{ "data": { "a": { "slug": "graphify", "name": "Graphify", "vendor": "Graphify Labs", "vendorUrl": "https://graphify.com", "kind": "mcp", "category": "code", "summary": "Graphify is an open-source Python tool from Graphify Labs that turns a repository, plus its docs and media, into a knowledge graph a coding agent queries through a CLI, an installed assistant skill or a local ten-tool MCP server.", "url": "https://www.anchorterminal.com/tools/graphify", "markdownUrl": "https://www.anchorterminal.com/tools/graphify.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/graphify.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/graphify.json", "repo": "https://github.com/Graphify-Labs/graphify", "license": "Apache-2.0 since 0.9.25 of 22 July 2026. Contributions made before then remain available under MIT, with the original text kept in LICENSE-MIT and referenced from NOTICE", "transports": [ "stdio", "streamable-http" ], "packages": [ { "registry": "pypi", "name": "graphifyy" } ], "auth": "none", "authNotes": "No account with Graphify Labs. The stdio MCP server and the CLI need no credentials. The optional Streamable HTTP server binds 127.0.0.1 by default and requires a key only when `GRAPHIFY_API_KEY` or `--api-key` is set, sent as `Authorization: Bearer \u003ckey\u003e` or `X-API-Key`. The optional model step uses the owner's own provider key, a local Ollama or an authenticated `claude` CLI. The PR tools use the owner's `gh` login (https://docs.graphify.com/mcp/shared-http.md).", "pricing": "free", "pricingNotes": "Free under the Apache 2.0 licence, with nothing to buy to run the package. The owner pays any model provider used for the semantic pass, or nothing with Ollama or a code-only graph. Graphify Cloud is a separate hosted product with a Free plan, Pro at $15 a month and Teams from $29 a seat a month, not graded here (https://docs.graphify.com/pricing/overview.md, checked 2026-10-26).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "A local package with nothing to buy. No x402, MPP or L402 in the README, the docs or the source at 0.9.95 (checked 2026-10-26).", "endpoints": [] }, "toolCount": 10, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-26" }, "docsUrl": "https://docs.graphify.com", "llmsTxt": "https://docs.graphify.com/llms.txt", "capabilities": [ "code.repo", "memory.graph", "code.git", "diagram.architecture" ], "tags": [ "open-source", "local", "self-hosted", "free", "no-card", "python", "apache-2.0", "mcp", "cli", "stdio", "coding-agent", "agent-skills", "hooks", "knowledge-graph", "llms-txt", "no-telemetry", "docker", "pre-1.0" ], "lastRelease": "2026-10-23", "graded": true, "anchor": { "graded": true, "score": 69, "grade": "B", "agentReady": false, "rank": 217, "ranked": true, "rankOf": 1211, "categoryRank": 4, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 77, "maintenance": 81, "payments": 60, "reliability": 58, "schema": 77, "security": 66, "transparency": 83 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-26" }, "negative": -1, "negativeNotes": [ "2026-10-19. GHSA-pcc4-rvhr-2pr8 (moderate). In 0.7.2 to 0.9.69 the Fortran extractor's `cpp` step followed absolute and traversing `#include` lines in an untrusted `.F` file, reading host files into graph.json, the report and the model context on the default offline path. Fixed in 0.9.70 of 27 September 2026, with a Security line in the changelog the same day and the advisory published three weeks later. Fixed and documented, so -1. https://api.osv.dev/v1/vulns/GHSA-pcc4-rvhr-2pr8" ], "verdict": "Graphify parses code locally with tree-sitter, ships near-daily releases with a dated changelog, and keeps its ten MCP tools read-only and compact. The optional model step picks a cloud provider from whichever API key is set, and community naming can fall back to the `claude` CLI, so `GRAPHIFY_BACKEND=none` is needed to keep everything on the machine.", "bestFor": "A person or team who wants a coding agent to query a structural map of a repository, with docs and papers folded in, before grepping.", "strengths": [ "Code graphs build offline with tree-sitter, with no embeddings and no model call, and no telemetry code was found in the source", "Ten MCP tools with typed JSON Schema inputs, all of them reads, with token