Trace MCP Server: 178 Tools with Risk Policies

// ALL 178 TRACE TOOLS

READ 148 tools

Read analyze_perf Per-tool latency telemetry: p50/p95/max, count, error_rate. Default reads the current session ring; Read assess_change_risk Before modifying a file or symbol, predict risk level (low/medium/high/critical) with contributing factors ... Read benchmark_project Synthetic token efficiency benchmark: compare raw file reads vs trace-mcp compact responses across symbol l... Read check_architecture Check architectural layer rules: detect forbidden imports between layers (e.g. domain importing infrastruct... Read check_claudemd_drift Detect drift between AI agent config files (CLAUDE.md, AGENTS.md, .cursorrules) and the live tool/skill/com... Read check_duplication Check if a function/class name already exists elsewhere in the codebase before creating it. Prevents duplic... Read check_embedding_drift Pin and re-check a 16-string canary against the active embedding provider. Catches silent provider model sw... Read check_quality_gates Run configurable quality gate checks against the project. Returns pass/fail for each gate (complexity, coup... Read check_rename Pre-rename collision detection: checks the symbol Read compare_branches Compare two branches at symbol level: what was added, modified, removed. Resolves merge-base automatically,... Read detect_antipatterns Detect performance & design antipatterns: N+1 query risks, missing eager loading, unbounded queries, event ... Read detect_ast_clones Find Type-2 AST clones across the codebase: functions/methods with identical structure after normalizing id... Read detect_communities Run Leiden community detection on the file dependency graph. Identifies tightly-coupled file clusters (modu... Read detect_drift Detect architectural drift: cross-module co-change anomalies (files in different modules that always change... Read detect_topic_tunnels Cross-project topic tunnels: links between registered subprojects that share canonical entities — package n... Read diff_graph_snapshots Compare two named graph snapshots and report deltas in counts, communities, and top in-degree files. Use to... Read discover_claude_sessions Scan ~/.claude/projects for projects Claude Code has touched on this machine, decode each directory name ba... Read discover_hermes_sessions List Hermes Agent (NousResearch) sessions visible on this machine. Scans $HERMES_HOME (default ~/.hermes) f... Read explain_architecture AI-powered architecture analysis — layers, patterns, and data flow Read explain_symbol Explain a symbol in detail using AI — purpose, behavior, relationships, usage patterns Read extract_function DISABLED pending AST-aware rewrite — returns a structured error explaining the limitation. The previous reg... Read find_similar Find semantically similar symbols using vector search + optional AI reranking Read find_usages Find all places that reference a symbol or file (imports, calls, renders, dispatches). Use instead of Grep ... Read get_api_contract Get API contract (OpenAPI/gRPC/GraphQL) for a service. Parses spec files found in the service repo. Use to ... Read get_api_surface List all exported symbols (public API) of a file or matching files. Use to understand what a module exposes... Read get_artifacts Surface non-code knowledge from the index: DB schemas (migrations, ORM models), API specs (routes, OpenAPI ... Read get_call_graph Build a bidirectional call graph centered on a symbol (who calls it + what it calls). Use to understand con... Read get_change_impact Full change impact report: risk score + mitigations, breaking change detection, enriched dependents (comple... Read get_changed_symbols Map a git diff to affected symbols (functions, classes, methods). For PR review. If Read get_circular_imports Find circular dependency chains in the import graph (Kosaraju SCC algorithm). Considers only import-typed e... Read get_cluster_decisions Return the member decisions of a cluster, plus the cluster header. Use after get_decision_clusters to drill... Read get_co_changes Find files that frequently change together in git history (temporal coupling). Requires git. Use to discove... Read get_code_owners Git-based code ownership: who contributed most to specific files (git shortlog). Requires git. Use to ident... Read get_communities Get previously detected communities (file clusters). Run detect_communities first. Read-only. Returns JSON:... Read get_community Get details for a specific community: files, inter-community dependencies. Read-only. Use after detect_comm... Read get_complexity_report Get complexity metrics (cyclomatic, max nesting, param count) for symbols in a file or across the project. ... Read get_complexity_trend