# fossil-mcp

> The code quality toolkit for the agentic AI era. Find dead code, clones, and scaffolding across 15 languages. MCP server + CLI.

- **URL**: https://www.freshcrate.ai/projects/fossil-mcp
- **Author**: yfedoseev
- **Category**: MCP Servers
- **Latest version**: `v0.1.8` (2026-04-09)
- **License**: Apache-2.0
- **Source**: https://github.com/yfedoseev/fossil-mcp
- **Homepage**: https://fossil-mcp.com
- **Language**: Rust
- **GitHub**: 54 stars, 4 forks
- **Registry**: github
- **Tags**: `ai-coding`, `ai-tools`, `ast`, `claude-code`, `cli`, `code-analysis`, `code-clones`, `code-quality`, `mcp`, `rust`

## Description

The code quality toolkit for the agentic AI era. Find dead code, clones, and scaffolding across 15 languages. MCP server + CLI.

## Recent releases

| Version | Date | Urgency | Changes |
| --- | --- | --- | --- |
| `v0.1.8` | 2026-04-09 | High | ### Added  - **Hardcoded secrets detection in scaffolding scanner** — contributed by [@nooscraft](https://github.com/nooscraft) in [#45](https://github.com/yfedoseev/fossil-mcp/pull/45)   - New `include_secrets` parameter (default: false) for `fossil_detect_scaffolding`   - Detects ~15 secret patterns: OpenAI, Anthropic, AWS, GitHub, Google, Stripe API keys, PEM headers, Slack/Discord webhooks, DB connection strings with credentials, JWT tokens   - High and medium confidence findings with automa |
| `v0.1.7` | 2026-02-20 | Low | ## v0.1.7 \| Emoji Detection (First Community Contribution)  ### What's New  - **Emoji detection in scaffolding scanner** — contributed by [@nooscraft](https://github.com/nooscraft) in [#35](https://github.com/yfedoseev/fossil-mcp/pull/35)   - New `include_emojis` parameter (default: false) for `fossil_detect_scaffolding`   - Detects emoji characters in comments, strings, and code across all 16 supported languages   - Covers major Unicode emoji ranges: emoticons, symbols, pictographs, transport, |
| `v0.1.6` | 2026-02-19 | Low | ## v0.1.6 \| Language-Aware Scaffolding Detection  ### What's New  - **Language-aware misleading-name detection** — SLOP-MISLEADING-NAME now uses per-language keyword maps instead of a flat list   - Separate keyword sets for Rust, Python, JS/TS, and Go across 12 algorithm terms (uuid, sha256, sha512, sha1, base64, md5, jwt, aes, encrypt, decrypt, regex, regexp)   - Import-based early-exit: files importing the correct library (e.g., `use uuid`, `import hashlib`, `require('uuid')`) skip the check e |
| `v0.1.5` | 2026-02-17 | Low | ## v0.1.5 \| Interactive Mode & Scaffolding CLI  ### What's New  - **Interactive mode** — run `fossil-mcp` with no arguments in a terminal   - Full scan of current directory with colorful dashboard   - Interactive REPL for exploring results: `dead`, `clones`, `scaffolding`, `hotspots`, `file`, `export sarif`, `langs`, `summary`   - Language filtering on all commands (e.g., `dead 20 rust`, `clones 5 python`)   - Smart routing: terminal invocation → interactive scan, piped stdin → MCP mode (backwar |
| `v0.1.4` | 2026-02-17 | Low | ## v0.1.4 \| Performance & False Positive Reduction  ### What's New  - **16-45× faster graph building** on large TypeScript/JS projects   - Barrel re-export cache, Bloom filter pre-filtering, call clustering, priority worklist, demand-driven resolution   - Projects with 4000+ files: ~25 minutes → under 2 minutes - **20+ false positive reduction improvements**   - BDD context-sensitive detection: callbacks, event handlers, middleware, lifecycle methods, factories   - Feature flag detection: Rust ` |
| `v0.1.3` | 2026-02-13 | Low | ## v0.1.3 \| R Language, Language Filtering & CI/CD Mode  ### What's New  - **R language support** — 16th language added with full dead code detection   - Function definitions, calls, pipe operators (`\|>`, `%>%`), namespace operators (`::`, `:::`)   - Cross-file resolution via `source()`, `library()`, `require()`   - Framework presets: Shiny, tidyverse/dplyr, R6, S3, data.table   - DESCRIPTION file parsing for auto-detection - **`--language` filtering** — filter analysis by language on CLI and MC |
| `v0.1.2` | 2026-02-10 | Low | ## v0.1.2 \| cargo-binstall Support  ### What's New  - **`cargo binstall fossil-mcp`** — download pre-built binaries instead of compiling from source - **Per-target binary overrides** for all 6 release platforms (Linux glibc/musl/aarch64, macOS Intel/Apple Silicon, Windows) - **Cleaner README** — VS Code / Cursor badges moved into MCP Server Setup section - **Version-less download URLs** — fixed hardcoded `0.1.0` URLs to use `/releases/latest/download/`  ### Installation  ```bash curl -fsSL fossi |
| `v0.1.1` | 2026-02-08 | Low | ## v0.1.1 \| Self-Update & Maintenance  ### What's New  - **`fossil-mcp update`** — download and replace the binary from GitHub Releases in one command - **`fossil-mcp update --check`** — check for updates without installing - **Automatic update check** — non-blocking background check on startup (once per 24h, cached at `~/.fossil-mcp/update-check.json`) - **`FOSSIL_NO_UPDATE_CHECK=1`** — environment variable to disable automatic update checks - **Version-less download URLs** — stable URLs for in |
| `v0.1.0` | 2026-02-07 | Low | ## v0.1.0 Release  The code quality toolkit for the agentic AI era. Fossil finds what AI coding tools leave behind — dead code, duplicated logic, scaffolding artifacts, and disconnected functions — across 15 languages.  **[fossil-mcp.com](https://fossil-mcp.com)** · **[crates.io](https://crates.io/crates/fossil-mcp)**  ### Analysis  - **Dead Code Detection** — unreachable functions, unused exports, orphaned methods with cross-file import resolution, barrel re-export support, and class hierarchy |

## Citation

- HTML: https://www.freshcrate.ai/projects/fossil-mcp
- Markdown: https://www.freshcrate.ai/projects/fossil-mcp.md
- Dependencies JSON: https://www.freshcrate.ai/api/projects/fossil-mcp/deps

_Generated by freshcrate.ai. Indexes github releases for AI-agent ecosystem packages._