srinivasan-sundaresan95-orihime
Cross-repository code knowledge graph MCP server for Java, Kotlin, JavaScript, and TypeScript. Indexes source into embedded KuzuDB via tree-sitter; 30+ tools for call-flow tracing, multi-hop taint analysis (OWASP/CWE/PCI/STIG reports), entry-point reachability filtering, performance hotspot detection, and license compliance — without reading source files. 95% fewer tokens vs source-reading baseline. `pip install orihime`
- Score
- 22.5571 signal
- Evidence
- 1 star
- Last commit
- as last read from GitHub; most reads are from 2 Sep 2026 or later
- Listed
Install
No one-command install. Set it up from its source.
Alternatives · MCPs
- clouatre-labs-code-analyze5 stars · 1 fork52.498
- codesift4 stars43.275
What it is
Cross-repository code knowledge graph MCP server for Java, Kotlin, JavaScript, and TypeScript. Indexes source into embedded KuzuDB via tree-sitter; 30+ tools for call-flow tracing, multi-hop taint analysis (OWASP/CWE/PCI/STIG reports), entry-point reachability filtering, performance hotspot detection, and license compliance — without reading source files. 95% fewer tokens vs source-reading baseline. pip install orihime
When to use it
When an agent needs the "Security" capability this MCP server exposes.
Source
Migrated from the awesome-mcp-servers navigation directory (category: Security). See https://github.com/srinivasan-sundaresan95/orihime.