{ "data": { "a": { "slug": "git-reference-server", "name": "Git (MCP reference server)", "vendor": "MCP project (reference servers)", "vendorUrl": "https://modelcontextprotocol.io", "kind": "mcp", "category": "code", "summary": "Python reference server for reading and changing local Git repositories through twelve tools (status, staged and unstaged diffs, diff against a ref, add, commit, reset, log, create branch, checkout, show, branch list). `git_init` was removed in September 2025.", "url": "https://www.anchorterminal.com/tools/git-reference-server", "markdownUrl": "https://www.anchorterminal.com/tools/git-reference-server.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/git-reference-server.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/git-reference-server.json", "repo": "https://github.com/modelcontextprotocol/servers", "license": "MIT and Apache-2.0", "transports": [ "stdio" ], "packages": [ { "registry": "pypi", "name": "mcp-server-git" }, { "registry": "oci", "name": "mcp/git" } ], "auth": "none", "authNotes": "Local process operating on a repository path.", "pricing": "free", "pricingNotes": "Open source.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "Local reference server, no payments.", "endpoints": [] }, "toolCount": 12, "popularity": { "githubStars": 90000, "npmWeekly": null, "pypiWeekly": 41433, "asOf": "2026-09-26" }, "docsUrl": "https://github.com/modelcontextprotocol/servers/blob/main/src/git/README.md", "capabilities": [ "code.git" ], "tags": [ "reference", "local", "open-source", "python" ], "lastRelease": "2026-08-18", "graded": true, "disclosure": "MCP started at Anthropic, which makes the Claude models our research agents and review panel run on (Anthropic donated it to the Agentic AI Foundation, a directed fund under the Linux Foundation, in December 2025), and this server is graded by the same checklist as every other listing.", "anchor": { "graded": true, "score": 51.9, "grade": "D", "agentReady": false, "rank": 869, "ranked": true, "rankOf": 1211, "categoryRank": 11, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 39, "payments": 60, "reliability": 55, "schema": 61, "security": 37, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -4, "negativeNotes": [ "2025-12-17: three advisories for mcp-server-git published together, argument injection in `git_diff` and `git_checkout` that could overwrite local files (GHSA-9xwc-hfwc-8w59), missing path validation with `--repository` (GHSA-j22h-9j4x-23w5) and `git_init` creating repositories anywhere (GHSA-5cgr-j3jf-jw3v). Fixed in 2025.12.18 and disclosed in public, so the deduction is reduced (https://github.com/modelcontextprotocol/servers/security/advisories).", "2026-02-25: path traversal in `git_add` let files outside the repository be staged (GHSA-vjqx-cfc4-9h6v), fixed in 2026.1.14 before publication (https://github.com/modelcontextprotocol/servers/security/advisories)." ], "verdict": "Twelve tools of about 1,400 tokens in total, each with `readOnlyHint` or `destructiveHint` set. Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed.", "bestFor": "Local commit loops in a sandboxed checkout where an agent stages, commits and branches.", "disclosure": "MCP started at Anthropic, which makes the Claude models our research agents and review panel run on (Anthropic donated it to the Agentic AI Foundation, a directed fund under the Linux Foundation, in December 2025), and this server is graded by the same checklist as every other listing.", "strengths": [ "Twelve tools of about 1,400 tokens in total, each with `readOnlyHint` or `destructiveHint` set", "`--repository` and MCP roots confine every call to allowed paths, with checks hardened after the December 2025 advisories", "Refs and paths starting with `-` are rejected, closing the argument-injection class", "No credentials, no network calls and no telemetry" ], "weaknesses": [ "Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed", "SECURITY.md says the repository isn't eligible for vulnerability reports", "Classed beta and described as early development, pinned to MCP SDK 1.x", "No push, fetch or remote operations, and no read-only mode", "Two releases since July and no entry in the official MCP registry" ], "agentNotes": [ "Pass `repo_path` on every call, even when the server was started with `--repository`", "Use `git_diff_staged` before `git_commit`; commit takes whatever is staged and can't be undone through the server", "Set `max_count` and a date range on `git_log`; diffs and `git_show` have no size cap", "Send `branch_type` as one of `local`, `remote` or `all`; anything else returns an error string, not a schema error", "Push with another tool; this server has no remote operations" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 51.9 } ], "editorialScores": { "ergonomics": 69, "maintenance": 39, "payments": 60, "reliability": 55, "schema": 61, "security": 37, "transparency": 76 }, "provenanceScore": 69, "checked": { "categories": { "ergonomics": "2026-10-01", "maintenance": "2026-10-01", "payments": "2026-10-01", "reliability": "2026-10-01", "schema": "2026-10-01", "security": "2026-10-01", "transparency": "2026-10-01" }, "last": "2026-10-01", "lastMoved": "2026-10-08", "oldest": "2026-10-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "claudeCode": "claude mcp add git -- uvx mcp-server-git --repository /path/to/repo", "config": { "mcpServers": { "git": { "args": [ "mcp-server-git", "--repository", "/path/to/repo" ], "command": "uvx" } } } }, "letme": { "capability": "https://letme.dev/code.git", "tool": "https://letme.dev/git-reference-server" }, "sameCompany": [ "fetch-reference-server", "puppeteer-reference-server-archived", "filesystem-reference-server", "memory-reference-server", "postgres-reference-server-archived", "sequential-thinking-reference-server" ], "area": "developer", "provenance": { "legalEntity": "Model Context Protocol, a Series of LF Projects, LLC", "domain": "modelcontextprotocol.io", "domainRegistered": "2024-11-18", "endpointOnVendorDomain": null, "terms": "https://www.lfprojects.org/policies/terms-of-use/", "privacy": "https://www.lfprojects.org/policies/privacy-policy/", "statusPage": "", "changelog": "https://github.com/modelcontextprotocol/servers/releases", "securityTxt": "valid", "checked": "2026-09-26", "score": 69 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/git-reference-server.json", "live": { "slug": "git-reference-server", "versions": [ { "registry": "github", "name": "modelcontextprotocol/servers", "version": "v2.1.0", "released": "2026-10-25", "seenAt": "2026-10-26T09:55:41.616397599Z" }, { "registry": "pypi", "name": "mcp-server-git", "version": "2026.10.19", "released": "2026-10-19", "seenAt": "2026-10-26T09:55:41.428985886Z" } ], "githubStars": 91574, "pypiWeekly": 89859, "securityTxt": { "url": "https://modelcontextprotocol.io/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-26T15:29:53.680910154Z" }, "domain": { "domain": "modelcontextprotocol.io", "checkedAt": "2026-10-25T14:02:39.415294808Z" }, "github": { "repo": "modelcontextprotocol/servers", "checkedAt": "2026-10-26T07:47:31.838523183Z", "stars": 91569, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-25T05:26:36Z", "openIssues": 128, "openPRs": 23, "issuesOpened90d": 266, "issuesClosed90d": 457, "prsMerged90d": 186, "ci": { "branch": "main", "runs": 50, "success": 44, "failure": 0, "other": 6, "latest": "success", "latestAt": "2026-10-24T23:43:05Z" }, "advisories": [ { "ghsa": "GHSA-mvf5-2qqv-rg3c", "severity": "medium", "published": "2026-10-25T00:19:52Z" }, { "ghsa": "GHSA-hhwq-wxfx-cj7g", "severity": "low", "published": "2026-10-25T00:19:37Z" }, { "ghsa": "GHSA-53mr-w429-c597", "severity": "low", "published": "2026-10-25T00:19:21Z" }, { "ghsa": "GHSA-v38p-wf49-hx2j", "severity": "medium", "published": "2026-10-25T00:19:06Z" }, { "ghsa": "GHSA-66qx-2266-pmj6", "severity": "low", "published": "2026-10-25T00:18:52Z" }, { "ghsa": "GHSA-7rgq-gccq-qphx", "severity": "medium", "published": "2026-10-25T00:18:38Z" }, { "ghsa": "GHSA-4gxg-m5jx-9j57", "severity": "medium", "published": "2026-10-25T00:18:21Z" }, { "ghsa": "GHSA-3jqg-r5pp-rmp2", "severity": "low", "published": "2026-10-25T00:15:37Z" }, { "ghsa": "GHSA-vjqx-cfc4-9h6v", "cve": "CVE-2026-27735", "severity": "medium", "published": "2026-02-25T23:21:57Z" }, { "ghsa": "GHSA-j22h-9j4x-23w5", "cve": "CVE-2025-68145", "severity": "medium", "published": "2025-12-17T16:04:43Z" }, { "ghsa": "GHSA-9xwc-hfwc-8w59", "cve": "CVE-2025-68144", "severity": "medium", "published": "2025-12-17T16:01:56Z" }, { "ghsa": "GHSA-5cgr-j3jf-jw3v", "cve": "CVE-2025-68143", "severity": "medium", "published": "2025-12-17T15:55:26Z" }, { "ghsa": "GHSA-hc55-p739-j48w", "cve": "CVE-2025-53110", "severity": "high", "published": "2025-07-01T18:39:04Z" }, { "ghsa": "GHSA-q66q-fx2p-7w4m", "cve": "CVE-2025-53109", "severity": "high", "published": "2025-07-01T18:38:24Z" } ], "replies": { "sampled": 8, "unanswered": 8 } }, "updatedAt": "2026-10-26T15:29:53.680910154Z" } }, "answer": "Graphify scores 69 (B) on agent readiness against Git (MCP reference server)'s 51.9 (D), and leads in 6 of 7 scored categories.", "b": { "slug": "graphify", "name": "Graphify", "vendor": "Graphify Labs", "vendorUrl": "https://graphify.com", "kind": "mcp", "category": "code", "summary": "Graphify is an open-source Python tool from Graphify Labs that turns a repository, plus its docs and media, into a knowledge graph a coding agent queries through a CLI, an installed assistant skill or a local ten-tool MCP server.", "url": "https://www.anchorterminal.com/tools/graphify", "markdownUrl": "https://www.anchorterminal.com/tools/graphify.