Back to Browse

Git Reflog Archaeologist MCP Server

Developer ToolsModerate7.7MCP RegistryLocal
Free

Server data from the Official MCP Registry

Aggregate local Git reflog and recovery signals without exposing repository content. Tools...

About

Aggregate local Git reflog and recovery signals without exposing repository content. Tools...

Security Report

7.7
Moderate7.7Low Risk

This is a well-designed, security-conscious MCP server with strong access controls and data protection. The code implements proper path traversal prevention, limits output sizes, avoids exposing sensitive repository content, and uses only read-only Git operations. Minor code quality observations exist but do not materially affect security. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

6 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

file_stat

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-mrfentmen-git-reflog-archaeologist-mcp": {
      "args": [
        "-y",
        "git-reflog-archaeologist-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

git-reflog-archaeologist-mcp

Git Reflog Archaeologist is a local MCP for the moment after an accidental reset, deleted branch, or abandoned experiment. It looks at Git metadata that can help answer whether recovery may still be possible.

Tools

  • reflog_signals: aggregate reflog count, age buckets, and loose or packed object counts
  • recovery_signals: aggregate unreachable object counts by type
  • stash_signals: aggregate stash count and age buckets

The outputs include coarse recovery hints such as recent-history-may-be-recoverable or unreachable-commits-found. They do not return commit hashes, subjects, ref names, file paths, remote names, author data, or file contents.

Safety

  • Local Git commands only. No network access is used.
  • The selected repository must stay inside GIT_ARCHAEOLOGY_ROOT.
  • Git output is line and count bounded.
  • The server never runs mutating commands such as reset, reflog expire, prune, or garbage collection.
  • This is a recovery signal tool, not a guarantee that an object can be restored.

Run

npm install
npm run build
node dist/index.js

The server uses stdio and works with Claude Desktop, Cursor, VS Code, MCP Inspector, and compatible CLI harnesses.

Reviews

No reviews yet

Be the first to review this server!