File complexity over git history: cyclomatic complexity at past commits. Shows if a file is getting more or... Read get_component_tree Build a component render tree starting from a given .vue file. Use to visualize parent-child component hier... Read get_context_bundle Get a symbol Read get_contract_drift Detect mismatches between API spec and implementation: endpoints in spec but not in code, or in code but no... Read get_contract_versions Show version history for a service API contract with breaking change detection between versions. Compares r... Read get_control_flow Build a Control Flow Graph (CFG) for a function/method: if/else branches, loops, try/catch, returns, throws... Read get_coupling Coupling analysis: afferent (Ca), efferent (Ce), instability index per file. Shows which modules are stable... Read get_coupling_trend File coupling over git history: Ca/Ce/instability at past commits. Shows if a module is stabilizing or dest... Read get_cross_domain_deps Show which business domains depend on which. Based on edges between symbols in different domains. Use to un... Read get_cross_service_impact Analyze cross-service impact of changing an endpoint or event. Shows which services would be affected. Use ... Read get_cross_workspace_impact Show which workspaces are affected by changes in a given workspace. Lists all cross-workspace edges, affect... Read get_dataflow Intra-function dataflow analysis: track how each parameter flows through the function body — into which cal... Read get_dead_code Dead code detection. Two modes: (1) Read get_dead_exports Find exported symbols whose Read get_decision_clusters List decision clusters with optional full-text filter. Each row carries a short noun-phrase title, 1-3 sent... Read get_decision_stats Overview of the decision knowledge graph: total decisions, active/invalidated counts, breakdown by type and... Read get_decision_timeline Chronological timeline of decisions for a project, symbol, or file. Shows when decisions were made and inva... Read get_dependency_diagram Render dependency diagram for a file/directory path as Mermaid or DOT. Input: a path like Read get_di_tree Trace NestJS dependency injection tree (what a service injects + who injects it). Use to understand DI wiri... Read get_domain_context Get all code related to a specific business domain. Supports Read get_domain_map Get hierarchical map of business domains with key symbols per domain. Auto-builds domain taxonomy on first ... Read get_edge_bottlenecks Find architectural bottleneck edges in the import graph: edges sitting on many shortest paths (edge between... Read get_endpoint_analytics Per-route analytics: request count, error rate, latency, caller services. Requires OTLP trace ingestion. Re... Read get_env_vars List environment variable keys from .env files with inferred value types/formats. Never exposes actual valu... Read get_event_graph Get event/signal/task dispatch graph (Laravel events, Django signals, NestJS events, Celery tasks, Socket.i... Read get_feature_context Search code by keyword/topic → returns ranked source code snippets within a token budget. Use when you need... Read get_git_churn Per-file git churn: commits, unique authors, frequency, volatility assessment. Requires git. Use to identif... Read get_health_trends Time-series health metrics for a file or module: bug score, complexity, coupling, churn over time. Populate... Read get_implementations Find all classes that implement or extend a given interface or base class. Use when you know the interface ... Read get_import_graph Show file-level dependency graph: what a file imports and what imports it (requires reindex for ESM edge re... Read get_index_health Get index status, statistics, health information, and pipeline progress (indexing, summarization, embedding... Read get_livewire_context Get full context for a Livewire component: properties, actions, events, view, child components. Use to unde... Read get_middleware_chain Trace middleware chain for a route URL (Express/NestJS/FastAPI/Flask). Use when you only need the middlewar... Read get_minimal_context Single-call orientation context (~150 tokens). Returns project shape, top 3 risk hotspots, top 3 PageRank-c... Read get_model_context Get full model context: relationships, schema, and metadata (Eloquent/Mongoose/Sequelize/SQLAlchemy/Prisma/... Read get_module_graph Build NestJS module dependency graph (module -> imports -> controllers -> providers -> exports). Use to und... Read get_navigation_graph Build React Native navigation tree from screens, navigators, and deep links. Use to understand app navigati... Read get_nova_resource Get full context for a Laravel Nova resource: model, fields, actions, filters, lenses, metrics. Use