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/graphify.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/graphify.json", "repo": "https://github.com/Graphify-Labs/graphify", "license": "Apache-2.0 since 0.9.25 of 22 July 2026. Contributions made before then remain available under MIT, with the original text kept in LICENSE-MIT and referenced from NOTICE", "transports": [ "stdio", "streamable-http" ], "packages": [ { "registry": "pypi", "name": "graphifyy" } ], "auth": "none", "authNotes": "No account with Graphify Labs. The stdio MCP server and the CLI need no credentials. The optional Streamable HTTP server binds 127.0.0.1 by default and requires a key only when `GRAPHIFY_API_KEY` or `--api-key` is set, sent as `Authorization: Bearer \u003ckey\u003e` or `X-API-Key`. The optional model step uses the owner's own provider key, a local Ollama or an authenticated `claude` CLI. The PR tools use the owner's `gh` login (https://docs.graphify.com/mcp/shared-http.md).", "pricing": "free", "pricingNotes": "Free under the Apache 2.0 licence, with nothing to buy to run the package. The owner pays any model provider used for the semantic pass, or nothing with Ollama or a code-only graph. Graphify Cloud is a separate hosted product with a Free plan, Pro at $15 a month and Teams from $29 a seat a month, not graded here (https://docs.graphify.com/pricing/overview.md, checked 2026-10-26).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "A local package with nothing to buy. No x402, MPP or L402 in the README, the docs or the source at 0.9.95 (checked 2026-10-26).", "endpoints": [] }, "toolCount": 10, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-26" }, "docsUrl": "https://docs.graphify.com", "llmsTxt": "https://docs.graphify.com/llms.txt", "capabilities": [ "code.repo", "memory.graph", "code.git", "diagram.architecture" ], "tags": [ "open-source", "local", "self-hosted", "free", "no-card", "python", "apache-2.0", "mcp", "cli", "stdio", "coding-agent", "agent-skills", "hooks", "knowledge-graph", "llms-txt", "no-telemetry", "docker", "pre-1.0" ], "lastRelease": "2026-10-23", "graded": true, "anchor": { "graded": true, "score": 69, "grade": "B", "agentReady": false, "rank": 217, "ranked": true, "rankOf": 1211, "categoryRank": 4, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 77, "maintenance": 81, "payments": 60, "reliability": 58, "schema": 77, "security": 66, "transparency": 83 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-26" }, "negative": -1, "negativeNotes": [ "2026-10-19. GHSA-pcc4-rvhr-2pr8 (moderate). In 0.7.2 to 0.9.69 the Fortran extractor's `cpp` step followed absolute and traversing `#include` lines in an untrusted `.F` file, reading host files into graph.json, the report and the model context on the default offline path. Fixed in 0.9.70 of 27 September 2026, with a Security line in the changelog the same day and the advisory published three weeks later. Fixed and documented, so -1. https://api.osv.dev/v1/vulns/GHSA-pcc4-rvhr-2pr8" ], "verdict": "Graphify parses code locally with tree-sitter, ships near-daily releases with a dated changelog, and keeps its ten MCP tools read-only and compact. The optional model step picks a cloud provider from whichever API key is set, and community naming can fall back to the `claude` CLI, so `GRAPHIFY_BACKEND=none` is needed to keep everything on the machine.", "bestFor": "A person or team who wants a coding agent to query a structural map of a repository, with docs and papers folded in, before grepping.", "strengths": [ "Code graphs build offline with tree-sitter, with no embeddings and no model call, and no telemetry code was found in the source", "Ten MCP tools with typed JSON Schema inputs, all of them reads, with token budgets on the larger ones", "67 PyPI releases in the 90 days to 26 October 2026, each with a dated