Home / MCP servers / Repowise

Repowise

repowise-dev/repowiseMCP server

Codebase intelligence for AI coding agents — graph, git history, docs, decisions, code health.

Scanned · 5 to knowMCP serverSource: Official MCP Registry
8,132 stars +220 this week Updated 2d ago License AGPL-3.0
86popular

Why this score

Installs in real projects19/25
Stars8/10
Usage (forks)13/15
Upkeep25/25
License15/15
Owner history6/10

188 public GitHub projects have this in their committed setup (counted 2026-10-07). That counts people who kept it, not people who starred it. Private projects aren't visible, so the real number is higher.

Popularity score: 86/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Nov 4, 2026 at the PyPI package repowise@0.60.1, first 300 source files (it's a large repo), with Cisco's open-source skill-scanner.

What its code does:

  • Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.
  • Runs shell commands Common for dev tools. Read the commands it runs.packages/core/src/repowise/core/procutils.py:228
  • Runs code it builds while running (eval or exec) Harder to read ahead of time, since the code is assembled while it runs.packages/cli/src/repowise/cli/rewrite_hook.py:506 and 1 more
  • Makes network requestspackages/cli/src/repowise/cli/platform/client.py:111, packages/core/src/repowise/core/upgrade/release.py:119 and 6 more
  • Reads environment variables, where API keys usually livepackages/cli/src/repowise/cli/health_gate_hook.py:383

Web addresses in its code:

  • repowise.devpackages/cli/src/repowise/cli/platform/auth.py:31
  • api.repowise.devpackages/cli/src/repowise/cli/platform/client.py:14
  • raw.githubusercontent.compackages/core/src/repowise/core/upgrade/release.py:35
  • claude.compackages/core/src/repowise/core/agents/identity.py:198
  • dev.azure.compackages/core/src/repowise/core/forges/base.py:35
  • git.corp.compackages/core/src/repowise/core/forges/registry.py:63
  • in-toto.iopackages/core/src/repowise/core/changes/record.py:19
  • json.schemastore.orgpackages/core/src/repowise/core/ci/sarif.py:9
  • opencode.aipackages/core/src/repowise/core/agents/identity.py:234

These are the sites named in the code, so it's where your data could go. It isn't a complete list: code can build addresses while it runs, and a few of these may be links rather than calls. Whatever you send also goes to the AI model you use.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Nothing from another maker does quite the same job yet.