Heides MCP server

What it does

HEIDES is a local code analysis harness that builds a persistent graph of a codebase and provides AI agents with a map of symbols, callers, callees, and dependencies before they make changes. It runs deterministically without requiring models or cloud services, and answers questions about code structure, compatibility, and security implications in real time.

• Prevent AI agents from breaking existing callers when they change a function signature by checking proposed patches against the persistent code graph.
• Detect security vulnerabilities like user input flowing into SQL, shell, or prompt sinks before code is written to disk.
• Ground AI agent plans by confirming feasibility against the codebase structure and flagging missing prerequisites or conflicts.

Tools this server exposes

Tool	Does
describe	Prints the entire codebase map as a workspace manifest including entrypoints, connected symbols, call cycles, and file dependencies.
export	Writes the complete code graph to a single file with all symbols, signatures, docs, edges, and a presence ledger of all files.
staged_apply	Tests a proposed patch in memory against the code graph and blocks conflicts before writing to disk.
security_taint	Traces user-controlled input through the codebase to detect whether it reaches SQL, shell, filesystem, or prompt sinks.
edge_cases	Flags missing null, empty, error path, and boundary handling in changed functions.
dependency	Detects whether code upgrades break the imports actually used in the project.

Before you enable it

An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.