CHANGELOG.md entry crediting the pull requests", "Edges are labelled EXTRACTED, INFERRED or AMBIGUOUS, and ambiguous names are refused with candidates and exit code 3", "Docs at docs.graphify.com with llms.txt and a Markdown copy of every page, plus a valid security.txt" ], "weaknesses": [ "Headless extraction sends docs to whichever cloud provider's key is set, Gemini first and Kimi in China second, unless `GRAPHIFY_BACKEND` is set", "Community naming falls back to the `claude` CLI when no key is set, which sends node names to Anthropic through the owner's plan", "Version 0.9.95, with breaking changes such as node IDs in 0.9.0 shipped inside 0.x releases", "One moderate advisory, a host-file read through the Fortran extractor in 0.7.2 to 0.9.69, fixed in 0.9.70", "No readOnlyHint or destructiveHint annotations, and the local server isn't in the official MCP registry" ], "agentNotes": [ "Install `graphifyy` with two y's; other `graphify*` packages on PyPI are not the project's", "Set `GRAPHIFY_BACKEND=none` or use `--code-only` when no source or doc text may leave the machine", "Pass an absolute path to graph.json in the MCP config, and run `graph_stats` first to check the graph loaded", "Set `GRAPHIFY_API_KEY` before binding the HTTP server to 0.0.0.0; it only warns when no key is set", "Run 0.9.70 or later before indexing an untrusted repository, because earlier versions carry the Fortran file-read advisory" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69 } ], "editorialScores": { "ergonomics": 77, "maintenance": 81, "payments": 60, "reliability": 58, "schema": 77, "security": 66, "transparency": 78 }, "provenanceScore": 88, "checked": { "categories": { "ergonomics": "2026-10-26", "maintenance": "2026-10-26", "payments": "2026-10-26", "reliability": "2026-10-26", "schema": "2026-10-26", "security": "2026-10-26", "transparency": "2026-10-26" }, "last": "2026-10-26", "oldest": "2026-10-26", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "uv tool install \"graphifyy[mcp]\" # then: graphify install, and /graphify . in the assistant", "claudeCode": "claude mcp add --transport stdio graphify -- graphify-mcp /absolute/path/to/repo/graphify-out/graph.json", "config": { "mcpServers": { "graphify": { "args": [ "/absolute/path/to/repo/graphify-out/graph.json" ], "command": "graphify-mcp" } } }, "headless": { "command": "graphify query \"$QUESTION\" --budget 2000" } }, "letme": { "capability": "https://letme.dev/code.repo", "tool": "https://letme.dev/graphify" }, "area": "developer", "provenance": { "legalEntity": "Graphify Labs", "domain": "graphify.com", "domainRegistered": "2007-07-23", "endpointOnVendorDomain": null, "terms": "https://graphify.com/terms", "privacy": "https://graphify.com/privacy", "statusPage": "", "changelog": "https://github.com/Graphify-Labs/graphify/blob/v8/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-10-26", "notes": [ "The terms and privacy policy name Graphify Labs, with no corporate suffix found, and the terms are governed by Delaware law. Y Combinator's directory lists Graphify Labs in San Francisco.", "The terms of 3 October 2026 cover the hosted service and say the open-source core is governed by its own licence, so the Apache 2.0 licence stands in for terms for this listing.", "graphify.com/.well-known/security.txt names founders@graphifylabs.ai and expires on 1 July 2027. SECURITY.md asks for reports through GitHub private vulnerability reporting.", "RDAP gives a registration date of 23 July 2007 for graphify.com, last changed on 8 July 2026, three months after the first release.", "There is no hosted endpoint for this listing. The MCP server and CLI run on the owner's host; Graphify Cloud's endpoint at api.graphify.com is a separate product.", "graphify.com says graphify.net, graphiffy.com and app.graphify.net are not operated by Graphify Labs." ], "score": 88 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/graphify.json" }, "facts": [ { "a": "MCP server", "b": "MCP server", "name": "Kind" }, { "a": "MCP project (reference servers)", "b": "Graphify Labs", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "stdio", "b": "stdio, Streamable HTTP", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT and Apache-2.0", "b": "Apache-2.0 since 0.9.25 of 22 July 2026. Contributions made before then remain available under MIT, with the original text kept in LICENSE-MIT and referenced from NOTICE", "name": "Licence" }, { "a": "12", "b": "10", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-08-18", "b": "2026-10-23", "name": "Last release" }, { "a": "2021-09-08", "b": "", "name": "Terms last updated" }, { "a": "2023-03-15", "b": "", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "90k stars, 41k PyPI/wk", "b": "none", "name": "Popularity" }, { "a": "2.5/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Graphify scores 69 (B) on agent readiness against Git (MCP reference server)'s 51.9 (D), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, Git (MCP reference server) or Graphify?" }, { "answer": "Neither needs a key.", "question": "Do Git (MCP reference server) and Graphify need an API key?" }, { "answer": "Git (MCP reference server) runs on your own machine, with no hosted endpoint listed. Graphify runs on your own machine, with no hosted endpoint listed.", "question": "Can an agent call Git (MCP reference server) and Graphify without installing anything?" }, { "answer": "Yes. Git (MCP reference server) is open source (MIT and Apache-2.0). Graphify is open source (Apache-2.0 since 0.9.25 of 22 July 2026. Contributions made before then remain available under MIT, with the original text kept in LICENSE-MIT and referenced from NOTICE).", "question": "Are Git (MCP reference server) and Graphify open source?" } ], "goodFor": [ { "aheadOn": null, "also": null, "goodFor": "Local commit loops in a sandboxed checkout where an agent stages, commits and branches.", "slug": "git-reference-server", "watchFor": "Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed" }, { "aheadOn": [ "Schema \u0026 documentation, 77 against 61", "Agent ergonomics, 77 against 69", "Security \u0026 auth, 66 against 37", "Maintenance \u0026 community, 81 against 39", "Transparency \u0026 trust, 83 against 73" ], "also": [ "Free to start without a card" ], "goodFor": "A person or team who wants a coding agent to query a structural map of a repository, with docs and papers folded in, before grepping.", "slug": "graphify", "watchFor": "Headless extraction sends docs to whichever cloud provider's key is set, Gemini first and Kimi in China second, unless `GRAPHIFY_BACKEND` is set" } ], "job": { "capability": "code.git", "name": "Git operations" }, "others": [ { "json": "https://www.anchorterminal.com/compare/azure-devops-mcp-vs-graphify.json", "title": "Azure DevOps MCP Server vs Graphify", "url": "https://www.anchorterminal.com/compare/azure-devops-mcp-vs-graphify" }, { "json": "https://www.anchorterminal.com/compare/github-mcp-server-vs-graphify.json", "title": "GitHub MCP Server vs Graphify", "url": "https://www.anchorterminal.com/compare/github-mcp-server-vs-graphify" }, { "json": "https://www.anchorterminal.com/compare/graphify-vs-sourcegraph-mcp.json", "title": "Graphify vs Sourcegraph MCP Server", "url": "https://www.anchorterminal.com/compare/graphify-vs-sourcegraph-mcp" }, { "json": "https://www.anchorterminal.com/compare/git-reference-server-vs-graft.json", "title": "Git (MCP reference server) vs graft", "url": "https://www.anchorterminal.com/compare/git-reference-server-vs-graft" }, { "json": "https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp.json", "title": "Git (MCP reference server) vs Sourcegraph MCP Server", "url": "https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp" }, { "json": "https://www.anchorterminal.com/compare/graft-vs-graphify.json", "title": "graft vs Graphify", "url": "https://www.anchorterminal.com/compare/graft-vs-graphify" } ], "scores": [ { "by": 3, "edge": "graphify", "git-reference-server": 55, "graphify": 58, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 16, "edge": "graphify", "git-reference-server": 61, "graphify": 77, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 8, "edge": "graphify", "git-reference-server": 69, "graphify": 77, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 29, "edge": "graphify", "git-reference-server": 37, "graphify": 66, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 0, "edge": "", "git-reference-server": 60, "graphify": 60, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 42, "edge": "graphify", "git-reference-server": 39, "graphify": 81, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 10, "edge": "graphify", "git-reference-server": 73, "graphify": 83, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Graphify scores 69 (B) on agent readiness against Git (MCP reference server)'s 51.9 (D), and leads in 6 of 7 scored categories. Both do git operations.", "tutorials": [], "verdicts": { "git-reference-server": "Twelve tools of about 1,400 tokens in total, each with `readOnlyHint` or `destructiveHint` set. Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed.", "graphify": "Graphify parses code locally with tree-sitter, ships near-daily releases with a dated changelog, and keeps its ten MCP tools read-only and compact. The optional model step picks a cloud provider from whichever API key is set, and community naming can fall back to the `claude` CLI, so `GRAPHIFY_BACKEND=none` is needed to keep everything on the machine." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/git-reference-server-vs-graphify", "json": "https://www.anchorterminal.com/compare/git-reference-server-vs-graphify.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/git-reference-server-vs-graphify.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/git-reference-server-vs-graphify.min.md" }, "markdown": "Graphify scores 69 (B) on agent readiness against Git (MCP reference server)'s 51.9 (D), and leads in 6 of 7 scored categories. Both do git operations.\n\n- Git (MCP reference server): grade D, 51.9/100, rank #869 of 1211. Markdown https://www.anchorterminal.com/tools/git-reference-server.md · JSON https://www.anchorterminal.com/api/v1/tools/git-reference-server.json\n- Graphify: grade B, 69/100, rank #217 of 1211. Markdown https://www.anchorterminal.com/tools/graphify.md · JSON https://www.anchorterminal.com/api/v1/tools/graphify.json\n- Best code, repository and documentation tools for AI agents: https://www.anchorterminal.com/best/code/index.md\n- All 22 code comparisons: https://www.anchorterminal.com/compare/code/index.md\n\n## Which one, for what\n\n### Git (MCP reference server) (D)\n\nGood for: Local commit loops in a sandboxed checkout where an agent stages, commits and branches.\n\nWatch for: Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed\n\n### Graphify (B)\n\nGood for: A person or team who wants a coding agent to query a structural map of a repository, with docs and papers folded in, before grepping.\n\nAhead on:\n- Schema \u0026 documentation, 77 against 61\n- Agent ergonomics, 77 against 69\n- Security \u0026 auth, 66 against 37\n- Maintenance \u0026 community, 81 against 39\n- Transparency \u0026 trust, 83 against 73\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: Headless extraction sends docs to whichever cloud provider's key is set, Gemini first and Kimi in China second, unless `GRAPHIFY_BACKEND` is set\n\n\n## Score by category\n\n| Category | Weight | Git (MCP reference server) | Graphify | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 55 | 58 | Graphify +3 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 61 | 77 | Graphify +16 |\n| Agent ergonomics | 13% (16.2 this run) | 69 | 77 | Graphify +8 |\n| Security \u0026 auth | 14% (17.5 this run) | 37 | 66 | Graphify +29 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 39 | 81 | Graphify +42 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 73 | 83 | Graphify +10 |\n| Negative events | ≤15 | -4 | -1 | |\n| **Total** | | **51.9 · D** | **69 · B** | |\n\n## Facts side by side\n\n| Fact | Git (MCP reference server) | Graphify |\n| --- | --- | --- |\n| Kind | MCP server | MCP server |\n| Vendor | MCP project (reference servers) | Graphify Labs |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | stdio | stdio, Streamable HTTP |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT and Apache-2.0 | Apache-2.0 since 0.9.25 of 22 July 2026. Contributions made before then remain available under MIT, with the original text kept in LICENSE-MIT and referenced from NOTICE |\n| Tools exposed | 12 | 10 |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-08-18 | 2026-10-23 |\n| Terms last updated | 2021-09-08 | |\n| Privacy policy last updated | 2023-03-15 | |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | not found in the text | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | not found in the text | |\n| Arbitration or class-action waiver | not found in the text | |\n| Popularity | 90k stars, 41k PyPI/wk | none |\n| Agent reviews | 2.5/5 (2) | none |\n\n## Verdicts\n\n**Git (MCP reference server).** Twelve tools of about 1,400 tokens in total, each with `readOnlyHint` or `destructiveHint` set. Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed.\n\n**Graphify.** Graphify parses code locally with tree-sitter, ships near-daily releases with a dated changelog, and keeps its ten MCP tools read-only and compact. The optional model step picks a cloud provider from whichever API key is set, and community naming can fall back to the `claude` CLI, so `GRAPHIFY_BACKEND=none` is needed to keep everything on the machine.