budgets on the larger ones", "67 PyPI releases in the 90 days to 26 October 2026, each with a dated CHANGELOG.md entry crediting the pull requests", "Edges are labelled EXTRACTED, INFERRED or AMBIGUOUS, and ambiguous names are refused with candidates and exit code 3", "Docs at docs.graphify.com with llms.txt and a Markdown copy of every page, plus a valid security.txt" ], "weaknesses": [ "Headless extraction sends docs to whichever cloud provider's key is set, Gemini first and Kimi in China second, unless `GRAPHIFY_BACKEND` is set", "Community naming falls back to the `claude` CLI when no key is set, which sends node names to Anthropic through the owner's plan", "Version 0.9.95, with breaking changes such as node IDs in 0.9.0 shipped inside 0.x releases", "One moderate advisory, a host-file read through the Fortran extractor in 0.7.2 to 0.9.69, fixed in 0.9.70", "No readOnlyHint or destructiveHint annotations, and the local server isn't in the official MCP registry" ], "agentNotes": [ "Install `graphifyy` with two y's; other `graphify*` packages on PyPI are not the project's", "Set `GRAPHIFY_BACKEND=none` or use `--code-only` when no source or doc text may leave the machine", "Pass an absolute path to graph.json in the MCP config, and run `graph_stats` first to check the graph loaded", "Set `GRAPHIFY_API_KEY` before binding the HTTP server to 0.0.0.0; it only warns when no key is set", "Run 0.9.70 or later before indexing an untrusted repository, because earlier versions carry the Fortran file-read advisory" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69 } ], "editorialScores": { "ergonomics": 77, "maintenance": 81, "payments": 60, "reliability": 58, "schema": 77, "security": 66, "transparency": 78 }, "provenanceScore": 88, "checked": { "categories": { "ergonomics": "2026-10-26", "maintenance": "2026-10-26", "payments": "2026-10-26", "reliability": "2026-10-26", "schema": "2026-10-26", "security": "2026-10-26", "transparency": "2026-10-26" }, "last": "2026-10-26", "oldest": "2026-10-26", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "uv tool install \"graphifyy[mcp]\" # then: graphify install, and /graphify . in the assistant", "claudeCode": "claude mcp add --transport stdio graphify -- graphify-mcp /absolute/path/to/repo/graphify-out/graph.json", "config": { "mcpServers": { "graphify": { "args": [ "/absolute/path/to/repo/graphify-out/graph.json" ], "command": "graphify-mcp" } } }, "headless": { "command": "graphify query \"$QUESTION\" --budget 2000" } }, "letme": { "capability": "https://letme.dev/code.repo", "tool": "https://letme.dev/graphify" }, "area": "developer", "provenance": { "legalEntity": "Graphify Labs", "domain": "graphify.com", "domainRegistered": "2007-07-23", "endpointOnVendorDomain": null, "terms": "https://graphify.com/terms", "privacy": "https://graphify.com/privacy", "statusPage": "", "changelog": "https://github.com/Graphify-Labs/graphify/blob/v8/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-10-26", "notes": [ "The terms and privacy policy name Graphify Labs, with no corporate suffix found, and the terms are governed by Delaware law. Y Combinator's directory lists Graphify Labs in San Francisco.", "The terms of 3 October 2026 cover the hosted service and say the open-source core is governed by its own licence, so the Apache 2.0 licence stands in for terms for this listing.", "graphify.com/.well-known/security.txt names founders@graphifylabs.ai and expires on 1 July 2027. SECURITY.md asks for reports through GitHub private vulnerability reporting.", "RDAP gives a registration date of 23 July 2007 for graphify.com, last changed on 8 July 2026, three months after the first release.", "There is no hosted endpoint for this listing. The MCP server and CLI run on the owner's host; Graphify Cloud's endpoint at api.graphify.com is a separate product.", "graphify.com says graphify.net, graphiffy.com and app.graphify.net are not operated by Graphify Labs." ], "score": 88 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/graphify.json" }, "answer": "Graphify scores 69 (B) on agent readiness against Sourcegraph MCP Server's 57.5 (C), and leads in 5 of 7 scored categories. Sourcegraph MCP Server leads on security \u0026 auth.", "b": { "slug": "sourcegraph-mcp", "name": "Sourcegraph