
Inquisitor
io.github.iamalissonPublished by GitHub account iamalissonv0.2.3Updated Oct 24, 2026
Hypothesis-driven problem solving for AI agents: probe, falsify, escalate.
Overview
A local MCP server that gives coding agents a hypothesis-driven debugging loop: web search, project analysis, code tracing, scaffolding and a persistent…
- What you can do
- Search the web across DuckDuckGo, Brave or SearXNG backends, with full-page and PDF content extraction
- Analyze a project's languages, frameworks, tests, dependencies and git history
- Trace a symbol's definition, callers and callees with file and line references
- Track a multi-phase investigation in a SQLite-backed state machine that persists across turns
- Verify that every phase of a deep investigation was recorded with cited evidence
- Scaffold a minimal new project after requirements are clarified
- When to use it
- Useful when an agent works on unfamiliar codebases or hard bugs where the root cause is unknown and spans several files, and you want the investigation to keep a failure ledger instead of blind retries. Also handy for quick web lookups of errors or library practices without an API key.
- Requirements
- Runs locally over stdio; needs uv and Python 3.12 or newer, launched with uvx inquisitor-mcp or from a checkout. No API key is required, since DuckDuckGo works out of the box. Optional environment variables: BRAVE_API_KEY or SEARXNG_URL for other search backends, INQUISITOR_SESSION_DIR for state storage, and others for timeouts, ranking and PDF extraction. Network access is needed for search and page fetching.
Installation
In SourceWeft
- Open Inquisitor in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
inquisitor
Hypothesis-driven problem solving for AI agents Probe · Falsify · Escalate — never overcomplicate, never blind-retry
Overview
inquisitor makes AI agents solve problems the way a chess engine plays chess: it cannot explore every branch, so it estimates complexity first, prunes paths that add no information, and spends its search budget only where the problem actually is.
It ships as two coordinated layers:
- MCP server (
inquisitor-mcp) — the engine. Web search, project analysis, code tracing, project scaffolding, and a persistent investigation state machine. Works with any MCP-compatible agent: OpenCode, Claude Code, Claude Desktop, Cursor. - Agent skill (
skills/inquisitor/SKILL.md) — the behavioral layer. Injects the probe-and-gate loop, the pruning rules, and the full methodology into the agent's reasoning.
The method is not invented here — it is assembled from primary sources: Newton's Analysis→Synthesis skeleton, hardened with the scientific method's own defenses against wrong assumptions (falsification, strong inference, competing-hypotheses analysis, anti-fixation reframes, pre-mortems) and constrained by engineering discipline (NASA/JPL's Power of Ten, surgical-change guidelines, the minimalism ladder). Every source is cited in Foundations.
Web search, codebase scans, and code tracing are tools invoked when local evidence is insufficient — never mandatory rituals.
How it decides
Depth is an output, not a label. An LLM's up-front difficulty guess is its least reliable signal — poorly calibrated, and biased to under-rate exactly the hard problems that matter. So inquisitor never classifies a problem before understanding it: it runs a cheap probe (the single cheapest action that could confirm or kill the best current hypothesis), and the probe's result — never the prediction — sets the depth:
Escalation is enforced, not just allowed. The probe is only a starting point: objective gate triggers (touching infra/deploy/routing/config, auth/security, data migrations, multi-file fixes, prod-only symptoms) force a minimum depth regardless of how "clear" the problem feels, and a 3-question confidence check (read the runtime path? can name the runtime signal? verified the platform assumption?) bumps the depth up per unanswered question. Downgrades need cited evidence, never a feeling. Inflated ceremony is not allowed either — a 7-phase investigation of a typo is as wrong as a blind guess at a race condition.
Retry is never blind. "Loop until it passes" agents (the Ralph-loop pattern) have persistence but no memory: on failure they revert, flush, and re-roll — the same wrong idea, retried with fresh confidence. Inquisitor keeps a failure ledger instead: every dead hypothesis is recorded with the evidence that killed it, every retry must name what is different and why that changes the outcome, and two dead hypotheses from the same family force a reframe — re-audit an assumption, invert the question, widen the system boundary — never a third attempt at the same idea. Persistence with memory, creativity on evidence.
Foundations
Each rule in the method traces to a primary source. The left column is the citation; the right column is the exact mechanism inquisitor takes from it.
The scientific method
Engineering discipline
Installation
Requires uv and Python 3.12+.
Claude Code — plugin install (recommended)
inquisitor ships as a Claude Code plugin that installs both the skill and the MCP server — no cloning, no editing absolute paths, no manual symlink.
