[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_131":132},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_57":49,"_58":59,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":49,"_84":-5,"_85":86,"_87":88,"_89":90,"_91":92,"_93":94,"_95":96},"apiUrl","https://odel.app/api","creator","githits-com","moduleId","githits-cli","@githits-com/githits-cli","displayName","GitHits","tagline","Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples.","iconKey","https://githits.com/assets/brand/logos/GH-Favicon-Gradient_512x512.png","category","remote","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://mcp.githits.com\",\"transport\":\"streamable-http\",\"authType\":\"none\"}","pricingModel","free","creatorUserId","system:external-import","createdAt",1783332268000,"updatedAt",1788582161000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=com.githits%2Fgithits","sourceVerified",false,"sourceMissingSince","importedAt","upstreamStars",95,"upstreamUpdatedAt",1788538915000,"detectedTransport","streamable-http","detectedAuthType","oauth","probeStatus","ok","lastProbedAt",1787631774000,"githubRepoUrl","https://github.com/githits-com/githits-cli","githubRepoFullName","githits-com/githits-cli","releaseId","ext-githits-com-githits-cli","version","0.12.1","descriptionMarkdown","

\n $\"GitHits\"$ \n

\n\n

GitHits CLI

\n\n

\n The code context layer for AI coding agents.\n

\n\n

\n $\"npm$ \n $\"npm$ \n $\"Main\"$ \n $\"License:$ \n $\"Node\"$ \n $\"MCP\"$ \n $\"skills.sh\"$ \n $\"smithery$ \n $\"githits-cli$ \n $\"MCP$ \n