MCP Server", "vendor": "Sourcegraph, Inc.", "vendorUrl": "https://sourcegraph.com", "kind": "mcp", "category": "code", "summary": "Sourcegraph's official MCP server gives AI agents code search, file reading, code navigation and commit and diff search across the repositories indexed by a company's Sourcegraph instance. It is built into Enterprise instances at /.api/mcp.", "url": "https://www.anchorterminal.com/tools/sourcegraph-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/sourcegraph-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sourcegraph-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sourcegraph-mcp.json", "license": "Proprietary. The server is part of the Sourcegraph Enterprise product under the Sourcegraph Terms of Service", "transports": [ "streamable-http" ], "packages": [], "auth": "mixed", "authNotes": "An admin of a Sourcegraph Enterprise instance must exist first, and access starts with a sales contract or an approved trial. On the instance, MCP clients use OAuth 2.0 with PKCE and register themselves through dynamic client registration, which is on by default and limited to the `mcp` scope. A user approves the grant in a browser. Admins can disable registration and pre-register public clients. Clients without OAuth send a Sourcegraph access token as `Authorization: token \u003ctoken\u003e`, and the token can carry the `mcp` scope. Users need the `MCP#ACCESS` permission, granted to the User role by default.", "pricing": "paid", "pricingNotes": "Enterprise plans only. The pricing page lists one plan, starting at a $16K minimum annual contract that scales with team size, bought through sales. No per-user or per-call price is published. The plan includes credits for AI tools, and `code_finder` and Deep Search draw on that entitlement. A Sourcegraph Cloud trial is available on request and subject to eligibility, with no sandbox or free tier found (checked 2026-10-08).", "priceSummary": "Paid", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the MCP docs, the authentication docs or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 16, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://sourcegraph.com/docs/api/mcp", "registryName": "io.github.sourcegraph/mcp", "capabilities": [ "code.repo", "code.git" ], "tags": [ "official", "mcp", "hosted", "self-hosted", "enterprise", "oauth", "read-only", "code-search", "sales-led", "soc2" ], "lastRelease": "2026-09-17", "graded": true, "anchor": { "graded": true, "score": 57.5, "grade": "C", "agentReady": false, "rank": 695, "ranked": true, "rankOf": 1211, "categoryRank": 9, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 83, "payments": 15, "reliability": 25, "schema": 71, "security": 76, "transparency": 78 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": 0, "verdict": "Sixteen read-only tools search and navigate code across every repository an instance indexes, with OAuth limited to an `mcp` scope and repository permissions enforced on each call. Access needs an Enterprise contract, priced from $16,000 a year, and no request rate limits were found in the reviewed documentation.", "bestFor": "A company that already runs Sourcegraph and wants agents to search and navigate many repositories with compiler-accurate definitions and references.", "strengths": [ "All 16 documented tools read and none writes to a repository, with three endpoints so a client can load 9, 16 or 2 tools", "OAuth 2.0 with PKCE and dynamic client registration, registered clients held to the `mcp` scope, and access tokens that can carry the same scope", "Repository permissions apply to every call, and admins can gate MCP by role (`MCP#ACCESS`) or switch off single tools with `mcp.tools.disabled`", "Result limits and defaults are documented per tool, such as 1,000 directory entries, 100 commits and 200 lines for files over 128KB", "Listed in the official MCP registry as io.github.sourcegraph/mcp, with MCP changes in dated release notes through 2026" ], "weaknesses": [ "Enterprise plans only, from a $16,000 minimum annual contract through sales. A Cloud trial is by request and subject to eligibility", "No request rate limits, 429 behaviour or tool error catalogue found in the reviewed documentation", "`code_finder` and Deep