KiroGraph: MCP Tools Reference

kirograph_context

PRIMARY TOOL: Build comprehensive context for a task or feature request. Returns entry points, related symbols, and key code — often enough to understand the codebase without additional tool calls.

Parameter	Type	Default	Description
`task`	string	required	Task, bug, or feature description
`maxNodes`	number	20	Max symbols to include
`detail`	string	`full`	Code verbosity: `full` (complete source), `signatures` (signature + docstring, ~70% fewer tokens), `summary` (locations only, no code)
`includeCode`	boolean	true	Include code snippets — deprecated, prefer `detail`
`projectPath`	string	cwd	Project root path

kirograph_search

Quick symbol search by name. Returns locations only, no code. Vector search only as last resort.

Parameter	Type	Default	Description
`query`	string	required	Symbol name or partial name
`kind`	string	-	Filter: `function`, `method`, `class`, `interface`, `type_alias`, `variable`, `route`, `component`
`limit`	number	10	Max results (1–100)
`projectPath`	string	cwd	Project root path

kirograph_node

Get details about a specific symbol: kind, name, qualified name, file location, signature, docstring, and optionally source code.

Parameter	Type	Default	Description
`symbol`	string	required	Symbol name
`detail`	string	`summary`	Code detail level: `summary` (name + location + qualified name), `signatures` (+ signature + docstring), `full` (+ complete source code)
`includeCode`	boolean	false	Include full source code — deprecated, prefer `detail: "full"`
`projectPath`	string	cwd	Project root path

kirograph_status requires enableNavigation

Check index health and statistics: files indexed, symbol count, edge count, breakdown by kind and language, frameworks detected, database size, semantic search status, and sync state.

Parameter	Type	Default	Description
`projectPath`	string	cwd	Project root path

kirograph_files requires enableNavigation

List the indexed file structure with filtering and format options.

Parameter	Type	Default	Description
`filterPath`	string	-	Filter by directory prefix (e.g., `src/`)
`pattern`	string	-	Filter by glob pattern (e.g., `*/.ts`)
`maxDepth`	number	-	Limit tree depth
`format`	string	`tree`	`tree`, `flat`, or `grouped`
`includeMetadata`	boolean	true	Include language and symbol counts
`projectPath`	string	cwd	Project root path

kirograph_impact requires enableNavigation

Analyze what code would be affected by changing a symbol. Use before making changes. BFS traversal of all incoming edges.

Parameter	Type	Default	Description
`symbol`	string	required	Symbol name
`depth`	number	2	Traversal depth
`projectPath`	string	cwd	Project root path

kirograph_callers

Find all functions/methods that call a specific symbol. BFS traversal of incoming call edges.

Parameter	Type	Default	Description
`symbol`	string	required	Symbol name
`limit`	number	20	Max results (1–100)
`projectPath`	string	cwd	Project root path

kirograph_callees

Find all functions/methods that a specific symbol calls. BFS traversal of outgoing call edges.

Parameter	Type	Default	Description
`symbol`	string	required	Symbol name
`limit`	number	20	Max results (1–100)
`projectPath`	string	cwd	Project root path

kirograph_dead_code

Find symbols with no incoming references (potential dead code). Only unexported symbols are considered.

Parameter	Type	Default	Description
`limit`	number	50	Max results (1–100)
`projectPath`	string	cwd	Project root path

kirograph_circular_deps

Find circular import dependencies using Tarjan's strongly connected components algorithm over import edges.

Parameter	Type	Default	Description
`projectPath`	string	cwd	Project root path

kirograph_hotspots

Find the most-connected symbols by total edge degree (incoming + outgoing). Excludes structural contains edges.

Parameter	Type	Default	Description
`limit`	number	20	Max results (1–100)
`projectPath`	string	cwd	Project root path

kirograph_surprising

Find non-obvious cross-file connections scored by path distance × edge-kind weight. The most unexpected coupling in your codebase.

Parameter	Type	Default	Description
`limit`	number	20	Max results (1–100)
`projectPath`	string	cwd	Project root path

kirograph_diff

Compare the current graph state against a saved snapshot. Shows added/removed symbols and edges.

Parameter	Type	Default	Description
`snapshot`	string	latest	Snapshot label. Omit to use the most recent saved snapshot.
`projectPath`	string	cwd	Project root path

kirograph_type_hierarchy

Traverse the type hierarchy of a class or interface. Recursive traversal of extends/implements edges.

Parameter	Type	Default	Description
`symbol`	string	required	Class or interface name
`direction`	string	`both`	`up` (base types), `down` (derived types), `both`
`projectPath`	string	cwd	Project root path

kirograph_snapshot_save

Save a snapshot of the current graph state.

Parameter	Type	Default	Description
`label`	string	-	Snapshot label
`projectPath`	string	cwd	Project root path

kirograph_snapshot_list

List all saved graph snapshots.

Parameter	Type	Default	Description
`projectPath`	string	cwd	Project root path

kirograph_path

Find shortest path between two symbols.

Parameter	Type	Default	Description
`from`	string	required	Source symbol name
`to`	string	required	Target symbol name
`projectPath`	string	cwd	Project root path

kirograph_affected

Find test files affected by changes to a symbol.

Parameter	Type	Default	Description
`symbol`	string	required	Symbol name
`projectPath`	string	cwd	Project root path

kirograph_module_api

List all exported symbols in a file or directory.

Parameter	Type	Default	Description
`path`	string	-	File or directory path to inspect
`limit`	number	50	Max results
`projectPath`	string	cwd	Project root path

kirograph_rename_preview

Show all reference sites for a symbol before renaming.

Parameter	Type	Default	Description
`symbol`	string	required	Symbol name
`limit`	number	50	Max results
`projectPath`	string	cwd	Project root path

kirograph_doc_coverage

Find exported symbols missing docstrings.

Parameter	Type	Default	Description
`path`	string	-	Filter by file/directory
`limit`	number	50	Max results
`projectPath`	string	cwd	Project root path

kirograph_god_class

Classes ranked by member count.

Parameter	Type	Default	Description
`limit`	number	20	Max results
`projectPath`	string	cwd	Project root path

kirograph_inheritance_depth

Find deepest inheritance chains via BFS.

Parameter	Type	Default	Description
`limit`	number	20	Max results
`projectPath`	string	cwd	Project root path

kirograph_recursion

Find recursive and mutually-recursive functions.

Parameter	Type	Default	Description
`limit`	number	30	Max results
`projectPath`	string	cwd	Project root path

kirograph_largest

Symbols ranked by lines of code.

Parameter	Type	Default	Description
`limit`	number	20	Max results
`kind`	string	-	Filter by symbol kind
`projectPath`	string	cwd	Project root path

kirograph_rank

Symbols ranked by fan-in or fan-out edge count.

Parameter	Type	Default	Description
`by`	string	`fan-in`	`fan-in` or `fan-out`
`limit`	number	20	Max results
`projectPath`	string	cwd	Project root path

kirograph_distribution

Symbol-kind breakdown per file or directory.

Parameter	Type	Default	Description
`path`	string	-	Filter by directory
`limit`	number	30	Max results
`projectPath`	string	cwd	Project root path

kirograph_annotations

Decorator/attribute histogram across the codebase.

Parameter	Type	Default	Description
`decorator`	string	-	Filter by decorator name
`limit`	number	20	Max results
`projectPath`	string	cwd	Project root path

kirograph_session_start

Save current graph state as session baseline for tracking changes.

Parameter	Type	Default	Description
`projectPath`	string	cwd	Project root path

kirograph_session_end

Show what changed since the session baseline.

Parameter	Type	Default	Description
`projectPath`	string	cwd	Project root path

kirograph_unused_imports

Find import nodes with zero resolved downstream edges.

Parameter	Type	Default	Description
`limit`	number	50	Max results
`projectPath`	string	cwd	Project root path

kirograph_gini

Gini inequality coefficient (0=equal, 1=total inequality) on LOC, fan-in, or fan-out.

Parameter	Type	Default	Description
`metric`	string	`loc`	`loc`, `fan-in`, or `fan-out`
`projectPath`	string	cwd	Project root path

kirograph_dependency_depth

Longest import chains via Kahn topological sort.

Parameter	Type	Default	Description
`limit`	number	20	Max results
`projectPath`	string	cwd	Project root path

kirograph_architecture requires enableArchitecture

Get the full architecture overview: detected packages, layers, and the dependency graph between them.

Parameter	Type	Default	Description
`level`	string	`both`	`packages`, `layers`, or `both`
`includeFiles`	boolean	false	Include per-file package/layer assignments
`projectPath`	string	cwd	Project root path

kirograph_coupling requires enableArchitecture

Get coupling metrics for all packages or a specific one: Ca (afferent), Ce (efferent), instability (Ce / (Ca + Ce)).

Parameter	Type	Default	Description
`sortBy`	string	`instability`	Sort: `instability`, `afferent`, `efferent`
`limit`	number	20	Max results
`projectPath`	string	cwd	Project root path

kirograph_package requires enableArchitecture

Inspect the files and dependencies of a specific package.

Parameter	Type	Default	Description
`package`	string	required	Package name or path (partial match accepted)
`includeFiles`	boolean	true	List files in the package
`projectPath`	string	cwd	Project root path

kirograph_communities requires enableArchitecture

Detect code communities using the Leiden algorithm.

Parameter	Type	Default	Description
`resolution`	number	1.0	Resolution parameter — higher values = smaller communities
`limit`	number	15	Max results
`projectPath`	string	cwd	Project root path

kirograph_manifest requires enableArchitecture

Workspace manifest summary: all packages with versions, dependencies, and licenses. Pass package to drill in, ecosystem to filter, showDrift for version conflicts.

Parameter	Type	Default	Description
`package`	string	-	Drill into a specific package
`ecosystem`	string	-	e.g. npm, cargo, go, python
`showDrift`	boolean	false	Surface packages with conflicting versions
`projectPath`	string	cwd	Project root path

kirograph_complexity requires enableComplexity

Rank functions by cyclomatic complexity, cognitive complexity, and maintainability index. Flags symbols exceeding threshold.

Parameter	Type	Default	Description
`limit`	number	20	Max results
`sortBy`	string	`cyclomatic`	`cyclomatic`, `cognitive`, or `maintainability`
`threshold`	number	-	Only show symbols above this value
`projectPath`	string	cwd	Project root path

kirograph_simplify_scan requires enableComplexity

Quality scan of the codebase: finds simplification candidates by complexity, dead code, and LOC thresholds.

Parameter	Type	Default	Description
`limit`	number	20	Max results
`projectPath`	string	cwd	Project root path

kirograph_health requires enableComplexity

Composite 0–10000 graph health score across complexity, dead code, coupling, and circular dependencies.

Parameter	Type	Default	Description
`projectPath`	string	cwd	Project root path

kirograph_dsm requires enableComplexity

Design Structure Matrix — dependency matrix between top-level modules.

Parameter	Type	Default	Description
`limit`	number	15	Max modules to include
`projectPath`	string	cwd	Project root path

kirograph_test_risk requires enableComplexity

Risk-ranked functions: complexity × fan-in. Highest risk = most likely to break.

Parameter	Type	Default	Description
`limit`	number	20	Max results
`threshold`	number	-	Minimum risk score to include
`projectPath`	string	cwd	Project root path

kirograph_flows requires enableGitContext

Trace execution flows between symbols using call edges.

Parameter	Type	Default	Description
`from`	string	required	Source symbol name
`to`	string	-	Target symbol name
`limit`	number	20	Max results
`projectPath`	string	cwd	Project root path

kirograph_diff_context requires enableGitContext

Changed symbols (unstaged or staged) with callers/callees and affected tests.

Parameter	Type	Default	Description
`staged`	boolean	false	Use staged changes only
`ref`	string	-	Compare against git ref
`projectPath`	string	cwd	Project root path

kirograph_commit_context requires enableGitContext

Structured summary of staged changes, ready for a commit message.

Parameter	Type	Default	Description
`projectPath`	string	cwd	Project root path

kirograph_pr_context requires enableGitContext

Semantic diff between two git refs for PR descriptions.

Parameter	Type	Default	Description
`base`	string	required	Base git ref
`head`	string	`HEAD`	Target ref
`projectPath`	string	cwd	Project root path

kirograph_changelog requires enableGitContext

Human-readable semantic diff between two refs.

Parameter	Type	Default	Description
`ref1`	string	required	First git ref
`ref2`	string	required	Second git ref
`projectPath`	string	cwd	Project root path

kirograph_test_map requires enableGitContext

Map symbols to test files; detect uncovered symbols.

Parameter	Type	Default	Description
`symbol`	string	-	Focus on a specific symbol
`limit`	number	20	Max results
`projectPath`	string	cwd	Project root path

kirograph_test_coverage requires enableGitContext

Parse lcov/Istanbul/Cobertura coverage files → per-file coverage %, sorted worst-first.

Parameter	Type	Default	Description
`sortBy`	string	`asc`	Sort order: `asc` (worst first) or `desc` (best first)
`limit`	number	30	Max results
`projectPath`	string	cwd	Project root path

kirograph_refactor requires enableEditPrimitives

Structured search-and-replace across the graph.

Parameter	Type	Default	Description
`pattern`	string	required	Search pattern
`replacement`	string	required	Replacement string
`dryRun`	boolean	true	Preview changes without applying
`projectPath`	string	cwd	Project root path

kirograph_str_replace requires enableEditPrimitives

Replace a unique string anchor in a file; fails on 0 or >1 matches.

Parameter	Type	Default	Description
`file`	string	required	File path
`old_str`	string	required	String to replace (must be unique)
`new_str`	string	required	Replacement string
`projectPath`	string	cwd	Project root path

kirograph_multi_str_replace requires enableEditPrimitives

Multiple replacements as an all-or-nothing transaction.

Parameter	Type	Default	Description
`file`	string	required	File path
`pairs`	array	required	Array of `{old_str, new_str}` objects
`projectPath`	string	cwd	Project root path

kirograph_insert_at requires enableEditPrimitives

Insert content before or after an anchor string or line number.

Parameter	Type	Default	Description
`file`	string	required	File path
`anchor`	string	required	Anchor string or line number
`content`	string	required	Content to insert
`after`	boolean	false	Insert after anchor (default: before)
`line`	boolean	false	Treat anchor as line number
`projectPath`	string	cwd	Project root path

kirograph_ast_grep_rewrite requires enableEditPrimitives

Structural rewrite via ast-grep (requires ast-grep on PATH).

Parameter	Type	Default	Description
`file`	string	required	File path
`pattern`	string	required	ast-grep pattern
`rewrite`	string	required	Rewrite template
`projectPath`	string	cwd	Project root path

kirograph_branch_list requires enableBranch

List tracked branches with DB sizes and last sync times.

Parameter	Type	Default	Description
`projectPath`	string	cwd	Project root path

kirograph_branch_diff requires enableBranch

Symbols added, removed, or changed between two tracked branches.

Parameter	Type	Default	Description
`branchA`	string	required	First branch to compare
`branchB`	string	`main`	Second branch to compare against
`projectPath`	string	cwd	Project root path

kirograph_branch_search requires enableBranch

Search for symbols in a specific tracked branch graph.

Parameter	Type	Default	Description
`query`	string	required	Symbol name or partial name
`branch`	string	required	Branch to search in
`limit`	number	20	Max results
`projectPath`	string	cwd	Project root path

kirograph_exec

Run a shell command and return token-optimized output. Automatically filters noise from git, test runners, linters, build tools, docker, and package managers. 60-90% token savings on verbose commands.

Parameter	Type	Default	Description
`command`	string	required	Shell command to execute
`cwd`	string	project root	Working directory
`level`	string	`normal`	`normal`, `aggressive`, or `ultra`
`timeout`	number	60	Timeout in seconds
`projectPath`	string	cwd	Project root path

kirograph_read enableAgentUtils

Read a file with caching and multiple modes. First read returns full content; subsequent reads of unchanged files return a compact [cached: file unchanged] marker (~13 tokens). Inspired by lean-ctx.

Parameter	Type	Default	Description
`path`	string	required	File path (absolute or relative to project root)
`mode`	string	`full`	`full`, `map` (structure overview), `signatures` (function signatures only), `diff` (changes since last read), `lines` (line range), `imports`, `exports`
`start`	number	-	Start line (for `lines` mode)
`end`	number	-	End line (for `lines` mode)
`noCache`	boolean	false	Force fresh read, bypass cache
`projectPath`	string	cwd	Project root path

kirograph_retrieve enableAgentUtils

CCR — Cached Content Retrieval. Returns the full content stored in the session cache, or reads and caches the file if not yet seen. Use after kirograph_read returns a [cached: file unchanged] marker to recover the actual content without a redundant filesystem read. Inspired by headroom.

Parameter	Type	Default	Description
`path`	string	required	File path to retrieve (absolute or relative to project root)
`projectPath`	string	cwd	Project root path

kirograph_budget enableAgentUtils

Show current session context budget usage. Returns tokens consumed, remaining budget, and utilization percentage. Inspired by lean-ctx.

Parameter	Type	Default	Description
`reset`	boolean	false	Reset session budget counters
`projectPath`	string	cwd	Project root path

kirograph_gain requires enableAgentUtils

Show token savings statistics from compressed command outputs via kirograph_exec.

Parameter	Type	Default	Description
`period`	string	`session`	`session`, `today`, `week`, or `all`
`projectPath`	string	cwd	Project root path

kirograph_compress enableGeneralCompression

On-demand compression for arbitrary text before it reaches the model. Routes to two engines based on whether command is provided. Reports savings inline: [42% saved | 1800→1044 | rtk:git:aggressive]. Inspired by headroom.

Parameter	Type	Default	Description
`text`	string	required	Text to compress
`command`	string	-	Shell command that produced this output (e.g. `git log`, `npm test`). Activates rtk-style structural filters. Omit for prose/text — uses caveman grammar.
`level`	string	`full`	Intensity: `lite` / `normal` (light), `full` / `aggressive` (medium, default), `ultra` (maximum)

kirograph_mem_search enableMemory

Search project memory for past decisions, errors, patterns, and context. Hybrid FTS + vector search.

Parameter	Type	Default	Description
`query`	string	required	Natural language search query
`kind`	string	—	`decision`, `error`, `pattern`, `architecture`, `summary`, `note`
`limit`	number	10	Max results
`sessionId`	string	—	Filter to specific session
`projectPath`	string	cwd	Project root path

kirograph_mem_store enableMemory

Store an observation in project memory. Auto-compressed, symbol-linked, and embedded.

Parameter	Type	Default	Description
`content`	string	required	Observation text
`kind`	string	`note`	`decision`, `error`, `pattern`, `architecture`, `summary`, `note`
`projectPath`	string	cwd	Project root path

kirograph_mem_timeline enableMemory

List recent sessions and their observations chronologically.

Parameter	Type	Default	Description
`limit`	number	5	Number of sessions to show
`sessionId`	string	—	Show observations for a specific session
`projectPath`	string	cwd	Project root path

kirograph_mem_status enableMemory

Memory subsystem health: sessions, observations, embeddings, model mismatch.

Parameter	Type	Default	Description
`projectPath`	string	cwd	Project root path

kirograph_docs_toc enableDocs

Get table of contents for a documentation file or the whole project. Returns section IDs, titles, levels, and summaries.

Parameter	Type	Default	Description
`file`	string	-	Filter to a specific doc file (relative path)
`tree`	boolean	false	Return nested tree structure
`projectPath`	string	cwd	Project root path

kirograph_docs_search enableDocs

Search documentation sections by query. Returns matching sections ranked by relevance. Independent from kirograph_search (code-only).

Parameter	Type	Default	Description
`query`	string	required	Search query (natural language or keywords)
`file`	string	-	Narrow search to a specific doc file
`limit`	number	10	Max results
`projectPath`	string	cwd	Project root path

kirograph_docs_section enableDocs

Retrieve full content of a documentation section by its stable ID. Use context=true to also get ancestor headings and child summaries.

Parameter	Type	Default	Description
`id`	string	required	Section ID (from TOC or search results)
`context`	boolean	false	Include ancestor heading chain and child summaries
`projectPath`	string	cwd	Project root path

kirograph_docs_outline enableDocs

Get the heading hierarchy for a single documentation file. Lighter than full TOC when you know which file is relevant.

Parameter	Type	Default	Description
`file`	string	required	Relative path to the doc file
`projectPath`	string	cwd	Project root path

kirograph_docs_refs enableDocs

Find code symbols referenced by a doc section, or doc sections that reference a code symbol. Bidirectional lookup.

Parameter	Type	Default	Description
`sectionId`	string	-	Doc section ID (find code symbols it references)
`nodeId`	string	-	Code symbol qualified name (find doc sections that reference it)
`projectPath`	string	cwd	Project root path

kirograph_data_list enableData

List all indexed datasets with row counts, column counts, and file sizes.

Parameter	Type	Default	Description
`projectPath`	string	cwd	Project root path

kirograph_data_describe enableData

Full schema profile for a dataset: column names, inferred types, cardinality, null percentages, min/max values, and sample values.

Parameter	Type	Default	Description
`dataset`	string	required	Dataset ID (from `kirograph_data_list`)
`column`	string	-	Deep dive on a single column
`projectPath`	string	cwd	Project root path

kirograph_data_query enableData

Filtered row retrieval with structured operators. Multiple filters are ANDed. All queries use parameterized SQL (zero injection surface).

Parameter	Type	Default	Description
`dataset`	string	required	Dataset ID
`filters`	Filter[]	-	Array of `{column, op, value}`. Ops: eq, neq, gt, gte, lt, lte, contains, in, is_null, between
`columns`	string[]	all	Column projection
`limit`	number	500	Max rows (hard cap: 500)
`offset`	number	0	Pagination offset
`projectPath`	string	cwd	Project root path

kirograph_data_aggregate enableData

Server-side GROUP BY aggregation. Computation happens in SQLite; only results enter the context window.

Parameter	Type	Default	Description
`dataset`	string	required	Dataset ID
`groupBy`	string[]	required	Columns to group by
`metrics`	Metric[]	required	Array of `{column, op}`. Ops: count, sum, avg, min, max, count_distinct
`filters`	Filter[]	-	Pre-aggregation filters
`projectPath`	string	cwd	Project root path

kirograph_data_search enableData

Search column names and sample values by keyword within a dataset.

Parameter	Type	Default	Description
`dataset`	string	required	Dataset ID
`query`	string	required	Search keyword
`projectPath`	string	cwd	Project root path

kirograph_data_join enableData

SQL JOIN across two indexed datasets. Combines data without loading either file into context.

Parameter	Type	Default	Description
`left`	string	required	Left dataset ID
`right`	string	required	Right dataset ID
`leftColumn`	string	required	Join column from left dataset
`rightColumn`	string	required	Join column from right dataset
`type`	string	inner	Join type: inner, left, right
`columns`	string[]	all	Column projection (prefix with dataset ID)
`limit`	number	100	Max rows (hard cap: 500)
`projectPath`	string	cwd	Project root path

kirograph_data_correlations enableData

Pairwise Pearson correlations between numeric columns. Discovers hidden relationships without loading data.

Parameter	Type	Default	Description
`dataset`	string	required	Dataset ID
`threshold`	number	0.3	Min absolute correlation to include
`projectPath`	string	cwd	Project root path

kirograph_data_quality enableData

Data quality triage: rank columns by risk (null rate, cardinality anomalies, type issues). Identifies problematic columns without loading data.

Parameter	Type	Default	Description
`dataset`	string	required	Dataset ID
`projectPath`	string	cwd	Project root path

kirograph_security enableSecurity

Security overview: total dependencies, vulnerability counts, verdict breakdown (affected/not_affected/under_investigation), and stale data warnings.

Parameter	Type	Default	Description
`projectPath`	string	cwd	Project root path

kirograph_vulns enableSecurity

List vulnerabilities with filtering by severity and reachability verdict. Includes fix suggestions when a fixed version is available.

Parameter	Type	Default	Description
`severity`	string	-	Filter: `critical`, `high`, `medium`, `low`
`verdict`	string	-	Filter: `affected`, `not_affected`, `under_investigation`
`limit`	number	20	Max results
`refresh`	boolean	false	Trigger fresh enrichment from configured databases before listing
`projectPath`	string	cwd	Project root path

kirograph_reachability enableSecurity

Analyze reachability for a specific CVE or dependency. Returns call paths, entry points, and affected layers.

Parameter	Type	Default	Description
`target`	string	required	CVE identifier (e.g. `CVE-2024-1234`) or package name (e.g. `lodash`)
`projectPath`	string	cwd	Project root path

kirograph_licenses enableSecurity

List dependency licenses and check against the configured policy (securityLicensePolicy).

Parameter	Type	Default	Description
`policy`	boolean	false	Show only policy violations (deny/warn)
`projectPath`	string	cwd	Project root path

kirograph_staleness enableSecurity

Check dependency freshness — identifies packages significantly behind their latest published version. Supports npm, PyPI, crates.io, RubyGems, and Packagist registries.

Parameter	Type	Default	Description
`threshold`	number	0.3	Minimum staleness score (0.0–1.0) to include
`refresh`	boolean	false	Re-query registries before listing
`projectPath`	string	cwd	Project root path

kirograph_sbom enableSecurity

Generate a CycloneDX 1.5 SBOM JSON document containing all project dependencies as components with purl identifiers, scope classification, and dependency relationships.

Parameter	Type	Default	Description
`projectPath`	string	cwd	Project root path

kirograph_vex enableSecurity

Generate a CycloneDX 1.5 VEX JSON document with reachability-derived analysis states. Maps graph verdicts to CycloneDX VEX states.

Parameter	Type	Default	Description
`projectPath`	string	cwd	Project root path

kirograph_vuln_add enableSecurity

Manually register a CVE against a dependency. Useful for private/internal advisories not in public databases.

Parameter	Type	Default	Description
`cveId`	string	required	CVE identifier (e.g. `CVE-2024-9999`)
`package`	string	required	Package name (must match an existing indexed dependency)
`severity`	number	-	CVSS v3.1 base score (0.0–10.0)
`summary`	string	-	Human-readable description (truncated to 500 chars)
`fixedVersion`	string	-	Version that fixes the vulnerability
`projectPath`	string	cwd	Project root path

Core Tools 3 tools · ~145 tok