Depwire logo

Depwire

by depwire

Maps code dependencies for AI assistants with deterministic parsing, impact analysis, security checks, and architecture visualization.

Install Depwire

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "depwire-depwire": {
      "command": "npx",
      "args": [
        "-y",
        "depwire-cli"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

We couldn’t confirm it starts correctly

We ran the install command but it didn't respond within our test window — this can mean a slow first-time install rather than a real problem.

npx -y depwire-cli

No response to initialize.

This is an experimental automated check and can have false negatives — missing environment variables, a slow cold install, etc. It doesn’t necessarily mean something’s wrong. Last checked 29d ago.

Overview

depwire/depwire MCP server gives AI coding assistants deterministic dependency context for a codebase. It uses tree-sitter to parse symbols and relationships across 17 programming languages, then exposes the resulting graph through MCP tools. Use it when an agent needs symbol-level impact analysis, change simulation, security checks, or architecture context before editing code. Processing runs locally, and the security scanner does not require an API key.

Use cases

  • Inspect symbol-level dependency relationships before editing code
  • Simulate the blast radius of deleting or changing a symbol
  • Scan a local repository for security issues without an API key
  • Visualize repository architecture and dependency structure
  • Compare structural changes between commits

Key features

  • Deterministic tree-sitter dependency parsing
  • MCP access to local codebase graph data
  • What-if impact simulation
  • Dead code detection and health scoring
  • Security scanning without an API key
  • Multi-language and cross-language analysis

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 1d ago

Recent health check succeeded.

20/20 checks healthy over the last 79d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 1d ago via OSV.dev · depwire-cli (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars65Stargazers on the source repository.
npm downloads3kPackage downloads in the last 30 days.
Last commit14d agoMost recent push to the default branch.
Install checkInconclusiveDidn't respond in our test window — often a slow first install.
Directory activity5 viewsConfig copies, upvotes, and views on AllMCPs.

How Depwire works

What depwire/depwire does

The depwire/depwire MCP server maps a repository at symbol level rather than only tracking packages or files. Its graph includes functions, classes, interfaces, imports, exports, and related dependency edges. This lets an AI coding assistant inspect how a proposed change may affect other parts of the codebase.

Parsing is based on tree-sitter and is described as deterministic rather than embedding- or retrieval-based. The project lists support for 17 languages, including TypeScript, JavaScript, Python, Go, Rust, C, Java, PHP, Ruby, Dart, R, C++, C#, Kotlin, Swift, and Mojo. The repository also identifies HTML and Angular support.

How it works

The depwire/depwire MCP server builds a local dependency graph from source files and makes focused graph information available through MCP. An agent can use that context instead of requesting broad file contents when it needs to understand callers, imports, exports, or likely downstream effects.

The repository describes the graph as symbol-level, which distinguishes it from build tools that generally represent package-level relationships. Its analysis includes what-if simulations for evaluating a proposed deletion or change, structural comparisons between commits, and pre-action verification. A temporal graph can represent how the code structure changes over time.

The project states that code parsing runs on the local machine and that source code is not sent to a cloud service. Its security scanner does not require an API key. The README also cautions that previously published benchmark conclusions were withdrawn after an audit, so those results should not be used to assess performance or correctness.

Setup and configuration

Install the command-line package globally with:

Terminal
npm install -g depwire-cli

The documented commands include:

bash
depwire whatif
depwire security
depwire viz

These commands respectively support change-impact simulation, security analysis, and architecture visualization.

Tools and capabilities

The depwire/depwire MCP server provides MCP access to dependency-graph data and related analysis. Supported capabilities described in the repository include:

  • Symbol- and import-level dependency inspection
  • What-if analysis for proposed code changes
  • Dead code detection
  • Architecture health scoring
  • Security scanning without an API key
  • Arc diagram visualization
  • Temporal graph analysis
  • Structural diffs between commits
  • Pre-action verification for AI-generated changes
  • Cross-language edge detection

The project describes the MCP interface as providing 24 tools in its README badges and infrastructure section.

Limitations and notes

Results depend on the parser’s language support and the source structure it can analyze. The repository reports that parser fixes in version 1.9.0 changed symbol counts, edge counts, and health scores for several languages, so older example measurements should not be treated as exact for current versions.

The package is licensed under BUSL-1.1.

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Depwire

The documented package installation is `npm install -g depwire-cli`.

The repository states that its security scanner requires no API key and that parsing runs locally.

It supports dependency inspection, what-if simulations, pre-action verification, structural commit diffs, dead code detection, health scoring, and security scanning.

Related MCP servers

Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewDepwire AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/depwire-depwire?style=directory)](https://allmcps.com/mcp/depwire-depwire)
HTML Embed
<a href="https://allmcps.com/mcp/depwire-depwire"><img src="https://allmcps.com/api/badge/depwire-depwire?style=directory" alt="Depwire on AllMCPs" /></a>