Search draw on the instance's credit entitlement and return an error once the quota is used up", "No guidance on prompt injection from repository content was found, although every search and file tool returns such content", "sourcegraph.com/.well-known/security.txt returns 404, and the bug bounty on HackerOne is invite-only" ], "agentNotes": [ "Connect to https://\u003cinstance\u003e/.api/mcp for the nine core tools. Use /.api/mcp/all for `go_to_definition`, `find_references`, `nls_search` and `compare_revisions`", "Request only the `mcp` scope in OAuth. Any other scope on the MCP resource fails with `invalid_scope`", "Without OAuth, send `Authorization: token \u003caccess token\u003e` and create the token with the `mcp` scope and an expiry", "Call `list_repos` first and name the repository in every `code_finder` task. It declines broad searches across repositories", "Read large files with `startLine` and `endLine`. Files over 128KB return only the first 200 lines" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 57.5 } ], "editorialScores": { "ergonomics": 72, "maintenance": 83, "payments": 15, "reliability": 25, "schema": 71, "security": 76, "transparency": 65 }, "provenanceScore": 90, "checked": { "categories": { "ergonomics": "2026-10-08", "maintenance": "2026-10-08", "payments": "2026-10-08", "reliability": "2026-10-08", "schema": "2026-10-08", "security": "2026-10-08", "transparency": "2026-10-08" }, "last": "2026-10-08", "oldest": "2026-10-08", "stale": false, "staleAfterDays": 90 } }, "connect": { "claudeCode": "claude mcp add --transport http sourcegraph https://sourcegraph.example.com/.api/mcp", "config": { "mcpServers": { "sourcegraph": { "type": "http", "url": "https://sourcegraph.example.com/.api/mcp" } } }, "headless": { "mcpServers": { "sourcegraph": { "headers": { "Authorization": "token ${SOURCEGRAPH_ACCESS_TOKEN}" }, "type": "http", "url": "https://sourcegraph.example.com/.api/mcp" } } } }, "letme": { "capability": "https://letme.dev/code.repo", "tool": "https://letme.dev/sourcegraph-mcp" }, "area": "developer", "provenance": { "legalEntity": "Sourcegraph, Inc.", "domain": "sourcegraph.com", "domainRegistered": "2012-11-25", "endpointOnVendorDomain": true, "terms": "https://sourcegraph.com/terms/tos", "privacy": "https://sourcegraph.com/terms/privacy", "statusPage": "https://sourcegraphstatus.com", "changelog": "https://sourcegraph.com/changelog", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The Terms of Service (last modified 22 July 2026) name Sourcegraph, Inc., 548 Market St PMB 20739, San Francisco, CA 94104-5401, and govern all Sourcegraph products. Enterprise licences are bought with an order form under these terms.", "The Privacy Policy (last modified 12 June 2026) says it does not cover user content such as customer code, which Sourcegraph processes as a data processor under the customer agreement and the DPA at sourcegraph.com/terms/dpa.", "The endpoint is on the customer's own instance. Sourcegraph Cloud instances are single-tenant, and the terms describe trial instances at \u003corganisation\u003e.sourcegraph.com. A self-hosted instance answers on the customer's domain.", "sourcegraph.com/.well-known/security.txt and /security.txt both returned 404 on 2026-10-08. The security portal sends reports to security@sourcegraph.com.", "The site footer links System status to https://sourcegraphstatus.com. The host did not resolve from our network on 2026-10-08, so the page is unread.", "RDAP for sourcegraph.com gives a registration date of 2012-11-25." ], "score": 90 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/sourcegraph-mcp.json", "live": { "slug": "sourcegraph-mcp", "vendorStatus": { "page": "https://sourcegraphstatus.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-26T19:22:04.108144838Z" }, "versions": [ { "registry": "mcp-registry", "name": "io.github.sourcegraph/mcp", "version": "0.1.0", "seenAt": "2026-10-26T13:38:34.414404898Z" } ], "securityTxt": { "url": "https://sourcegraph.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-26T15:30:07.914855738Z" }, "domain": { "domain": "sourcegraph.com", "registered": "2012-11-25", "source": "https://rdap.verisign.com/com/v1/domain/sourcegraph.com", "checkedAt": "2026-10-25T13:56:16.858044885Z" }, "pages": [ { "url": "https://sourcegraph.