitignoreentry such as!dist/; discovery and edit refresh honor that override. - Languages. The base install parses Bash, C, C#, C++, CSS, Elixir, Go, HCL, HTML, Java, JavaScript, JSON, Kotlin, Lua, PHP, Python, Ruby, Rust, Scala, Swift, TOML, TypeScript, YAML and Zig. Optional grammars are loaded only when already installed or cached; installing the
tree-sitter-allextra does not trigger grammar downloads during navigation. A slow grammar falls back after a 100 ms parse budget. Static imports and references are partial evidence, not compiler/type resolution. - Degraded parsing (development builds). Selecting a missing definition in
a file with a recorded native parse failure permits one bounded retry for
that source/parser generation. A failed retry reports partial evidence and
an
attocode-code-intel notifycommand to queue a file refresh. Empty results and ordinary syntax errors do not trigger this recovery. - Test paths. Search and test suggestions recognize conventional test folders and filenames, plus supported Kotlin/Android source sets directly under
src(for examplecommonTest,jvmTest,androidHostTestandandroidDeviceTest). Helpers in those sets count as test code even without a test filename. Custom target or flavor names are not inferred from aTestsuffix alone. Short queries explicitly asking for tests put recognized test files first, preserving order within each group; longer issue descriptions keep source-first behavior. Suggestions can include helpers; verify the actual runnable tests. - Remove the setup. Run
attocode-code-intel init --remove. It restores an entry that existed beforeinit. - Server does not answer. Run
attocode-code-intel doctor. If a client shows "not configured", runinitfor it. After a change, restart the agent. In Claude Code,/mcpshows the server state. - HTTP server.
attocode-code-intel --transport httpneeds thehttpextra. It serves only this computer unless you setATTOCODE_API_KEY.
For one installation for all repositories, use init --global. A global server works on the repository of its working directory, or on the workspace that a tool call names.
Teams and remote agents
Self-hosting and migration covers PostgreSQL, Redis, workers, authentication, and the dashboard. The service serves native Streamable HTTP MCP at /mcp/. The dashboard provides connection snippets and knowledge editing.
Set ATTOCODE_API_KEY in the agent's environment. Use intelligence:read for analysis and add intelligence:write for knowledge changes. Every repository operation checks membership and scope before using cached analysis. Results identify repository, source, commit, index coverage, and truncation. PostgreSQL stores shared knowledge with authorship, revision, and file anchors.
Local and remote entries coexist. Remote calls analyze committed branches or explicit revisions. Local edits remain local. To copy a particular learning to your team, review and run an explicit share:
cross_repo_search searches explicitly selected authorized repositories and retains provenance on each result.
Development
The package is in packages/code-intel of the attocode repository.
For routine work, use .venv/bin/python -m eval.quality quick (two minutes)
or local (ten minutes). They isolate scratch and caches in a monitored 5 GiB
workspace and report incomplete runs separately from passes. The
quality guide covers pinned multi-language
workflow checks, storage inventory, cleanup and optional CPU cloud batches.
Releases use intel-v* tags (release guide).
Product and operations guide · Tool catalog · Search details · Changelog · MIT license
Source: packages/code-intel/README.md at commit 7366913
Tools
0Version history
4- v0.1.26LatestNov 4, 2026
- v0.1.25Nov 3, 2026
- v0.1.24Nov 1, 2026
- v0.1.23Nov 1, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts