Summary

One analysis returns a session id, and everything after that answers against it.

Sessions persist for 7 days and survive restarts, which is what makes the long tail of tools cheap enough to actually use — you are not re-parsing the repository per question. The credential story is unusual for a surface this size: local-first LLM detection, with a deterministic fallback that needs no key at all.

What it is

A code architecture suite exposed over MCP: 150 tools, 8 resources and 2 prompts across structure analysis, refactoring guidance, security and compliance reporting, and a document knowledge graph.

What you get

Structure: grasp_file_deps, grasp_dependents, grasp_cycles, grasp_architecture, grasp_hotspots, grasp_metrics, grasp_find_path
Cleanup and quality: grasp_unused, grasp_similarity, grasp_stale, grasp_types, grasp_change_risk, grasp_coverage_gaps
Guidance: grasp_explain, grasp_refactor, grasp_suggest, grasp_onboard
Security and compliance: grasp_security, grasp_sbom in CycloneDX or SPDX, grasp_sarif for GitHub Code Scanning, grasp_license, grasp_pii_trace, grasp_reg_impact, grasp_env_vars
Drift tracking: grasp_snapshot and grasp_diff_snapshots, returning STABLE, DEGRADED or CRITICAL
A knowledge graph you can feed: grasp_ingest takes PDF, DOCX, XLSX, HTML, image OCR, audio, video and YouTube; grasp_kg_ask answers with citations
35 languages, and a browser app, IDE extensions and CLI over the same engine

Requirements

Npx grasp-mcp-server, or npm install -g grasp-mcp-server. No credentials are needed — the LLM layer auto-detects a local Ollama before any cloud key and falls back to a deterministic engine that needs none. Setting GRASP_HTTP_MCP exposes the server over Streamable HTTP on port 7333 so a team can share one instance.

Setup effort

One command — npx -y grasp-mcp-server

grasp-mcp-server a