srinivasan-sundaresan95/orihime

What it does

Orihime is a Model Context Protocol (MCP) server that creates comprehensive code knowledge graphs across multiple repositories. It analyzes source code in Java, Kotlin, JavaScript, and TypeScript using tree-sitter parsing, storing the indexed data in KuzuDB for efficient querying. The tool provides over 30 specialized tools for deep code analysis including callflow tracing, multi-hop taint analysis, and security vulnerability detection.

Key Features

• Cross-repository code indexing and knowledge graph construction
• Support for 4 major programming languages (Java, Kotlin, JavaScript, TypeScript)
• 30+ analysis tools for code investigation
• Callflow tracing capabilities
• Multi-hop taint analysis for security vulnerabilities
• Automated security compliance reporting (OWASP, CWE, PCI, STIG standards)
• Embedded KuzuDB for fast graph queries

Use Cases

Ideal for security researchers, code auditors, and development teams needing to understand code flow patterns, identify security vulnerabilities, and ensure compliance with security standards across large codebases.