AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
MCP verified Apache-2.0 Self-run

CodeDebrief

mcp-ferdinandobons-codedebrief · by ferdinandobons

Local-first static analysis that turns source code into deterministic, source-grounded workflow maps for coding agents via MCP.

No reviews yet
0 installs
37 views
0.0% view→install

Install

$ agentstack add mcp-ferdinandobons-codedebrief

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/mcp-ferdinandobons-codedebrief)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
3mo ago

Declared compatibility

Claude CodeClaude DesktopCursorWindsurf

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of CodeDebrief? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Source-grounded workflow diagrams for coding agents and codebase exploration.

Website · Quick Start · Agent Workflow · Manual Viewer · Changelog

CodeDebrief turns a local codebase into deterministic workflow flowcharts that coding agents can inspect, render, expand, translate, and explain. It statically maps entrypoints, decisions, branches, internal calls, returns, exceptions, and outcomes before the agent answers, so the visual explanation is grounded in reusable artifacts instead of a fresh best-effort reconstruction.

The analyzer, artifacts, viewer, and MCP server are local-first and do not require an LLM provider key. CodeDebrief is not a documentation generator, a bug finder, a generic graph database, or an LLM enrichment service; it is a workflow navigation layer for understanding how code paths actually connect.

Example output: a compact presentation layer generated from local CodeDebrief artifacts. Canonical workflow visuals are vertical by default; horizontal diagrams are used when the user explicitly asks for a compact overview.

> Status: pre-1.0 alpha. The model is versioned, but schema and MCP payloads may evolve > before 1.0. Latest release: > v0.17.0.

Quick Start

CodeDebrief requires Python 3.10 or newer. Install it from PyPI with uv:

uv tool install codedebrief
codedebrief setup claude

Replace claude with codex, gemini, or cursor for another supported agent surface. To analyze only selected folders while keeping codedebrief-out in the current project root, pass them during setup:

codedebrief setup claude --source backend/ frontend/

For a multi-repo workspace, create or choose one folder to hold CodeDebrief config and artifacts, then point --source at the repos:

mkdir pipeline-map
cd pipeline-map
codedebrief setup claude --source ../ingest-service ../transform-service ../warehouse-ui

Scope size matters. Pointing CodeDebrief at the whole repository or at many large folders can materially increase setup, update, and MCP response times because there are more files to hash, parse, link, and search. Prefer the smallest source roots that still contain the workflows you want agents to explain.

MCP responses are bounded by token_budget. If an agent passes an explicit budget, CodeDebrief honors it. For broad agent_context requests that use the default budget, CodeDebrief automatically raises the effective budget on large projects so the first slice has enough room without forcing the agent to retry with a bigger request.

After setup, ask ordinary questions:

Show me the checkout workflow.
Which branches handle a failed payment?
What workflows are affected by this file?
Where is this status handled?
Expand this workflow one level deeper.

For manual exploration:

codedebrief view

setup keeps CodeDebrief-owned config and artifacts in codedebrief-out/ by default:

codedebrief-out/
├── codedebrief.toml       optional project config created by setup
├── codedebrief.html        local interactive full-project viewer
├── codedebrief.md          reviewable Mermaid flowcharts
├── codedebrief.json        canonical model for MCP, CI, scripts, and the viewer
├── codedebrief.hash.json   model hash sidecar for faster MCP cold starts
└── codedebrief.errors.jsonl saved CLI/MCP diagnostics, when errors occur

Provider-required files still live where the client expects them, for example .mcp.json, AGENTS.md, CLAUDE.md, GEMINI.md, .cursor/rules/codedebrief.mdc, and agent skill directories.

For explicit refresh during development:

codedebrief update
codedebrief validate --check-sync

The default CLI output is intentionally compact. Add --verbose to setup, update, validate, or doctor when you need detailed progress and file paths.

To inspect saved local errors from failed CLI/MCP operations:

codedebrief doctor --errors
codedebrief doctor --errors --clear

To remove CodeDebrief from the current project folder:

codedebrief clear

clear removes codedebrief-out/, legacy root codedebrief.toml, .codedebriefignore, installed CodeDebrief skills, MCP server entries, and managed instruction blocks. It asks for confirmation by default; use codedebrief clear --yes in scripts.

To install a pinned GitHub release instead:

uv tool install "git+https://github.com/ferdinandobons/CodeDebrief.git@v0.17.0"

Or install from a source checkout:

git clone https://github.com/ferdinandobons/CodeDebrief.git codedebrief
cd codedebrief
uv tool install .

Why It Exists

A coding agent can reconstruct a workflow from raw source, but that reconstruction normally depends on the searches it performs, the files it selects, and the context it has room to read. Repeating that process is slow, and less obvious branches or cross-file paths can be left out.