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-26T03:24:46.074459296Z", "changedAt": "2026-10-23T01:56:09.230746111Z", "fingerprint": "1d910139c044" }, { "url": "https://sourcegraph.com/terms/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-26T03:24:48.310826394Z", "changedAt": "2026-10-16T22:31:19.999789356Z", "fingerprint": "cda3776369ab" }, { "url": "https://sourcegraph.com/terms/tos", "kind": "terms", "status": 200, "checkedAt": "2026-10-26T03:24:50.285257687Z", "changedAt": "2026-10-16T22:31:22.020918003Z", "fingerprint": "63c7eb06f6ab" } ], "updatedAt": "2026-10-26T19:22:04.108144838Z" } }, "facts": [ { "a": "MCP server", "b": "MCP server", "name": "Kind" }, { "a": "Graphify Labs", "b": "Sourcegraph, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "stdio, Streamable HTTP", "b": "Streamable HTTP", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0 since 0.9.25 of 22 July 2026. Contributions made before then remain available under MIT, with the original text kept in LICENSE-MIT and referenced from NOTICE", "b": "Proprietary. The server is part of the Sourcegraph Enterprise product under the Sourcegraph Terms of Service", "name": "Licence" }, { "a": "10", "b": "16", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "not listed", "b": "io.github.sourcegraph/mcp", "name": "MCP registry" }, { "a": "2026-10-23", "b": "2026-09-17", "name": "Last release" }, { "a": "", "b": "2026-07-22", "name": "Terms last updated" }, { "a": "", "b": "2026-06-12", "name": "Privacy policy last updated" }, { "a": "", "b": "yes, with an opt-out", "name": "Customer content may train models" }, { "a": "", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "", "b": "yes", "name": "Arbitration or class-action waiver" } ], "faq": [ { "answer": "Graphify scores 69 (B) on agent readiness against Sourcegraph MCP Server's 57.5 (C), and leads in 5 of 7 scored categories. Sourcegraph MCP Server leads on security \u0026 auth.", "question": "Which is better for AI agents, Graphify or Sourcegraph MCP Server?" }, { "answer": "Graphify needs no key. Sourcegraph MCP Server takes an API key or an OAuth sign-in.", "question": "Do Graphify and Sourcegraph MCP Server need an API key?" }, { "answer": "Graphify runs on your own machine, with no hosted endpoint listed. No hosted endpoint is listed for Sourcegraph MCP Server.", "question": "Can an agent call Graphify and Sourcegraph MCP Server without installing anything?" }, { "answer": "Graphify is open source (Apache-2.0 since 0.9.25 of 22 July 2026. Contributions made before then remain available under MIT, with the original text kept in LICENSE-MIT and referenced from NOTICE). No open-source release is listed for Sourcegraph MCP Server.", "question": "Are Graphify and Sourcegraph MCP Server open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 58 against 25", "Schema \u0026 documentation, 77 against 71", "Agent ergonomics, 77 against 72", "Payments \u0026 pricing, 60 against 15", "Transparency \u0026 trust, 83 against 78" ], "also": [ "No key needed to call it", "Runs on your own machine", "Free to start without a card", "Open source" ], "goodFor": "A person or team who wants a coding agent to query a structural map of a repository, with docs and papers folded in, before grepping.", "slug": "graphify", "watchFor": "Headless extraction sends docs to whichever cloud provider's key is set, Gemini first and Kimi in China second, unless `GRAPHIFY_BACKEND` is set" }, { "aheadOn": [ "Security \u0026 auth, 76 against 66" ], "also": null, "goodFor": "A company that already runs Sourcegraph and wants agents to search and navigate many repositories with compiler-accurate definitions and references.", "slug": "sourcegraph-mcp", "watchFor": "Enterprise plans only, from a $16,000 minimum annual contract through sales. A Cloud trial is by request and subject to eligibility" } ], "job": { "capability": "code.repo", "name": "Code repositories" }, "others": [ { "json": "https://www.anchorterminal.com/compare/azure-devops-mcp-vs-graphify.json", "title": "Azure DevOps MCP Server vs Graphify", "url": "https://www.anchorterminal.com/compare/azure-devops-mcp-vs-graphify" }, { "json": "https://www.anchorterminal.com/compare/azure-devops-mcp-vs-sourcegraph-mcp.json", "title": "Azure