to unde... Read get_outline Get all symbols for a file (signatures only, no bodies). Use instead of Read to understand a file before ed... Read get_package_deps Cross-repo package dependency analysis: find which registered projects depend on a package, or what package... Read get_pagerank File importance ranking via PageRank on the import graph. Shows most central/important files. Use to identi... Read get_plugin_registry List all registered indexer plugins and the edge types they emit. Use for debugging indexer behavior or und... Read get_project_health Structural health: coupling instability, dependency cycles, PageRank rankings, refactor candidates. Use for... Read get_project_map Get project overview: detected frameworks, languages, file counts, structure. Read-only, no side effects. C... Read get_project_memo Return the latest synthesised project memo for a scope. Optionally include up to Read get_refactor_candidates Find functions with high complexity called from many files — candidates for extraction to shared modules. U... Read get_related_symbols Find symbols related via co-location (same file), shared importers, and name similarity. Use when exploring... Read get_request_flow Trace request flow for a URL+method: route → middleware → controller → service (Laravel/Express/NestJS/Fast... Read get_risk_hotspots Code hotspots: files with both high complexity AND high git churn (Adam Tornhill methodology). Score = comp... Read get_runtime_call_graph Actual call graph from runtime traces (vs static analysis). Shows observed call paths with call counts and ... Read get_runtime_deps Which external services (databases, caches, APIs, queues) does this code actually call at runtime. Based on... Read get_runtime_profile Runtime profile for a symbol or route: call count, latency percentiles (p50/p95/p99), error rate, calls per... Read get_schema Get database schema reconstructed from migrations or ORM model definitions. Use to understand table structu... Read get_screen_context Get full context for a React Native screen: navigator, navigation edges, deep link, platform variants, nati... Read get_service_deps Get external service dependencies: which services this one calls (outgoing) and which call it (incoming). U... Read get_service_map Get map of all services, their APIs, and inter-service dependencies. Auto-detects services from Docker Comp... Read get_session_journal Session history: all tool calls made, files read, zero-result searches, and duplicate queries. Use to avoid... Read get_session_resume Cross-session context carryover: shows what was explored in recent past sessions (files touched, tools used... Read get_session_snapshot Compact session snapshot (~200 tokens) for context recovery after compaction. Returns focus files (by read ... Read get_state_stores List all Zustand stores and Redux Toolkit slices with their state fields, actions/reducers, and dispatch si... Read get_subproject_clients Find all client calls across subprojects that call a specific endpoint. Shows file, line, call type, and co... Read get_subproject_graph Show all subprojects and their cross-repo connections. A subproject is any working repository in your proje... Read get_subproject_impact Cross-repo impact analysis: find all client code across subprojects that would break if an endpoint changes... Read get_suggested_questions Auto-generated, prioritized review questions derived from the analyses we already cache (untested framework... Read get_surprises Rank cross-module file edges by how unexpected they look (deep folder distance + popular target + few edges... Read get_symbol Look up a symbol by symbol_id or FQN and return its source code. Use instead of Read when you need one spec... Read get_symbol_complexity_trend Single symbol complexity over git history: cyclomatic, nesting, params, lines at past commits. Requires git... Read get_symbol_owners Git blame-based symbol ownership: who wrote which lines of a specific symbol. Requires git. Use for fine-gr... Read get_task_context All-in-one context for starting a dev task: execution paths, tests, entry points, adapted by task type. Use... Read get_tech_debt Per-module tech debt score (A–F grade) combining: complexity, coupling instability, test coverage gaps, and... Read get_tests_for Find test files and test functions that cover a given symbol or file. Use instead of Glob/Grep — understand... Read get_type_hierarchy Walk TypeScript class/interface hierarchy: ancestors (what it extends/implements) and descendants (what ext... Read get_untested_exports Find exported public symbols with no matching test file — test coverage gaps. For deeper analysis including... Read get_untested_symbols Find ALL symbols (not just exports) lacking test coverage. Classifies as Read get_wake_up Compact orientation context (~300 tokens) for session start. By default returns a {stable, dynamic} split: ... Read get_workspace_map List all detected monorepo workspaces with file counts, symbol counts, and languages. Returns dependency gr... Read graph_query Trace how named symbols relate in the dependency graph → returns subgraph + Mermaid diagram. Input is NATUR... Read list_bundles List installed pre-indexed bundles for dependency libraries. Shows package name, version, symbol/edge count... Read list_corpora List every corpus saved on disk with its manifest (scope, project_root, sizes, timestamps). Read-only. Use ... Read list_graph_snapshots List previously captured graph snapshots, most recent first. Each entry includes its summary so you can ins... Read list_pins List all active ranking pins with weight, scope, target, expiry, and creator. Use to inspect what is curren... Read mine_sessions Mine Claude Code / Claw Code session logs for architectural decisions, tech choices, bug root causes, and p... Read name description Read pack_context Pack project context into a single document for external LLMs. Intelligent selection by graph importance, f... Read predict_bugs Predict which files are most likely to contain bugs. Multi-signal scoring: git churn, fix-commit ratio, com... Read query_by_intent Map a business question to domain taxonomy → returns domain ownership and relevance scores (no source code)... Read query_corpus Answer a natural-language question against a saved corpus. Loads the corpus body, primes the configured AI ... Read query_decisions Query the decision knowledge graph. Filter by type, subproject, code symbol, file path, tag, or time. Retur... Read regenerate_project_memo Synthesise (or refresh) the project memo — a 250-400 word LLM-written orientation digest over the decision ... Read review_change AI-powered review of a file change — identify issues, risks, and suggestions Read scan_code_smells Find deferred work and shortcuts: TODO/FIXME/HACK/XXX comments, empty functions & stubs, hardcoded values (... Read scan_security Scan project files for OWASP Top-10 security vulnerabilities using pattern matching. Detects SQL injection ... Read search Search symbols by name, kind, or text. Use instead of Grep when looking for functions, classes, methods, or... Read search_bundles Search pre-indexed bundles for symbols from popular libraries (React, Express, etc.). Returns symbol defini... Read search_sessions Search across all past session conversations. Finds what was discussed, decided, or debugged in previous se... Read search_text Full-text search across all indexed files. Supports regex, glob file patterns, language filter. Use for fin... Read search_with_mode search_with_mode Read self_audit Dead code & coverage audit: dead exports, untested public symbols, heritage debt. Use as a one-shot health ... Read suggest_queries Onboarding helper: shows top imported files, most connected symbols (PageRank), language stats, and example... Read suggest_tests Suggest test cases for a symbol using AI Read taint_analysis Track flow of untrusted data from sources (HTTP params, env vars, file reads) to dangerous sinks (SQL queri... Read traverse_graph Walk the dependency graph from a starting symbol or file using BFS/DFS, with a hard token budget on the res... Read verify_index Read-only structural check of the local SQLite index: SQLite integrity_check, foreign-key violations, requi... Read visualize_graph Open interactive HTML graph in browser showing file/symbol dependencies. Supports force/hierarchical/radial... Read audit_config Scan AI agent config files (CLAUDE.md, AGENTS.md, .cursorrules, etc.) for stale references, dead paths, tok... Read export_decisions Export decisions to JSONL or Markdown. Read-only; no schema mutations. Use for audit, sharing with external... Read export_graph Export the dependency graph in formats external tools understand. Supports GraphML (Gephi/yEd/NetworkX), Cy... Read export_security_context Export security context for MCP server analysis. Generates enrichment JSON for skill-scan: tool registratio... Read generate_insights_report Single-call narrative health snapshot: god files (PageRank), architectural bridges (edge bottlenecks), risk... Read generate_sbom Generate a Software Bill of Materials (SBOM) from package manifests and lockfiles. Supports npm, Composer, ... Read plan_batch_change Analyze the impact of updating a package/dependency. Shows all affected files, import references, and gener... Read plan_refactoring Preview any refactoring (rename, move, extract, signature) without applying. Returns all edits as {old_text...

