codebase-memory-mcp

What it does

• Persistent local knowledge graph links code, documentation, configuration and infrastructure — indexing and graph queries run on your machine with no hosted service or API key
• 17 MCP tools on a native C backend with vendored grammars and Hybrid LSP type resolution for supported languages
• Cross-service and cross-repo intelligence: follow calls across services, trace deployments back to source, and see which parts a change could affect
• 45 automatic or conditional client integrations covering client configuration, skills, agent profiles and applicable hooks
• CBM Lens companion (open beta v0.0.1): architecture maps, a 3D Galaxy graph view, a source reader and local code chat
• Smart CI and test-impact analysis plus a team-shared graph artifact — index once, reuse across the team

When to use it

Developers and agents working in large or unfamiliar codebases — finding where a feature lives, following a call across services, or checking what a change could break before touching it. Also fits teams that want structural context injected through MCP instead of pasting files into prompts, and privacy-sensitive environments that need code analysis to stay entirely on-device.

Getting started

# macOS / Linux (latest release)
curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.sh | bash

# Windows (PowerShell)
Invoke-WebRequest -Uri https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.ps1 -OutFile install.ps1
Unblock-File .\install.ps1
.\install.ps1

# open the bundled CBM Lens UI after install
codebase-memory-mcp daemon start --open --port=9749

# AUR (Arch Linux)
yay -S codebase-memory-mcp-bin

Things to know

Created 2026-02-24 (48,115 stars as of writing). The CBM Lens visual companion is an open beta at v0.0.1 — the Nix flake and source builds also offer UI-free server variants. macOS/Linux setup pipes a script from GitHub to bash; security-minded users can install manually from the latest release archive instead. Microsoft Defender may flag the release binary as a known false positive (the README documents roughly 61 of ~62 engines returning clean); verify artifacts per its SECURITY.md if in doubt. Source analysis and graph storage stay on your machine; the Lens browser-AI model download is opt-in.