English Français العربية

io.github.dir-ai/voyager-repo

Official registry Developer tools

An AI agent's safe read-only scout to orient in an unknown repository before touching it.

Source code Documentation

What can you do with io.github.dir-ai/voyager-repo?

  • purpose — inferred from the manifest/README, framed as untrusted (owner
  • structure — languages, key dirs (with role guesses), entrypoints
  • build — the install/build/test/run commands (detected, never run)
  • health — git signals: commit count, bus factor (top-author share),
  • dependencies — composes with Voyager to give each dependency a real
  • risks — install hooks (RCE on npm install), committed secrets, missing
  • approach plan — see below

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @dir-ai/voyager-repo
Claude Code 
claude mcp add voyager-repo -- npx -y @dir-ai/voyager-repo@0.7.0 mcp
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "voyager-repo": {
            "command": "npx",
            "args": [
                "-y",
                "@dir-ai/voyager-repo@0.7.0",
                "mcp"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. voyager-repo
  2. What it does
  3. The approach protocol (the point)
  4. Guarantees
  5. MCP
  6. Library
  7. Status
  8. License

voyager-repo

Voyager's repo-penetration organ — the eyes an AI agent sends ahead before it touches an unknown repository.

Voyager penetrates the web (@dir-ai/voyager), the repo (this), and — next — networks. Repotector is the repo's guardian that receives and controls; Voyager Repo is the agent's counterpart that reaches outward and reports back, safely.

npx @dir-ai/voyager-repo scout .          # orient in the repo you're standing in
npx @dir-ai/voyager-repo scout . --check-deps 10   # + vet 10 deps via Voyager

What it does

Like how Claude or Codex orient themselves in a new codebase — but as a safe, repeatable tool. scout produces an orientation brief:

  • purpose — inferred from the manifest/README, framed as untrusted (owner text is injection-stripped before it reaches your model)
  • structure — languages, key dirs (with role guesses), entrypoints
  • build — the install/build/test/run commands (detected, never run)
  • health — git signals: commit count, bus factor (top-author share), recency, churn hotspots
  • dependencies — composes with Voyager to give each dependency a real OSV-gated verdict (--check-deps N)
  • risks — install hooks (RCE on npm install), committed secrets, missing lockfile, large opaque binaries
  • approach plan — see below

The approach protocol (the point)

A careful newcomer, not a bulldozer:

  1. Handshake with Repotector if the repo carries one (.repotector/) — read its active zones/leases and respect them before editing.
  2. Fail-closed permissions. Everything is read-only by default. Installing dependencies, executing code, or cloning a remote is withheld until you consent (--allow-install / --allow-exec / --allow-clone) — and execution, when allowed, belongs in a sandbox.
  3. An orderly tour — the brief ends with the ordered next steps a well-behaved agent should take, so it explores on purpose instead of poking at random.

Guarantees

  • Nothing in the target is executed on the host. scout reads files and git; it never runs the repo's code. (Execution, when consented, runs in Voyager's hardened container.)
  • Every owner-controlled byte is untrusted — README, description, commit messages, the Repotector ledger — injection-stripped and framed before your model sees it.
  • Exit codes: 0 oriented · 1 oriented + HIGH-risk finding(s) · 2 tool error.

MCP

voyager-repo mcp

Tool: scout_repo — same orientation, safe-by-default (invasive flags off).

Library

import { scout } from '@dir-ai/voyager-repo'
const brief = await scout('/path/to/repo', { checkDeps: 10 })
if (brief.risks.some((r) => r.level === 'high')) { /* caution */ }

Status

0.x — Phase 1 (repo orientation) of the Voyager "senses" line. Roadmap: capability analysis of a package's tarball, PyPI/cargo/go dependency vetting, and the net organ (cloud/infra introspection).

License

MIT

Frequently asked questions

What is io.github.dir-ai/voyager-repo?

An AI agent's safe read-only scout to orient in an unknown repository before touching it.

How do I install io.github.dir-ai/voyager-repo?

It runs on your machine. In Claude Code: claude mcp add voyager-repo -- npx -y @dir-ai/voyager-repo@0.7.0 mcp. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.dir-ai/voyager-repo need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.dir-ai/voyager-repo open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.dir-ai/voyager-repo?

It is published by dir-ai. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.