code-graph

See everything a change affects before you make it: a local, deterministic dependency graph of routes, calls, tables and config, with file:line evidence for every hop.

For you and your AI agent (CLI + MCP). No LLM in the graph.

Docs · Quick start · CLI · MCP · Changelog

Quick start

pipx install cg-code-graph          # or: uv tool install cg-code-graph
cg index . --db out/graph.db        # prints starter queries for your repo
cg install --host cursor    # or claude, codex, vscode, …: registers the MCP server
cg reaches table:orders --db out/graph.db   # any table, connection or config key

Try it on a bundled sample, link a frontend to a backend, or connect an agent over MCP: Quick start guide. Other install options (install.sh, Windows, exact-mode toolchains): Install.

cg reaches table:store_books on the bundled Django sample:

dependents: 18 nodes  (code: 6, entry points: 9, other: 3)
== RUNTIME (reached from http_route / ... / queue_job / listener): 5 functions/methods
    catalog.api.create_book  depth=1 conf=resolved  http_route(1)
        path: function:catalog.api.create_book
          -WRITES_TABLE[resolved @ catalog/api.py:27]-> table:store_books
    catalog.signals.review_saved  depth=3 conf=resolved  listener(1)
        path: function:catalog.signals.review_saved
          -DISPATCHES[exact @ catalog/signals.py:12]-> job:catalog.tasks.recompute_rating
          -HANDLED_BY[exact @ catalog/tasks.py:13]-> function:catalog.tasks.recompute_rating
          -READS_TABLE[resolved @ catalog/tasks.py:14]-> table:store_books

Supported languages

Frameworks and facts	Calls	Docs
Django (+ DRF, django-ninja), FastAPI / Starlette, Flask, Celery	exact (stdlib `ast`)	Python
Nuxt / Vue, NestJS, Next.js, Astro, Express, Fastify, Koa, Hono	exact (TypeScript compiler API)	TS frameworks
Laravel (routes and middleware, queues, broadcasting)	exact (nikic/php-parser; needs PHP 8.2+)	PHP
Flutter	exact (Dart analyzer; needs the Dart SDK)	Platforms
Android, Kotlin Multiplatform	heuristic; exact with scip-java (opt-in)	Kotlin
iOS / SwiftPM	heuristic; exact with the Swift index store (opt-in)	Swift
crates / modules, entry points, FFI, `#[cfg]` / `#if` gates	heuristic; exact with rust-analyzer / scip-clang	Rust, C and C++

Go, Java and others: import a SCIP index with cg index --scip FILE. Run cg doctor to see exact / heuristic per language on your machine.

What you get

reaches, impact, path: every caller, route, job and page that reaches a table, config key or method.
cg affected --base main: the tests and entry points a change reaches (--quiet feeds your test runner).
Frontend ↔ backend: cg link matches client HTTP calls to server routes across repos.
Route guards: cg routes --writes --unguarded lists routes that write with no auth guard.
MCP server (cg-mcp) so agents query the graph instead of grepping.
Visual view (cg serve) and plan checks (cg plan check) for planned changes.

Docs

Install · Quick start · CLI · MCP · Configuration · Architecture · Limitations

Changelog · Contributing · Security · MIT License

More recordings: docs/media.

Metadata

Release files for cg-code-graph 0.17.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for cg-code-graph 0.17.0
File	Size	Uploaded
cg_code_graph-0.17.0.tar.gz	1.7 MB	Oct 6, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for cg-code-graph 0.17.0
File	Interpreter	ABI	Platform	Reset
cg_code_graph-0.17.0-py3-none-any.whl 1.5 MB Oct 6, 2026	Python 3	none	any	Details

Total release size: 3.2 MB

Release files / cg_code_graph-0.17.0.tar.gz

Download URL	cg_code_graph-0.17.0.tar.gz
Size	1.7 MB
Tags	Source
SHA-256 checksum How to use checksums	`f25f933ad0c97dbf11026273710c2313de34bb4cfc87c5611bafc4234eec2936`
BLAKE2b-256 checksum How to use checksums	`3d132c01a06df40bef5f331f98d58c0c06902d74738e60a01c3c6fc10ed55034`
Upload date	Oct 6, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/cyberchronos00/code-graph
Publishing commit: github.com/cyberchronos00/code-graph/tree/972c49f50b3cae1fbc9816709a8c24e0a1db6f06

Workflow

Publishing configuration: github.com/cyberchronos00/code-graph/blob/972c49f50b3cae1fbc9816709a8c24e0a1db6f06/.github/workflows/publish.yml
Publishing logs: github.com/cyberchronos00/code-graph/actions/runs/37490605788/attempts/1

Artifact

Subject: cg_code_graph-0.17.0.tar.gz
SHA-256 checksum: f25f933ad0c97dbf11026273710c2313de34bb4cfc87c5611bafc4234eec2936 Verifying attestations

Release files / cg_code_graph-0.17.0-py3-none-any.whl

Download URL	cg_code_graph-0.17.0-py3-none-any.whl
Size	1.5 MB
Tags	Python 3
SHA-256 checksum How to use checksums	`6fbcfb7ba1de0fde185c37fb294d85ad61d56d73774dc7051cb2dc84a3aec6f2`
BLAKE2b-256 checksum How to use checksums	`42f8ad2a2b6070ba405f4c8dc7b36fd2222396c83edf7946964d6b53f1de9aaf`
Upload date	Oct 6, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/cyberchronos00/code-graph
Publishing commit: github.com/cyberchronos00/code-graph/tree/972c49f50b3cae1fbc9816709a8c24e0a1db6f06

Workflow

Publishing configuration: github.com/cyberchronos00/code-graph/blob/972c49f50b3cae1fbc9816709a8c24e0a1db6f06/.github/workflows/publish.yml
Publishing logs: github.com/cyberchronos00/code-graph/actions/runs/37490605788/attempts/1

Artifact

Subject: cg_code_graph-0.17.0-py3-none-any.whl
SHA-256 checksum: 6fbcfb7ba1de0fde185c37fb294d85ad61d56d73774dc7051cb2dc84a3aec6f2 Verifying attestations