Llmgraph

io.github.brainfoods-studio由 GitHub 帳號 brainfoods-studio 發布v0.4.7更新於 Nov 5, 2026

Who calls this, what breaks, which callers an edit missed: labelled answers. Windows, Python, TS/JS.

已驗證STDIO僅桌面知識與記憶開發者工具

概覽

AI 產生的概覽

本機 MCP 伺服器,為程式開發助理提供有憑據的呼叫圖答案:誰呼叫了某個函式、改動會破壞什麼,以及它看不到什麼。

可以做什麼
  • 找出某個函式的所有呼叫點,並列出無法追蹤的呼叫
  • 追蹤直接或間接依賴該函式的所有位置
  • 檢查已儲存的修改中漏掉未更新的呼叫端
  • 回報盲區,例如動態呼叫、未知型別與無法讀取的檔案
  • 解釋某一條答案背後的憑據
  • 以從 certain 到 cannot_see 的標籤標示每條答案的可信程度
適用情境
適合助理修改或重構 Python、TypeScript/JavaScript 程式碼時,需要知道哪些呼叫點會出錯,尤其是同名函式讓文字搜尋難以區分的情況。也適合希望助理明確回報無法驗證之處、而非憑猜測的情況。
執行需求
透過 npx 以 stdio 在本機執行(Windows x64;部分助理需使用 cmd /c npx)。僅支援 Python 與 TypeScript/JavaScript。需要一次性 Google 登入、邀請制測試版方案(含試用),並需連網存取廠商網站進行授權檢查。可用 --repo 或 LLMGRAPH_REPO 指定專案資料夾。
安裝前請注意
引擎為閉源,依 EULA 在本機執行;授權檢查一律開啟。使用統計與當機報告預設開啟,可用 telemetry off 指令關閉。外掛在已儲存的修改留下確定會中斷的呼叫時可能攔截助理一次,可用 hook off 關閉。程式碼在本機分析,但伺服器會連線至廠商網站。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Llmgraph,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

[LLMGRAPH: every call graph has blind spots. Ours tells you where they are.]

LLMGRAPH by Brainfoods Studio: the truth layer for coding agents

Every call graph has blind spots. Ours tells you where they are.

[Agent Rules]

A local MCP server and Claude Code plugin that tells your coding agent who calls a function, what breaks if it changes, which callers an edit missed, and what it can't see. Windows x64; Python and TypeScript/JavaScript. Real answers, no sign-up: beta.llmgraph.in/docs/real-answers.

LLMGRAPH inks only the calls it can prove. The ones it can't see, it counts and names in plain words, so your agent sees the blind spots before it edits.

I built LLMGRAPH as the truth layer for coding agents, and the truth includes the blind spots: agents guess; LLMGRAPH proves what it can and names what it can't. In a blind test of 50 questions on three open-source repos, no confident answer was wrong.


Two functions. One name. Your agent can't tell. We can.

grep reads names. LLMGRAPH follows calls. What it can prove, it proves; what it can't, it tells you, down to the line where it stopped.

zod ships two copies of addIssueToContext. A text search mixes them together:

text
$ rg -n addIssueToContext      # zod v3.23.8146 lines, from both copies, mixed together

LLMGRAPH separates them, and shows its work:

text
llmgraph · who_calls addIssueToContext (src/helpers/parseUtil.ts:72): 71 in a set  ⚠︎ type checker starting: answers use our own reading for now; 71 calls unchecked  ◇ within_these 71 calls -> one of 1 (closed: repo only) [c] w1  ⚠︎ plus 7 dynamic calls nearby that could reach anything w2  – ruled out: 71 same-name calls (proven: other target) [c] w3  assumes [c]: our own reading, not confirmed by the checker(lines trimmed)

71 look-alikes ruled out, and it shows why. And where the type checker hasn't confirmed yet, it says so.

Who's holding the other end?

Before your agent pulls a thread, it should know. In requests, change super_len(o) to super_len(o, strict), and ask check_my_changes:

text
llmgraph · check_my_changes: 1 file changed, 16 calls break  16 breaks: misses "strict" w1  ⚠︎ breaks if it runs super_len src/requests/models.py:526 PreparedRequest.prepare_body (within_these, one of 1, closed: repo only) [c] w2  ⚠︎ breaks if it runs super_len src/requests/models.py:575 PreparedRequest.prepare_content_length (within_these, one of 1, closed: repo only) [c] w3  ⚠︎ breaks if it runs super_len tests/test_utils.py:62 TestSuperLen.test_io_streams (within_these, one of 1, closed: repo only) [c] w4  … 13 more test call sites  ⚠︎ plus 9 dynamic calls nearby that could reach super_len w18(lines trimmed)

16 broken calls named, exactly the real ones. A blind tester's text search found the same 16, no more and no fewer. And the 9 dynamic calls it can't follow are marked, not ignored.