DevOps MCP Server vs Sourcegraph MCP Server", "url": "https://www.anchorterminal.com/compare/azure-devops-mcp-vs-sourcegraph-mcp" }, { "json": "https://www.anchorterminal.com/compare/github-mcp-server-vs-graphify.json", "title": "GitHub MCP Server vs Graphify", "url": "https://www.anchorterminal.com/compare/github-mcp-server-vs-graphify" }, { "json": "https://www.anchorterminal.com/compare/github-mcp-server-vs-sourcegraph-mcp.json", "title": "GitHub MCP Server vs Sourcegraph MCP Server", "url": "https://www.anchorterminal.com/compare/github-mcp-server-vs-sourcegraph-mcp" }, { "json": "https://www.anchorterminal.com/compare/git-reference-server-vs-graphify.json", "title": "Git (MCP reference server) vs Graphify", "url": "https://www.anchorterminal.com/compare/git-reference-server-vs-graphify" }, { "json": "https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp.json", "title": "Git (MCP reference server) vs Sourcegraph MCP Server", "url": "https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp" }, { "json": "https://www.anchorterminal.com/compare/graft-vs-graphify.json", "title": "graft vs Graphify", "url": "https://www.anchorterminal.com/compare/graft-vs-graphify" }, { "json": "https://www.anchorterminal.com/compare/graft-vs-sourcegraph-mcp.json", "title": "graft vs Sourcegraph MCP Server", "url": "https://www.anchorterminal.com/compare/graft-vs-sourcegraph-mcp" } ], "scores": [ { "by": 33, "edge": "graphify", "graphify": 58, "key": "reliability", "name": "Reliability", "sourcegraph-mcp": 25, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 6, "edge": "graphify", "graphify": 77, "key": "schema", "name": "Schema \u0026 documentation", "sourcegraph-mcp": 71, "weight": 13 }, { "by": 5, "edge": "graphify", "graphify": 77, "key": "ergonomics", "name": "Agent ergonomics", "sourcegraph-mcp": 72, "weight": 13 }, { "by": 10, "edge": "sourcegraph-mcp", "graphify": 66, "key": "security", "name": "Security \u0026 auth", "sourcegraph-mcp": 76, "weight": 14 }, { "by": 45, "edge": "graphify", "graphify": 60, "key": "payments", "name": "Payments \u0026 pricing", "sourcegraph-mcp": 15, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 2, "edge": "sourcegraph-mcp", "graphify": 81, "key": "maintenance", "name": "Maintenance \u0026 community", "sourcegraph-mcp": 83, "weight": 7 }, { "by": 5, "edge": "graphify", "graphify": 83, "key": "transparency", "name": "Transparency \u0026 trust", "sourcegraph-mcp": 78, "weight": 7 } ], "summary": "Graphify scores 69 (B) on agent readiness against Sourcegraph MCP Server's 57.5 (C), and leads in 5 of 7 scored categories. Sourcegraph MCP Server leads on security \u0026 auth. Both do code repositories.", "tutorials": [], "verdicts": { "graphify": "Graphify parses code locally with tree-sitter, ships near-daily releases with a dated changelog, and keeps its ten MCP tools read-only and compact. The optional model step picks a cloud provider from whichever API key is set, and community naming can fall back to the `claude` CLI, so `GRAPHIFY_BACKEND=none` is needed to keep everything on the machine.", "sourcegraph-mcp": "Sixteen read-only tools search and navigate code across every repository an instance indexes, with OAuth limited to an `mcp` scope and repository permissions enforced on each call. Access needs an Enterprise contract, priced from $16,000 a year, and no request rate limits were found in the reviewed documentation." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/graphify-vs-sourcegraph-mcp", "json": "https://www.anchorterminal.com/compare/graphify-vs-sourcegraph-mcp.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/graphify-vs-sourcegraph-mcp.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/graphify-vs-sourcegraph-mcp.min.md" }, "markdown": "Graphify scores 69 (B) on agent readiness against Sourcegraph MCP Server's 57.5 (C), and leads in 5 of 7 scored categories. Sourcegraph MCP Server leads on security \u0026 auth. Both do code repositories.