WRITE 25 tools

Write change_signature Change a function/method signature (add/remove/rename/reorder parameters) and update all call sites. Dry-ru... Write embed_repo Precompute and cache symbol embeddings for semantic / hybrid search. Embeddings are also computed lazily on... Write unpin Remove a ranking pin by target. Pass either symbol_id (for a pinned symbol) or file_path (for a pinned file... Write build_corpus Pack a slice of project context into a persistent corpus on disk so future query_corpus calls can prime an ... Write build_decision_clusters Recompute the L2 thematic cluster overlay over the decision store using the configured LLM. Stable cluster ... Write consolidate_decisions LLM-driven semantic dedup of the decision store. For each decision in scope, finds top-K similar candidates... Write index_sessions Index conversation content from Claude Code / Claw Code sessions for cross-session search. Stores chunked m... Write invalidate_decision Mark a decision as no longer valid. The decision remains in the knowledge graph for historical queries but ... Write refresh_co_changes Rebuild co-change index from git history. Mutates the co-change index; idempotent. Use after significant gi... Write snapshot_graph Capture the current graph shape (file/symbol counts, edges by type, top in-degree files, communities, expor... Write subproject_sync Re-scan all subprojects: re-discover services, re-parse contracts, re-scan client calls, and re-link everyt... Write tune_decision_weights Re-fit decision confidence weights from accumulated review feedback (approve/reject events). Requires >= mi... Write tune_weights Self-tuning retrieval: read the persistent ranking ledger and learn per-repo signal-fusion weights, written... Write visualize_subproject_topology Open interactive HTML visualization of the subproject topology: services as nodes, API calls as edges, heal... Write add_decision Manually record an architectural decision, tech choice, preference, or convention. Links to code symbols/fi... Write apply_move Move a symbol to a different file or rename/move a file, updating all import paths across the codebase. Dry... Write apply_rename Rename a symbol across all usages (definition + all importing files). Runs collision detection first and ab... Write approve_decision Approve a decision currently in the memoir-style review queue (review_status= Write generate_docs Auto-generate project documentation from the code graph. Produces structured docs with architecture, API su... Write pin_file Boost (or demote) a specific file in PageRank-driven ranking by setting a multiplicative weight on its Page... Write pin_symbol Boost (or demote) a specific symbol in PageRank-driven ranking by setting a multiplicative weight. Pinned s... Write register_edit Notify trace-mcp that a file was edited. Reindexes the single file and invalidates search caches. Call afte... Write reject_decision Reject a decision currently in the memoir-style review queue (review_status= Write remember_decision Live agent write into the decision knowledge graph. Confidence-scores the input and routes it through the m... Write subproject_add_repo Add a repository as a subproject of the current project. Pass

DESTRUCTIVE 4 tools

Destructive delete_corpus Remove a saved corpus (manifest + packed body). Returns JSON: { deleted: bool, name }. Destructive remove_dead_code Safely remove a dead symbol from its file. Verifies the symbol is actually dead (multi-signal detection or ... Destructive repair_index Apply a targeted repair to the local SQLite index. Modes: drop-orphans (delete embedding rows whose symbol_... Destructive apply_codemod Bulk regex find-and-replace across files. Dry-run by default — first call shows preview, second call with d...

EXECUTE 1 tools

Execute reindex Trigger (re)indexing of the project or a subdirectory. Mutates the local index (SQLite). Use after major fi...

// FAQ

How many tools does the Trace MCP server have? +

The Trace MCP server exposes 178 tools across 4 categories: Read, Write, Destructive, Execute.

How do I enforce policies on Trace tools? +

Route the Trace server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do Trace tools fall into? +

Trace tools are categorised as Read (148), Write (25), Destructive (4), Execute (1). Each category has a recommended default policy.

TRACE TOOLS

Enforce policy on every Trace tool call.