From within Claude Code, first add the marketplace:
Then install the plugin:
That's it. The plugin bundles the inquisitor-mcp server (registered automatically via ${CLAUDE_PLUGIN_ROOT}) and the inquisitor skill. uv syncs the server's dependencies on first launch. Update later with /plugin marketplace update inquisitor.
Prefer to point at a local checkout instead of GitHub?
/plugin marketplace add /path/to/inquisitorworks too.
For OpenCode and Claude Desktop (which don't use Claude Code plugins), or for a manual Claude Code setup, use the steps below.
Step 1 — Get the server
Option A — no clone (recommended). Once published to PyPI, uvx fetches and runs it on demand — no clone, no absolute paths:
You'll reference uvx inquisitor-mcp directly in the config below.
Option B — from a checkout (for local development, or before the PyPI release):
The clone path is up to you — just use the same absolute path in the config below.
~does not expand inside JSON config files, so write the full path (e.g./home/you/tools/inquisitor).
You do not run the server manually. It's a stdio MCP server: your agent spawns and manages it automatically. (If you run it by hand it prints a ready message on stderr and waits silently — that's normal.)
Step 2 — Register the MCP server with your agent
OpenCode — add to ~/.config/opencode/opencode.json (global) or ./opencode.json (per-project):
Claude Code — add to .mcp.json in your project, or ~/.claude.json for all projects:
Claude Desktop — same mcpServers block in claude_desktop_config.json (Settings → Developer → Edit Config).
Using a checkout instead of
uvx? Swap the command foruvwith args["run", "--directory", "/home/you/tools/inquisitor", "inquisitor-mcp"].
Step 3 — Install the skill (the behavioral layer)
Symlink it so it stays up to date with the repo:
(Copying the folder works too — you'll just need to re-copy after updates.)
Or, no clone — install just the skill across agents with the skills CLI:
(This installs the skill only. For the inquisitor_* tools you still need the MCP server from Steps 1-2 — or use the Claude Code plugin above, which bundles both.)
Step 4 — Restart your agent
Config is loaded at startup. Quit and reopen OpenCode / Claude Code, then verify:
the inquisitor_* tools appear in the tool list, and the inquisitor skill is available.
Tools
Example: inquisitor_search
Example: phase tracking (Deep path)
Project Structure
The backend/ package is importable standalone — no MCP required:
Environment Variables
No API key is required — DuckDuckGo works out of the box.
PDF extraction
Search results and fetched URLs that are PDFs (RFCs, specs, papers, datasheets) are extracted, not skipped. The default policy is auto, which uses pypdf (pure-Python, fast, no models, handles text PDFs) unless docling is installed and a GPU is present.
For complex tables or scanned/OCR PDFs, install the optional docling backend:
docling is heavy (pulls in torch + ML models) and slow on CPU, so auto only uses it when it's installed and a GPU is present; otherwise it falls back to pypdf. Force it with INQUISITOR_PDF_BACKEND=docling (works on CPU, just slower), or pin pypdf with INQUISITOR_PDF_BACKEND=pypdf. Any docling failure falls back to pypdf, so a PDF read never hard-fails.
Security
- SSRF guard: content fetching refuses non-http(s) schemes and loopback / private / link-local / metadata targets (
localhost,127.0.0.1,10.x,192.168.x,169.254.169.254, …). - Path traversal guard: session names are sanitized before touching the filesystem.
- No shell execution: subprocess calls use argument lists, never
shell=True. - Parameterized SQL throughout the session store.
- The server runs locally over stdio with your user's privileges — it does not listen on the network.
Companion skills
inquisitor is a router as much as an investigator — it delegates to purpose-built skills (/tdd, /code-review, …) when one fits, but it never installs them for you. See docs/companion-skills.md for the curated set worth installing alongside it (mattpocock/skills, spec-kit, last30days, ponytail, gstack) and design references.
Development
Tech
- uv — package manager
- FastMCP — MCP server framework
- ddgs / httpx — search + HTTP
- trafilatura + readability-lxml — content extraction (two-tier fallback)
- SQLite — investigation state
- pytest / ruff — tests and lint
Acknowledgments
Research sources are cited in Foundations. The implementation additionally builds on:
- andrej-karpathy-skills (forrestchang) — behavioral guidelines derived from Andrej Karpathy's observations on LLM coding pitfalls.
- ponytail (Dietrich Gebert) — the decision ladder and the lazy-senior-dev discipline.
- last30days-skill (mvanhorn) — inspiration for multi-source research design and the SKILL.md-as-contract pattern.
Licensed under MIT.
Source: README.md at commit 38bd43b
Tools
0Version history
1- v0.2.3LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts