← Back to search

com.adrianczuczka/mason

adrianczuczka Scanned 6h ago

Context engineering MCP server — generates CLAUDE.md files via structured codebase analysis

C
67 / 100

Versions

0.3.6latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 22

mason_init
annotations: none low

Inspect this project now: returns documentation audit findings, committed-diff review findings, decision/map status, and a quickstart playbook. Quickstart and map modes are read-only and deterministic. Explicit mode: setup configures MCP, instructions and lifecycle hooks to use mason on PATH while retaining original audit evidence; use it only when the user requests setup. Optional host selects codex or claude. Optional base selects the review comparison; evidence imports CI manifests with check outcomes, commit freshness, and links to changed files and accepted decisions. mode: map returns the full Map-Reduce build workflow. Repeat calls refresh findings even after setup.

base string
mason_automation
annotations: none low

Inspect installed automation and observed host events, or resume/check retained documentation repair evidence across sessions. status is read-only; check saves local baselines and verification reports without editing source or approving advisories. Returns concise results with a full report path. Works without a map.

dir string
mason_repair
annotations: none low

Track documentation repairs against original audit evidence. prepare saves a local baseline and returns a scoped work order; verify reads that baseline and reports resolved, unresolved, review-required, unverified, and new findings. Suppressed advisories remain unresolved. Does not edit documentation or approve decisions. No map required.

dir string baselinePath string
review_advisory
annotations: none low

Prepare an assessment of an original repair advisory and its exact repository scope, then record authorized addressed, inapplicable or deferred outcomes with reviewToken, reviewer and note. Relevant changes reopen reviews; unrelated commits preserve them. Records belong in Git. Decision findings route to review_decision; this tool never approves decisions. Recorded identities are assertions, not authenticated approvals.

dir string
mason_complete_init
annotations: none low

Record assistant instruction setup locally in ignored .mason/local/project.json, with feature settings in shared .mason/config.json. Other tools work without this marker. Repeated calls preserve the original setup time and existing settings; pass confluenceConfigured only to change that setting.

mason_set_confluence
annotations: none low

Configure Confluence credentials. Two-step flow: (1) call without `spaceKey` to validate the credentials and receive a list of available spaces — relay them to the user. (2) call again with the same `baseUrl`/`email`/`apiToken` plus the chosen `spaceKey` to persist. Credentials are stored in `~/.mason/config.json`. Warn the user that the API token will be visible in chat history before they paste it.

email string
full_analysis
annotations: none low

One-shot orientation for a project WITHOUT a concept map (get_snapshot returned exists:false). Returns git history stats, project structure with file counts, curated code sample previews (~60 lines each), and test-to-source mapping. On a mapped project, prefer get_snapshot — it is cheaper and answers feature/architecture questions directly.

analyze_project
annotations: none low

Run git history analysis on a codebase. Returns commit convention patterns, stale directories, and frequently changed files. These are aggregate stats across hundreds of commits that would be expensive to compute manually.

get_code_samples
annotations: none low

Get previews (first ~60 lines) of representative source files from the codebase. Includes entry points, config files, hot files (frequently changed), test examples, and one file per directory for breadth. Read files natively for full content.

get_snapshot
annotations: none low

Return the optional feature-to-file architecture map with drift and trust evidence. If no map exists, returns exists:false plus project structure, Git signals, and test pairs. Decision capture, get_context, and get_impact still work. No initialization required.

get_context
annotations: none low

Assemble task context: matching decisions with rationale, approval, owner, sources, last review, and freshness, plus related tests, file impact, and any available map entries. Proposals are suggestions; legacy records are unreviewed; accepted decisions are constraints subject to freshness. No initialization or map required. Pass task and optional files. map.status and diagnostics preserve missing or invalid knowledge. Impact covers up to three unique files, expanding directory anchors.

generate_snapshot_batch
annotations: none low

Map step of the concept-map build. Returns one batch of source files (skeletons of every file in the batch plus a few deeper-read bodies for grounding), along with a system prompt instructing you to derive features and flows for ONLY this batch. Call repeatedly with the returned `nextOffset` until it is null, calling `save_partial_snapshot` between each call. Use product-natural feature names so partials merge cleanly in the reduce step.

save_partial_snapshot
annotations: none low

Persist the partial concept map you derived for one batch. Call this once per batch, with the `batchId` from the `generate_snapshot_batch` response. Partials accumulate in `.mason/partial-snapshots/` and are merged in the reduce step.

description string
reduce_snapshot
annotations: none low

Reduce step of the concept-map build. Returns every partial snapshot plus a system prompt asking you to merge them into one coherent project-wide map. Resolve platform variants into single product features, dedupe near-duplicates, and ensure no file is dropped. After producing the unified map, call `save_snapshot` to persist it (this also clears the partials).

save_snapshot
annotations: none low

Save a concept-to-files map as a persistent project snapshot. Maps feature names and data flows to the files that implement them. Persists across conversations — future sessions can call get_snapshot to instantly find relevant files. No API key needed — you are the LLM generating the map.

description string
save_decision
annotations: none low

Capture or revise a decision proposal with rationale, anchors, optional owner, sources, and a known actor. Compare matching get_context records and pending proposals before saving. When new evidence changes the same lesson

review_decision
annotations: none low

Prepare a decision review: returns the full record and history, any operative accepted revision, provenance, changes and previews for both sets of anchors, and a reviewToken. Then record accept, reaffirm, or retire with that token, the authorized reviewer, and a reason. Acceptance replaces the operative revision; retirement withdraws the entire record including its proposal. Acceptance requires owner, source, readable Git HEAD, and committed anchor changes. Changed records or code invalidate the token. Identities and approvals are recorded assertions for normal PR review, not authenticated proof.

id string dir string note string reviewer string reviewToken string
mason_check_drift
annotations: none low

Check how far the concept map has drifted from HEAD. Deterministic (git + filesystem, no LLM). Returns which features/flows are stale and the changed files behind them, new source files not yet mapped, ghost files (mapped but deleted), renames, and a `recommendation`: `up-to-date` (nothing to do), `incremental` (update just the stale entries via save_snapshot), or `full-rebuild` (re-run the Map-Reduce build). Call this before trusting the map in a long session, or periodically to keep the map and any synced wikis fresh.

verify_snapshot
annotations: none low

Spot-check the concept map

save_verification
annotations: none low

Record verify_snapshot verdicts. Entries judged ok are stamped verifiedAt; failures are flagged verificationFailed with your note and surface in get_context, get_snapshot, and mason_check_drift until corrected. Verdict notes are required for failures.

ok boolean
get_impact
annotations: none low

Trace historical co-change partners, related tests, and references with evidence: resolved imports, explicit paths, or uncertain name candidates. Candidates are not proven dependencies. Deterministic and read-only; no initialization or concept map required.

export_to_confluence
annotations: none low

Sync the project

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), os, path
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 57

low
Tool 'mason_init' has no annotations annotation_checker · 100%
low
Tool 'mason_automation' has no annotations annotation_checker · 100%
low
Tool 'mason_repair' has no annotations annotation_checker · 100%
low
Tool 'review_advisory' has no annotations annotation_checker · 100%
low
Tool 'mason_complete_init' has no annotations annotation_checker · 100%
low
Tool 'mason_set_confluence' has no annotations annotation_checker · 100%
low
Tool 'full_analysis' has no annotations annotation_checker · 100%
low
Tool 'analyze_project' has no annotations annotation_checker · 100%
low
Tool 'get_code_samples' has no annotations annotation_checker · 100%
low
Tool 'get_snapshot' has no annotations annotation_checker · 100%
low
Tool 'get_context' has no annotations annotation_checker · 100%
low
Tool 'generate_snapshot_batch' has no annotations annotation_checker · 100%
low
Tool 'save_partial_snapshot' has no annotations annotation_checker · 100%
low
Tool 'reduce_snapshot' has no annotations annotation_checker · 100%
low
Tool 'save_snapshot' has no annotations annotation_checker · 100%
low
Tool 'save_decision' has no annotations annotation_checker · 100%
low
Tool 'review_decision' has no annotations annotation_checker · 100%
low
Tool 'mason_check_drift' has no annotations annotation_checker · 100%
low
Tool 'verify_snapshot' has no annotations annotation_checker · 100%
low
Tool 'save_verification' has no annotations annotation_checker · 100%
low
Tool 'get_impact' has no annotations annotation_checker · 100%
low
Tool 'export_to_confluence' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: vitest@4.1.3 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: mason_init manifest_parser · 70%
info
Tool: mason_automation manifest_parser · 70%
info
Tool: mason_repair manifest_parser · 70%
info
Tool: review_advisory manifest_parser · 70%
info
Tool: mason_complete_init manifest_parser · 70%
info
Tool: mason_set_confluence manifest_parser · 70%
info
Tool: full_analysis manifest_parser · 70%
info
Tool: verify_snapshot manifest_parser · 70%
info
Tool: analyze_project manifest_parser · 70%
info
Tool: get_code_samples manifest_parser · 70%
info
Tool: get_snapshot manifest_parser · 70%
info
Tool: get_context manifest_parser · 70%
info
Tool: generate_snapshot_batch manifest_parser · 70%
info
Tool: save_partial_snapshot manifest_parser · 70%
info
Tool: reduce_snapshot manifest_parser · 70%
info
Tool: save_snapshot manifest_parser · 70%
info
Tool: save_decision manifest_parser · 70%
info
Tool: review_decision manifest_parser · 70%
info
Tool: mason_check_drift manifest_parser · 70%
info
Tool: save_verification manifest_parser · 70%
info
Tool: get_impact manifest_parser · 70%
info
Tool: export_to_confluence manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (21) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'mason_check_drift': Cross-tool sequencing directive poisoning · 85%
info
SBOM generated: 292 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%