Then the type checker catches up. Ask again a few seconds later:

text
llmgraph · who_calls super_len (src/requests/utils.py:135): 16 certain  ✓ certain src/requests/models.py:526 PreparedRequest.prepare_body w33  +1 more (all certain, same file) w34  ✓ certain tests/test_utils.py:62 TestSuperLen.test_io_streams w35  +13 more (all certain, same file) w36  ⚠ plus 9 dynamic calls nearby that could reach anything w37(lines trimmed)

From "our own reading" to 16 certain, on the released program. Its labels never say more than it has proven, and they upgrade the moment it can.

The five labels

Other tools sketch your codebase from rumour and fill the blind spots with confidence. LLMGRAPH works in two colours: ink for what it has proven, a plain warning for what it hasn't, and never one dressed up as the other.

LabelWhat it means
certainWe can prove it is exactly one function.
exactly_theseA known set, and every member really can run here.
within_theseOne of a known list; some listed may never happen here.
maybe_moreThere are candidates, but the door is open.
cannot_seeNothing to go on.

Answers carry no numbers about chance; they say what is ruled out.

Measured on our test projects

Callers are confirmed by the type checker in under a second after your agent asks (Python), and check_my_changes answers in under a second once LLMGRAPH has caught up with a save. On names that also appear in unrelated code, it named no wrong callers where a plain text search returned hundreds of wrong lines, and the agent read less than half as many tokens; on clean, unique names there is no saving.

How we measured, the raw data, and where LLMGRAPH loses: BENCHMARKS.md.

See real answers, no sign-up needed: beta.llmgraph.in/docs/real-answers.

What your agent can ask

ToolWhat it answers
who_callsEvery place that calls this function, plus calls we can't see.
what_breaks_if_changedEverything that depends on this, directly or indirectly, and what we can't see.
check_my_changesManual check of edits: callers you didn't update, and anything we can't see.
what_is_unknownWhere our view is blind (dynamic calls, unknown types, unreadable files) and why.
explainWhy we said this: the evidence behind one answer line.

Your code is read and analysed on your machine, and we never receive your code, paths, symbol or repo names, queries or answers. Checked on the released program: it contacts only beta.llmgraph.in. Usage counts and crash reports are on by default and can be switched off (npx -y llmgraph-mcp telemetry off); the licence check is always on. Privacy page.

Install

Claude Code (plugin):

bash
claude plugin marketplace add brainfoods-studio/llmgraph-agent-pluginclaude plugin install llmgraph@llmgraph

The plugin offers LLMGRAPH's answer before your agent searches for a function or class name, and never blocks the search. When your agent is about to finish, it stops it once if the saved edits left calls that are certain to break, and lists them; it never blocks on anything less, and npx -y llmgraph-mcp hook off turns both off.

Any MCP agent: add the server npx -y llmgraph-mcp (on Windows some agents need cmd /c npx -y llmgraph-mcp), sign in once with Google, and your agent asks. Setup guides for Claude Code, Antigravity, Cursor, Codex, Gemini CLI, Windsurf and OpenCode; tested by us on Claude Code and Antigravity.

Which project it reads: the first answer of each session names it (project: <folder> (from <where>)). Without --repo it is the folder your agent names, else the folder the server started in. If that is not your project, reconnect llmgraph (in Claude Code, /mcp), or name the folder with --repo or LLMGRAPH_REPO in a project .mcp.json (the plugin's own entry names none, as it serves every project):

json
{  "mcpServers": {    "llmgraph": {      "command": "npx",      "args": ["-y", "llmgraph-mcp", "--repo", "C:\\work\\my-project"]    }  }}

Today's limits: Windows x64 · Python and TypeScript/JavaScript (other languages are reported as cannot_see, not counted as nothing) · repos up to the plan's line limit · invite-only beta, request an invite · one plan for individuals with a trial, prices.

This repo holds the open setup files under MIT; the LLMGRAPH engine is closed source and runs on your machine under the EULA. Brainfoods Studio, India · [email protected] · [email protected]

來源:README.md,提交 27408d6

工具

0
SourceWeft 曾在隔離沙箱中以無憑證方式啟動該軟體包一次,以列出其工具,但未能完成:伺服器未能啟動。

版本歷史

2
  1. v0.4.7最新Nov 5, 2026
  2. v0.4.6Oct 29, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分