Is io.github.raymondchins/agentmap safe to use?

io.github.raymondchins/agentmap has 4 known CVEs tracked by MCPpedia. You can verify these on OSV.dev by searching for "@raymondchins/agentmap". Review the Security section above for details before installing.

How do I install io.github.raymondchins/agentmap?

io.github.raymondchins/agentmap supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.raymondchins/agentmap do?

io.github.raymondchins/agentmap provides 5 tools: Uninstall, Troubleshooting, Commands, Contributing, License. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.raymondchins/agentmap?

io.github.raymondchins/agentmap is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.raymondchins/agentmap actively maintained?

io.github.raymondchins/agentmap is actively maintained — last commit was 2 days ago. It has 46 GitHub stars.

io.github.raymondchins/agentmap

@raymondchins/agentmap

TS/JS-accurate repo map for coding agents: a ts-morph import/symbol graph, 8 MCP query tools.

46 303/wk 5 tools GitHub npm PyPI

2 open CVEs

MIT license

Actively maintained

Last commit 2d ago

Works with most clients

Transport: stdio, sse, http

5 tools

Grade F

MCPpedia last refreshed this data 10h ago

This server has been archived and is no longer actively maintained.

Edit this pageView history

io.github.raymondchins/agentmap is an MCP server that TS/JS-accurate repo map for coding agents: a ts-morph import/symbol graph, 8 MCP query tools. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 38/100 on MCPpedia's security, maintenance and efficiency rubric.

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-raymondchins-agentmap": {
      "args": [
        "-y",
        "@raymondchins/agentmap"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-raymondchins-agentmap)](https://mcppedia.org/s/io-github-raymondchins-agentmap)

Read me

What io.github.raymondchins/agentmap does

The TS/JS-accurate repo map for your coding agent — a compiler-grade ts-morph import/symbol graph that answers "where is it / what breaks / does this already exist" in ~98% fewer context tokens.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@raymondchins/agentmap' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

38/100across 5 weighted dimensions

How we score →

0255075100

−62

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

2 open

CVE-2026-10177mediumCVSS 6.3

Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint

A security vulnerability has been detected in Aider-AI Aider 0.86.3.dev. This affects the function requests.get of the file api_docs.py of the component AWS EC2 Metadata Endpoint. The manipulation leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. It is suggested to install a patch to address this issue. The pull request to fix this issue awaits acceptance.

Affected: >= 0source →

CVE-2026-10175mediumCVSS 6.3

Aider is vulnerable to Code Injection via editor_coder.run function

A security flaw has been discovered in Aider-AI Aider 0.86.3.dev. Affected by this vulnerability is the function editor_coder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Affected: >= 0source →

Inventory

Tools (5)

Click any tool to inspect its schema.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.raymondchins/agentmap safe to use?: io.github.raymondchins/agentmap has 4 known CVEs tracked by MCPpedia. You can verify these on OSV.dev by searching for "@raymondchins/agentmap". Review the Security section above for details before installing.
How do I install io.github.raymondchins/agentmap?: io.github.raymondchins/agentmap supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.raymondchins/agentmap do?: io.github.raymondchins/agentmap provides 5 tools: Uninstall, Troubleshooting, Commands, Contributing, License. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.raymondchins/agentmap?: io.github.raymondchins/agentmap is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.raymondchins/agentmap actively maintained?: io.github.raymondchins/agentmap is actively maintained — last commit was 2 days ago. It has 46 GitHub stars.

Similar servers

Others in other

View all →

Headroom95

Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.

67.3k 3

Transport Stdio95

Transport for TMCP using STDIO

197 14

Flare95

The graph based agentic IDE

139 3

app.fojin/fojin-mcp94

Buddhist canon tools: search, passages, cross-canon parallels, dictionaries — all URN-cited.

330 8

MCP Security Weekly

Get CVE alerts and security updates for io.github.raymondchins/agentmap and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

This server has been archived and is no longer actively maintained.