CodeDebrief creates a reusable navigation layer before the agent explains anything:

  • entrypoints, decisions, branches, calls, outcomes, and source ranges;
  • domain concepts such as statuses, roles, permissions, enums, and feature flags;
  • affected-workflow context for changed files, symbols, flows, and dependency paths;
  • canonical visual slices with stable diagram hashes;
  • optional language-friendly labels derived as a presentation layer from analyzer facts.

Where It Fits

CodeDebrief does not replace maintained project documentation. Documentation should capture architecture, intent, invariants, conventions, operational knowledge, and why important decisions were made.

CodeDebrief serves a faster and narrower need: inspecting the workflow encoded in the current source while brainstorming, debugging, planning a change, or reviewing impact. Use it to:

  • visualize one focused part of a workflow on demand;
  • follow decisions and internal calls across files;
  • inspect workflows affected by a file, symbol, or planned change;
  • give a coding agent a shared structural slice to reason over immediately.

Documentation explains the system over time. CodeDebrief provides an on-demand visual slice of the current source when you need to reason about it. Any agent-written explanation or language-friendly label is a presentation layer over the analyzer-generated flowchart, not the source of the flowchart itself.

The generated agent instructions treat CodeDebrief artifacts as part of done for workflow-relevant changes: after meaningful source, route, config, or agent-instruction edits, run codedebrief update and codedebrief validate --check-sync before finalizing or committing so MCP answers, Markdown summaries, and codedebrief view use current graphs.

What You Can Verify

A returned workflow_slice can expose:

  • source ranges for modeled steps;
  • explicit decisions, branches, calls, and outcomes;
  • callers, callees, and unresolved-call context;
  • omissions caused by token budget, ambiguity, stale artifacts, or unsupported capabilities;
  • stable handles for expanding the slice, tracing a path, or opening the related visual.

These signals make the source-level model inspectable. They do not prove business correctness or runtime behavior.

Map First, Then Explain

Once setup has configured the project MCP server and agent instructions, supported agents should start code-logic questions with MCP agent_context. The agent receives a bounded workflow_slice before deciding whether it needs more source, a deeper slice, or a path trace.

Show me a visual workflow for the invitation system.
Explain this code path with a source-grounded flowchart.
Which workflows are affected by this change?
Where is this status handled?
Expand the omitted branches in this workflow_slice.
Rewrite the diagram labels in plain English.

The agent can explain the flowchart, but the static analyzer creates the underlying map.

Setup

Supported targets:

codedebrief setup codex
codedebrief setup claude
codedebrief setup claude --source backend/ frontend/
codedebrief setup claude ../my-app --source backend-api frontend/src
codedebrief setup claude ../pipeline-map --source ../repo-a ../repo-b
codedebrief setup cursor --full

The selected target controls which files are written:

| Target | Files | | --- | --- | | codex | AGENTS.md, .agents/skills/codedebrief/SKILL.md, project MCP config | | claude | CLAUDE.md, .claude/skills/codedebrief/SKILL.md, project MCP config | | gemini | GEMINI.md, .gemini/skills/codedebrief/SKILL.md, .gemini/settings.json MCP config | | cursor | .cursor/rules/codedebrief.mdc, project MCP config |

setup writes only that target's files. Run it separately for each agent surface you want to configure.

setup creates codedebrief-out/codedebrief.toml when needed, installs the selected agent instruction file, installs a provider-native CodeDebrief skill where supported, registers project-scoped MCP where supported, generates initial artifacts, runs doctor, and validates the result. Use --source to set source_roots before that initial artifact generation starts.

On Windows, run setup in the same environment that will run the coding agent when possible. If you run setup from WSL inside a /mnt/c/... project, CodeDebrief writes JSON MCP configs that launch the server through wsl.exe with --cd and bash -lc "codedebrief mcp .", so Windows-native agent clients do not receive a raw WSL path as their command target.

The gemini target follows Gemini CLI / Antigravity conventions: GEMINI.md provides project context, .gemini/skills/codedebrief/SKILL.md provides provider-native workflow guidance, and .gemini/settings.json registers the project-scoped CodeDebrief MCP server.

Agent Workflow

For natural-language questions, agents should start with MCP agent_context.

agent_context returns a workflow_slice with:

  • normalized intent and task type;
  • primary and supporting flows;
  • ordered source-grounded steps;
  • decision nodes, branches, values, and outcomes;
  • calls, callers, callees, and unresolved call context;
  • domain logic for relevant state-like concepts;
  • source ranges the agent can cite;
  • visual handles for snapshot_slice and codedebrief view;
  • omissions caused by token budget, ambiguity, stale artifacts, or unsupported capability;
  • follow-up tools for expansion, path tracing, focused explanation, and snapshots.

