PlugWiki
Codebase Memory logo

Codebase Memory MCP Server: Setup for Claude Code, Cursor and Other Apps

CommunityLocal
Getnpmcodebase-memory-mcpdeusdata/codebase-memory-mcp

Lets Claude, Cursor and other coding agents search your codebase as a map of functions and calls, instead of reading file after file.

Codebase Memory builds a map of your code (functions, classes, calls and routes) and lets your coding agent ask it questions. Ask who calls a function, trace where data flows, or see what a change could break. It runs on your computer as a single program, and the README says indexing and queries need no hosted service or API key.

It is a community project, not made by Anthropic, Cursor or any editor vendor. Say "Index this project" once, then ask your questions. The index lives locally and can also delete or rewrite its own data, so keep it to projects you want mapped.

Good for

  • Developers using Claude Code, Cursor or Codex on large repositories
  • Anyone who needs to know what a change could break before committing
  • New team members exploring an unfamiliar codebase
  • Teams that want code analysis to stay on their own machine

Works in

12 should work

Tap an app to see how to set it up and any known problems.

Install Codebase Memory MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the Codebase Memory MCP server to Claude Code. Run this command:
    
    claude mcp add codebase-memory -- npx -y codebase-memory-mcp
    
    Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js.

Built from the package data we hold. Not yet tested by us.

Tools

  • Scans a project folder and builds a searchable map of its code

    Reads the project on your computer and stores a graph of its functions, classes and calls. It can run in the background for large projects, and it keeps the map up to date while your session is open.

    Try: “Index this project.”

    Write · index_repository

  • Finds functions, classes and files by name, structure or meaning

    Searches the code map by structure, keywords or meaning, with paging for long result lists.

    Try: “Find the functions that handle user login.”

    Read · search_graph

  • Follows who calls what, and where data flows

    Traces callers and callees of a function up to 15 levels deep. Other modes follow data flow, calls between services, and what a deploy job runs.

    Try: “Who calls the function that charges a card?”

    Read · trace_path

  • Shows the source of one function

    Returns the source code of a function when you give its full name.

    Try: “Show me the code for the checkout handler.”

    Files · get_code_snippet

  • Lists what a file contains, in order

    Lists the functions, classes and other declarations in one file in the order they appear.

    Try: “Give me an outline of src/server.ts.”

    Read · get_file_outline

  • Gives a one-page overview of the codebase

    Summarises languages, packages, routes, busy spots and clusters of related code.

    Try: “Give me an architecture overview of this repo.”

    Read · get_architecture

  • Shows what kinds of things the code map holds

    Lists node and edge counts, relationship patterns and properties for each label. The README says to run it first.

    Try: “What does the code map for this project contain?”

    Read · get_graph_schema

  • Runs a custom read-only query on the code map

    Runs a read-only Cypher-style query for questions the other tools do not cover.

    Try: “Query the graph for functions with more than 20 callers.”

    Read · query_graph

  • Searches the text of indexed files, like grep

    Greps the indexed project files for text.

    Try: “Search the project for every use of API_BASE_URL.”

    Files · search_code

  • Shows what your uncommitted changes could break

    Maps your git diff to the functions it touches and rates the risk of each change.

    Try: “What could my current changes break?”

    Files · detect_changes

  • Compares two snapshots of the code map

    Reports which nodes and edges were added or removed between a base and a target snapshot.

    Try: “Compare the graph before and after this refactor.”

    Read · compare_graphs

  • Lists the projects that are indexed

    Lists indexed projects with paging. With detail set to stats it adds node and edge counts and database sizes.

    Try: “Which projects are indexed?”

    Read · list_projects

Read from the source code

Permissions

medium risk · 4 things to watch

Medium risk

The agent can read your code map and also delete a project's index or edit its decision record, though your source files are not changed. For an agent that should only look, start the server in its read-only profile.

What it can do

Watch out for

  • It reads your whole project and stores a copy of its structure

    The index holds function names, call links and code facts for every project you index. Index only repositories you are happy to keep on disk, and delete the project index when you are done. github.com

  • It can delete project indexes and rewrite decision records

    delete_project removes a project's graph data and manage_adr can replace the decision record. Your source files are not touched. Use the read-only profile if the agent should only look. github.com

  • The installer script changes your agent settings

    The recommended installer adds skills, agent profiles and hooks to detected clients. Use the skip-config option or the manual config if you want only the server. github.com

  • Windows Defender may flag the binary

    The README says a false positive is known and links its evidence. Check the release checksums before you run it. github.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Turning on read-onlyStart the server with --tool-profile analysis. This allows only 13 read tools (search, trace, outline, schema, architecture, status and change checks) and hides indexing, delete, ADR edits and trace ingestion. You need an index already built.
Sign-in and keysNo account or API key. The index is stored on your machine.

Questions

Is Codebase Memory official?

No. It is a community project by DeusData, not made by Anthropic, Cursor or any other client vendor.

Does it need an API key?

No. The README says indexing and graph queries need no hosted service or API key. Everything runs on your computer.

Does it send my code anywhere?

The README says it indexes and queries locally and collects no telemetry. Your assistant still sees any code snippets the tools return, so the usual rules of your AI client apply.

Can I run it read-only?

Yes. Start it with the analysis tool profile and it exposes only read tools, with no indexing, deleting or record editing. Index the project first with the normal setup.

Which clients does it work with?

Its installer lists 45 automatic or conditional client integrations, including Claude Code, Codex, Gemini CLI, Cursor and VS Code. Use the install box for the exact steps for your client.

How do I add it to Claude Code?

Use the Claude Code command in the install box, restart, then say "Index this project". The README also offers its own installer script and a Claude Code plugin.

Does the list show all tools?

Yes. The README lists 17 tools and the page lists all of them.

Information

updated Nov 2, 2026

Publisher
Community
Package
codebase-memory-mcp
Registry
npm
Transport
stdio
Version
0.12.1
License
MIT
Last commit
Oct 31, 2026
Open issues
470
Listed in
Official MCP registry

WebsiteGitHubnpmOfficial MCP RegistryChangelogIssues

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 2
  1. github.com · github.com
  2. github.com · github.com

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.