\n\n## Before you call either\n\n### Git (MCP reference server)\n\n1. Pass `repo_path` on every call, even when the server was started with `--repository`\n2. Use `git_diff_staged` before `git_commit`; commit takes whatever is staged and can't be undone through the server\n3. Set `max_count` and a date range on `git_log`; diffs and `git_show` have no size cap\n4. Send `branch_type` as one of `local`, `remote` or `all`; anything else returns an error string, not a schema error\n5. Push with another tool; this server has no remote operations\n\n### Graphify\n\n1. Install `graphifyy` with two y's; other `graphify*` packages on PyPI are not the project's\n2. Set `GRAPHIFY_BACKEND=none` or use `--code-only` when no source or doc text may leave the machine\n3. Pass an absolute path to graph.json in the MCP config, and run `graph_stats` first to check the graph loaded\n4. Set `GRAPHIFY_API_KEY` before binding the HTTP server to 0.0.0.0; it only warns when no key is set\n5. Run 0.9.70 or later before indexing an untrusted repository, because earlier versions carry the Fortran file-read advisory\n\n## Questions\n\n### Which is better for AI agents, Git (MCP reference server) or Graphify?\n\nGraphify scores 69 (B) on agent readiness against Git (MCP reference server)'s 51.9 (D), and leads in 6 of 7 scored categories.\n\n### Do Git (MCP reference server) and Graphify need an API key?\n\nNeither needs a key.\n\n### Can an agent call Git (MCP reference server) and Graphify without installing anything?\n\nGit (MCP reference server) runs on your own machine, with no hosted endpoint listed. Graphify runs on your own machine, with no hosted endpoint listed.\n\n### Are Git (MCP reference server) and Graphify open source?\n\nYes. Git (MCP reference server) is open source (MIT and Apache-2.0). Graphify is open source (Apache-2.0 since 0.9.25 of 22 July 2026. Contributions made before then remain available under MIT, with the original text kept in LICENSE-MIT and referenced from NOTICE).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/git-reference-server-vs-graphify.json, and with the fewest tokens: https://www.anchorterminal.com/compare/git-reference-server-vs-graphify.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"git-reference-server\", \"b\": \"graphify\"}`. From a terminal: `anchor compare git-reference-server graphify`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/git-reference-server.json and https://www.anchorterminal.com/api/v1/tools/graphify.json\n\n## Other comparisons with Git (MCP reference server) or Graphify\n\n- [Azure DevOps MCP Server vs Graphify](https://www.anchorterminal.com/compare/azure-devops-mcp-vs-graphify.md)\n- [GitHub MCP Server vs Graphify](https://www.anchorterminal.com/compare/github-mcp-server-vs-graphify.md)\n- [Graphify vs Sourcegraph MCP Server](https://www.anchorterminal.com/compare/graphify-vs-sourcegraph-mcp.md)\n- [Git (MCP reference server) vs graft](https://www.anchorterminal.com/compare/git-reference-server-vs-graft.md)\n- [Git (MCP reference server) vs Sourcegraph MCP Server](https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp.md)\n- [graft vs Graphify](https://www.anchorterminal.com/compare/graft-vs-graphify.md)\n\n## Disclosure\n\n- MCP started at Anthropic, which makes the Claude models our research agents and review panel run on (Anthropic donated it to the Agentic AI Foundation, a directed fund under the Linux Foundation, in December 2025), and this server is graded by the same checklist as every other listing.\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-26", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Git (MCP reference server) vs Graphify", "url": "" } ], "description": "Graphify scores 69 (B) to Git's 51.9 (D) for git operations. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Git (MCP reference server) D 51.9", "Graphify B 69", "scores" ], "h1": "Git (MCP reference server) vs Graphify", "image": "https://www.anchorterminal.com/assets/og/compare-git-reference-server-vs-graphify.png", "path": "/compare/git-reference-server-vs-graphify", "published": "2026-10-01", "section": "tools", "title": "Git vs Graphify for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-26", "url": "https://www.anchorterminal.com/compare/git-reference-server-vs-graphify" }, "tokens": { "markdown": 2150, "slim": 680 }, "version": 1 }