When a user asks for a visual workflow, the agent should first render the deterministic Mermaid visual returned by CodeDebrief:

  1. Render workflow_slice.presentation.canonical_visual.diagram exactly as returned only

when the client renders Mermaid inline.

  1. If the client cannot render Mermaid inline, use snapshot_slice with

include_svg=false and provide the returned .mmd or Mermaid Markdown artifact before prose. Do not paste a long Mermaid code block as the primary visual unless the user asks for raw or copyable Mermaid. These generated files are meant to be opened with the best available local preview path, for example by opening the Markdown artifact in VS Code and using Markdown or Mermaid preview support.

  1. Use SVG snapshot artifacts only when the user explicitly asks for SVG or local

inspection. They are not the canonical chat visual.

The model may choose the first visible depth, but the text inside shown blocks must come from CodeDebrief payloads. After the visual, the answer should include a short high-level written flow in the user's language, derived from ordered steps, selected flows, decisions, domain logic, and source ranges. That written flow should explain the happy path first and include only the branches needed by the request. The answer should also say that the diagram is a bounded summary and can be expanded. If the user wants a more language-friendly view, the agent may rewrite both labels and the written flow in the user's language as a separate presentation layer, preserving ids or source anchors and without adding facts.

MCP Surface

Primary MCP tools:

| Tool | Purpose | | --- | --- | | agent_context | Default entrypoint for natural-language questions and changed-code context. | | expand_slice | Widen or deepen a workflow slice from stable flow handles. | | workflow_path | Trace a deterministic path between flows, symbols, or concepts. | | snapshot_slice | Render a deterministic visual snapshot for a slice. | | explain_flow | Explain one flow with ordered steps, decisions, calls, and source anchors. | | explain_node | Explain one flowchart node with local edge and source context. | | explain_edge | Explain one modeled edge with source context. | | validate_artifacts | Check generated model validity and optional JSON/Markdown sync. | | update_codedebrief | Refresh JSON, Markdown, and HTML artifacts from local source. |

Use codedebrief view for the manual UI. The CLI intentionally stays small: setup, update, view, validate, doctor, clear, and mcp.

Generated Artifacts

| File | Commit? | Purpose | | --- | --- | --- | | codedebrief.json | Yes | Canonical model consumed by MCP, CI, scripts, and the viewer. | | codedebrief.md | Yes | Generated inspection artifact with Mermaid flowcharts. It is not a replacement for maintained project documentation. | | codedebrief.errors.jsonl | Usually no | Append-only local diagnostics for failed CLI/MCP operations. Inspect it with codedebrief doctor --errors. | | codedebrief.html | Usually no | Local interactive viewer generated from the model. |

Commit codedebrief.json and codedebrief.md when CodeDebrief is part of the project workflow. codedebrief validate --check-sync verifies that the JSON model matches current source and that codedebrief.md was rendered from that model. Regenerate HTML locally when a human needs the viewer.

codedebrief doctor also reports legacy logicchart MCP server configs left from older installs. Re-run codedebrief setup for the affected agent to replace them with project-scoped codedebrief MCP config.

codedebrief doctor --errors shows recent saved diagnostics from codedebrief-out/codedebrief.errors.jsonl; use codedebrief doctor --errors --clear after you have resolved them.

codedebrief validate --quality reports analyzer health. Its call-resolution rate is based on project calls only: deterministic runtime, standard-library, DOM/browser, and dynamic receiver calls are counted separately as runtime_or_dynamic so they do not look like unresolved workflow edges.

Team Workflow

A simple shared workflow is:

  1. Run codedebrief setup in the project.
  2. Commit codedebrief.json and codedebrief.md.
  3. Let teammates pull the same source-grounded model.
  4. After workflow-relevant source, route, config, or agent-instruction changes, run

codedebrief update and codedebrief validate --check-sync before finalizing or committing.

The HTML viewer is normally regenerated locally rather than committed.

Manual Viewer

codedebrief view opens the complete interactive flowchart for a human. It is the official manual experience for broad exploration:

codedebrief view
codedebrief view --render-only --no-open

Example manual view: the interactive browser canvas for exploring scopes, files, entry points, and connected workflow flows.

Use the viewer when you need to inspect the whole project graph, navigate scopes, compare neighboring flows, or visually follow callers and callees. Use MCP when an agent should answer a bounded question with a focused workflow_slice.

Domain Logic

CodeDebrief extracts and aggregates domain concepts such as:

  • enum members;
  • status and lifecycle states;
  • roles and permissions;
  • feature flags;
  • handled values and the decisions that branch on them.

agent_context includes relevant domain logic inside the returned workflow_slice, wi

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.