\n\n- Graphify: grade B, 69/100, rank #217 of 1211. Markdown https://www.anchorterminal.com/tools/graphify.md · JSON https://www.anchorterminal.com/api/v1/tools/graphify.json\n- Sourcegraph MCP Server: grade C, 57.5/100, rank #695 of 1211. Markdown https://www.anchorterminal.com/tools/sourcegraph-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/sourcegraph-mcp.json\n- Best code, repository and documentation tools for AI agents: https://www.anchorterminal.com/best/code/index.md\n- All 22 code comparisons: https://www.anchorterminal.com/compare/code/index.md\n\n## Which one, for what\n\n### Graphify (B)\n\nGood for: A person or team who wants a coding agent to query a structural map of a repository, with docs and papers folded in, before grepping.\n\nAhead on:\n- Reliability, 58 against 25\n- Schema \u0026 documentation, 77 against 71\n- Agent ergonomics, 77 against 72\n- Payments \u0026 pricing, 60 against 15\n- Transparency \u0026 trust, 83 against 78\n\nAlso in its favour:\n- No key needed to call it\n- Runs on your own machine\n- Free to start without a card\n- Open source\n\nWatch for: Headless extraction sends docs to whichever cloud provider's key is set, Gemini first and Kimi in China second, unless `GRAPHIFY_BACKEND` is set\n\n### Sourcegraph MCP Server (C)\n\nGood for: A company that already runs Sourcegraph and wants agents to search and navigate many repositories with compiler-accurate definitions and references.\n\nAhead on:\n- Security \u0026 auth, 76 against 66\n\nWatch for: Enterprise plans only, from a $16,000 minimum annual contract through sales. A Cloud trial is by request and subject to eligibility\n\n\n## Score by category\n\n| Category | Weight | Graphify | Sourcegraph MCP Server | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 58 | 25 | Graphify +33 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 77 | 71 | Graphify +6 |\n| Agent ergonomics | 13% (16.2 this run) | 77 | 72 | Graphify +5 |\n| Security \u0026 auth | 14% (17.5 this run) | 66 | 76 | Sourcegraph MCP Server +10 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 15 | Graphify +45 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 81 | 83 | Sourcegraph MCP Server +2 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 83 | 78 | Graphify +5 |\n| Negative events | ≤15 | -1 | 0 | |\n| **Total** | | **69 · B** | **57.5 · C** | |\n\n## Facts side by side\n\n| Fact | Graphify | Sourcegraph MCP Server |\n| --- | --- | --- |\n| Kind | MCP server | MCP server |\n| Vendor | Graphify Labs | Sourcegraph, Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | stdio, Streamable HTTP | Streamable HTTP |\n| Auth | None | OAuth or key |\n| Pricing | Free | Paid |\n| x402 | no | no |\n| Licence | Apache-2.0 since 0.9.25 of 22 July 2026. Contributions made before then remain available under MIT, with the original text kept in LICENSE-MIT and referenced from NOTICE | Proprietary. The server is part of the Sourcegraph Enterprise product under the Sourcegraph Terms of Service |\n| Tools exposed | 10 | 16 |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | no |\n| MCP registry | not listed | `io.github.sourcegraph/mcp` |\n| Last release | 2026-10-23 | 2026-09-17 |\n| Terms last updated | | 2026-07-22 |\n| Privacy policy last updated | | 2026-06-12 |\n| Customer content may train models | | yes, with an opt-out |\n| Terms restrict automated access | | not found in the text |\n| Terms restrict benchmarking | | not found in the text |\n| Terms or service can change without notice | | not found in the text |\n| Arbitration or class-action waiver | | yes |\n\n## Verdicts\n\n**Graphify.** Graphify parses code locally with tree-sitter, ships near-daily releases with a dated changelog, and keeps its ten MCP tools read-only and compact. The optional model step picks a cloud provider from whichever API key is set, and community naming can fall back to the `claude` CLI, so `GRAPHIFY_BACKEND=none` is needed to keep everything on the machine.\n\n**Sourcegraph MCP Server.** Sixteen read-only tools search and navigate code across every repository an instance indexes, with OAuth limited to an `mcp` scope and repository permissions enforced on each call. Access needs an Enterprise contract, priced from $16,000 a year, and no request rate limits were found in the reviewed documentation.\n\n## Before you call either\n\n### Graphify\n\n1. Install `graphifyy` with two y's; other `graphify*` packages on PyPI are not the project's\n2. Set `GRAPHIFY_BACKEND=none` or use `--code-only` when no source or doc text may leave the machine\n3. Pass an absolute path to graph.json in the MCP config, and run `graph_stats` first to check the graph loaded\n4. Set `GRAPHIFY_API_KEY` before binding the HTTP server to 0.0.0.0; it only warns when no key is set\n5. Run 0.9.70 or later before indexing an untrusted repository, because earlier versions carry the Fortran file-read advisory\n\n### Sourcegraph MCP Server\n\n1. Connect to https://\u003cinstance\u003e/.api/mcp for the nine core tools. Use /.api/mcp/all for `go_to_definition`, `find_references`, `nls_search` and `compare_revisions`\n2. Request only the `mcp` scope in OAuth. Any other scope on the MCP resource fails with `invalid_scope`\n3. Without OAuth, send `Authorization: token \u003caccess token\u003e` and create the token with the `mcp` scope and an expiry\n4. Call `list_repos` first and name the repository in every `code_finder` task. It declines broad searches across repositories\n5. Read large files with `startLine` and `endLine`. Files over 128KB return only the first 200 lines\n\n## Questions\n\n### Which is better for AI agents, Graphify or Sourcegraph MCP Server?\n\nGraphify scores 69 (B) on agent readiness against Sourcegraph MCP Server's 57.5 (C), and leads in 5 of 7 scored categories. Sourcegraph MCP Server leads on security \u0026 auth.\n\n### Do Graphify and Sourcegraph MCP Server need an API key?\n\nGraphify needs no key. Sourcegraph MCP Server takes an API key or an OAuth sign-in.\n\n### Can an agent call Graphify and Sourcegraph MCP Server without installing anything?\n\nGraphify runs on your own machine, with no hosted endpoint listed. No hosted endpoint is listed for Sourcegraph MCP Server.\n\n### Are Graphify and Sourcegraph MCP Server open source?\n\nGraphify is open source (Apache-2.0 since 0.9.25 of 22 July 2026. Contributions made before then remain available under MIT, with the original text kept in LICENSE-MIT and referenced from NOTICE). No open-source release is listed for Sourcegraph MCP Server.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/graphify-vs-sourcegraph-mcp.json, and with the fewest tokens: https://www.anchorterminal.com/compare/graphify-vs-sourcegraph-mcp.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"graphify\", \"b\": \"sourcegraph-mcp\"}`. From a terminal: `anchor compare graphify sourcegraph-mcp`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/graphify.json and https://www.anchorterminal.com/api/v1/tools/sourcegraph-mcp.json\n\n## Other comparisons with Graphify or Sourcegraph MCP Server\n\n- [Azure DevOps MCP Server vs Graphify](https://www.anchorterminal.com/compare/azure-devops-mcp-vs-graphify.md)\n- [Azure DevOps MCP Server vs Sourcegraph MCP Server](https://www.anchorterminal.com/compare/azure-devops-mcp-vs-sourcegraph-mcp.md)\n- [GitHub MCP Server vs Graphify](https://www.anchorterminal.com/compare/github-mcp-server-vs-graphify.md)\n- [GitHub MCP Server vs Sourcegraph MCP Server](https://www.anchorterminal.com/compare/github-mcp-server-vs-sourcegraph-mcp.md)\n- [Git (MCP reference server) vs Graphify](https://www.anchorterminal.com/compare/git-reference-server-vs-graphify.md)\n- [Git (MCP reference server) vs Sourcegraph MCP Server](https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp.md)\n- [graft vs Graphify](https://www.anchorterminal.com/compare/graft-vs-graphify.md)\n- [graft vs Sourcegraph MCP Server](https://www.anchorterminal.com/compare/graft-vs-sourcegraph-mcp.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-26", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Graphify vs Sourcegraph MCP Server", "url": "" } ], "description": "Graphify scores 69 (B) to Sourcegraph's 57.5 (C) for code repositories. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Graphify B 69", "Sourcegraph MCP Server C 57.5", "scores" ], "h1": "Graphify vs Sourcegraph MCP Server", "image": "https://www.anchorterminal.com/assets/og/compare-graphify-vs-sourcegraph-mcp.png", "path": "/compare/graphify-vs-sourcegraph-mcp", "published": "2026-10-01", "section": "tools", "title": "Graphify vs Sourcegraph for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-26", "url": "https://www.anchorterminal.com/compare/graphify-vs-sourcegraph-mcp" }, "tokens": { "markdown": 2250, "slim": 780 }, "version": 1 }