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-raymondchins-agentmap": {
      "args": [
        "-y",
        "@raymondchins/agentmap"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-raymondchins-agentmap)](https://mcppedia.org/s/io-github-raymondchins-agentmap)

Read me

What io.github.raymondchins/agentmap does

The TS/JS-accurate repo map for your coding agent — a compiler-grade ts-morph import/symbol graph that answers "where is it / what breaks / does this already exist" in ~98% fewer context tokens.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@raymondchins/agentmap' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

agentmap

Your agent burns most of its context just finding code. This gives it the answer in one line.

npx @raymondchins/agentmap --relates lib/db/schema.ts

relates: lib/db/schema.ts  (pr 0.073744)
dependents (21): lib/types.ts, lib/utils.ts, lib/db/queries.ts,
                 components/chat/message.tsx, app/(chat)/api/chat/route.ts, …

Every file on that list really imports it. grep gets 40% of them wrong.

💸 What it saves

Token cost of the hidden first step in every agent task — find the relevant code — on a real 154-file Next.js app (vercel/ai-chatbot, sha 2becdb4):

The agent needs to know…	Reading files	agentmap	Saved
Does a helper for this already exist?	14,740	19	99.9%
Load the whole repo into context	150,281	1,127	99.3%
What breaks if I change this file?	81,038	616	99.2%
Where is this symbol defined?	1,950	20	99%
What files make up this feature?	6,121	1,025	83.3%
Give me a repo overview	3,065	1,127	63.2%
What does this one file import?	583	517	11.3%
All 7 combined	257,778	4,451	98.3%

Holds on zod too (367 files, 99.2%) and taxonomy (125 files, 96.0%). Captured output, pinned shas → benchmark/RESULTS.md

🎯 …and it's still right

Fewer tokens is worthless if they're the wrong ones. Separate eval, ground truth derived live from real repos:

	agentmap	`git grep`
What depends on this file?	100% precision	59.9% precision
Where is this defined? (top-1)	100%	32%
Where is this defined? (top-3)	100%	80%
Tokens to find a definition	1.9× fewer	—

_{n=42 dependents / n=75 definitions across zod, zustand, hono. Re-run: npm run eval · method → EVAL.md}

⚡ The five commands

You want	Run	Saves
"Do we already have this?"	`agentmap --find formatCurrency`	99.9%
"What breaks if I touch this?"	`agentmap --relates lib/auth.ts`	99.2%
"Where is this defined?"	`agentmap --find ChatMessage`	99%
"Give me the repo, cheap"	`agentmap --map --tokens 2000`	99.3%
Don't want to pick?	`agentmap --any <anything>`	—

--any routes it for you: file → symbol → feature → live content search.

Cold build ~1.2s. Cached query ~0.1s. No server, no vector DB, no API key.

🔌 Setup

npx @raymondchins/agentmap --install-hooks   # rebuild on commit + steer the agent to the map
npx @raymondchins/agentmap --install-skill   # Claude Code · Cursor · Codex · Gemini · OpenCode · Copilot

Most repo-map tools stop at building the map. These two hooks are why it sta

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

38/100across 5 weighted dimensions

How we score →

0255075100

−62

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

2 open

CVE-2026-10177mediumCVSS 6.3

Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint

Affected: >= 0source →

CVE-2026-10175mediumCVSS 6.3

Aider is vulnerable to Code Injection via editor_coder.run function

Affected: >= 0source →

Inventory

Tools (5)

Click any tool to inspect its schema.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.raymondchins/agentmap safe to use?: io.github.raymondchins/agentmap has 4 known CVEs tracked by MCPpedia. You can verify these on OSV.dev by searching for "@raymondchins/agentmap". Review the Security section above for details before installing.
How do I install io.github.raymondchins/agentmap?: io.github.raymondchins/agentmap supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.raymondchins/agentmap do?: io.github.raymondchins/agentmap provides 5 tools: Uninstall, Troubleshooting, Commands, Contributing, License. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.raymondchins/agentmap?: io.github.raymondchins/agentmap is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.raymondchins/agentmap actively maintained?: io.github.raymondchins/agentmap is actively maintained — last commit was 2 days ago. It has 46 GitHub stars.