\n\n

\n Website ·\n Documentation ·\n Issues\n

\n\nGitHits connects AI coding agents to public open-source evidence across the\nfull software development lifecycle: discovery, planning, research,\nimplementation, debugging, and maintenance.\n\nThe CLI runs a local [MCP](https://modelcontextprotocol.io/) server that your\ncoding tool starts on demand. Agents can then search indexed package and\nrepository source, read exact files and documentation pages, inspect package\nhealth, compare dependency upgrades, and find source-cited examples from real\nopen-source projects when model knowledge and local repository context are not\nenough.\n\n## Quick Start\n\n```sh\nnpx githits@latest init\n```\n\n`init` signs you in, detects supported coding tools, and configures GitHits for\nthe tools you select. It uses the local stdio MCP except for Cursor, whose\ndirect setup uses the hosted remote MCP.\n\nAutomatic setup currently supports Claude Code, Cursor, Windsurf,\nVS Code / Copilot, Cline, Claude Desktop, Codex CLI, Pi, Gemini CLI,\nGoogle Antigravity, OpenCode, Hermes Agent, Zed, Junie, Qwen Code,\nKiro, Kilo Code, Factory Droid, and Amazon Q CLI.\n\nAfter setup, open your coding agent and work normally. Many agents call GitHits\nwhen they need source-backed context. If your agent starts guessing, prompt it\ndirectly:\n\n```text\nUse GitHits Code Navigation to inspect npm:express. Find how middleware\nerrors are handled, read the relevant source, and explain the fix before\nediting code.\n```\n\n## What GitHits Adds\n\nGitHits is designed for the point where an agent needs evidence from the\nbroader open-source ecosystem, not just model memory or local repo context:\n\n| Capability | MCP tools | CLI commands |\n|---|---|---|\n| Tool orientation | `quick_start` | — |\n| Code examples | `get_example`, `search_language` | `githits example`, `githits languages` |\n| Code navigation | `search`, `search_status`, `code_files`, `code_read`, `code_grep` | `githits search`, `githits search-status`, `githits code ...` |\n| Documentation access | `docs_list`, `docs_read` | `githits docs ...` |\n| Package inspection | `pkg_info`, `pkg_vulns`, `pkg_deps`, `pkg_changelog`, `pkg_upgrade_review` | `githits pkg ...` |\n| Feedback | `feedback` | `githits feedback` |\n\nUse GitHits when your agent needs to:\n\n- discover, plan, or research how OSS projects solve a vague issue or unfamiliar error\n- find broad prior art or rare needle-in-the-haystack examples across repositories\n- inspect source, tests, symbols, or docs for a known package or repository\n- verify how a dependency actually behaves before changing code\n- debug stack traces that point into third-party code\n- review package health, licenses, vulnerabilities, dependencies, and changelogs\n- compare dependency upgrades using factual evidence\n\n## Examples\n\nFind prior art across open source:\n\n```sh\nnpx githits@latest example \"HTTP retries with exponential backoff in Python\"\n```\n\nSearch indexed code, docs, and symbols for a dependency:\n\n```sh\nnpx githits@latest search \"router middleware\" --in npm:express\nnpx githits@latest search '\"body parser\" OR multer' --in npm:express --source docs\nnpx githits@latest search \"debounce\" --in npm:lodash --source symbol\n```\n\nRead and grep dependency source without cloning:\n\n```sh\nnpx githits@latest code files npm:express lib\nnpx githits@latest code read npm:express lib/router/index.js --lines 120-200\nnpx githits@latest code grep npm:express \"router.use\" lib --regex\n```\n\nInspect package health and upgrade evidence:\n\n```sh\nnpx githits@latest pkg info npm:express\nnpx githits@latest pkg vulns npm:lodash@4.17.20 --severity high\nnpx githits@latest pkg deps npm:express@4.18.2 --depth 2\nnpx githits@latest pkg changelog npm:express --from 4.18.2 --to 5.2.1\nnpx githits@latest pkg upgrade-review npm:zod@4.3.6 --to 4.4.3\n```\n\nBrowse and read package documentation:\n\n```sh\nnpx githits@latest docs list npm:express\nnpx githits@latest docs read --lines 20-80\n```\n\n## Experimental Tools\n\nGitHits 0.10 adds two opt-in local tools for early dogfooding:\n\n- `resolve_target` / `githits resolve` turns a fuzzy or ambiguous package,\n repository, or documentation-site name into grouped canonical targets with\n related project identities kept together.\n- `code_diff` / `githits code diff` compares repository trees resolved from\n exact package versions or public GitHub refs.\n\nThey are hidden and disabled by default. They are available only through the\nlocal `githits` CLI and local stdio MCP server; the hosted MCP and plugin or\nextension installs keep the stable tool set. Enable them in the GitHits host\nconfig, then restart the coding agent so it restarts the local MCP server:\n\n```toml\n# macOS/Linux: ~/.config/githits/config.toml\n# Windows: %APPDATA%\\githits\\config.toml\n[experimental]\ntools = true\n```\n\nSee [Experimental tools](https://github.com/githits-com/githits-cli/blob/main/docs/experimental-tools.md) for platform-specific\nconfig discovery, CLI examples, optional issue reporting, limitations, and how\nto disable the tools.\n\n## Supported Sources\n\nGitHits works with package and repository targets such as:\n\n- package specs: `npm:react`, `npm:react@18.2.0`, `pypi:requests`, `crates:serde`\n- GitHub repos: `https://github.com/expressjs/express`, `github:expressjs/express#main`\n\nPackage inspection supports npm, PyPI, Hex, Crates, NuGet, Maven, Packagist,\nRubyGems, Go, Swift, vcpkg, and Zig. Advisory data is unavailable for vcpkg and\nZig; dependency graph support varies by registry.\n\n## License Filtering\n\nCode example search supports license filtering:\n\n- `strict` is the default and filters repositories with copyleft or undeclared licenses\n- `custom` uses your account blocklist configured at [githits.com](https://githits.com)\n- `yolo` disables license filtering\n\n```sh\nnpx githits@latest example \"async file reading\" --lang python --license strict\n```\n\n## Authentication\n\nNormal local setup is handled by:\n\n```sh\nnpx githits@latest init\n```\n\nFor manual login:\n\n```sh\nnpx githits@latest login\n```\n\nBrowser OAuth is recommended for local development. Credentials are stored in\nthe system keychain by default and refreshed automatically. Useful flags:\n\n- `init --no-browser` or `login --no-browser` prints the login URL instead of launching a browser\n- `init --port ` or `login --port ` fixes the loopback callback port\n- `login --force` re-authenticates even if you are already logged in\n\nThe OAuth callback always listens on the machine where GitHits is running.\nWhen GitHits runs over SSH and the browser runs locally, forward the selected\nport from the browser machine:\n\n```sh\nssh -N -L 8765:127.0.0.1:8765 user@remote-host\n```\n\nWith that tunnel open, run GitHits on the remote machine using the same port:\n\n```sh\nnpx githits@latest init --no-browser --port 8765\n```\n\nOpen the URL printed by GitHits in the local browser. Replace\n`user@remote-host` with the SSH destination you normally use. The same flags\nwork with `githits login` after setup.\n\nBrowser OAuth is interactive. For CI and other unattended environments, supply\n`GITHITS_API_TOKEN` through the environment's secret manager.\n\n### Keychain Prompts and File Storage\n\nGitHits uses the system keychain by default because OAuth credentials include a\nrefresh token. On macOS this means Keychain Access; on Windows it means\nCredential Manager; on Linux it means the available Secret Service or keyring\nbackend.\n\nIf macOS shows a prompt such as \"githits wants to access ... in your keychain\",\nchoose **Always Allow** when you trust the installed `githits` CLI. GitHits\ncannot customize that operating-system prompt; it is generated by macOS.\n\nGitHits also writes a small non-secret metadata file so recent startup checks do\nnot need to read the keychain. The keychain is only read when GitHits needs the\ntoken, for example during a tool call, token refresh, `githits auth status`, or a\nlogin check after metadata is stale or expired.\n\nIf your agent keeps showing keychain prompts even after **Always Allow**, switch\nOAuth storage to file mode:\n\n```toml\n# macOS/Linux: ~/.config/githits/config.toml, or $XDG_CONFIG_HOME/githits/config.toml\n# Windows: %APPDATA%\\githits\\config.toml\n[auth]\nstorage = \"file\"\n```\n\nThe config directory may be empty until you create `config.toml` or GitHits\nwrites auth metadata. Older macOS installs may have used\n`~/Library/Application Support/githits`; GitHits still reads that location for\nmigration, but new auth config and file storage use `~/.config/githits`.\n\nYou can also opt in for one process:\n\n```sh\nGITHITS_AUTH_STORAGE=file githits login --force\n```\n\nFile mode stores OAuth credentials as JSON files under the GitHits config\ndirectory. The files are written with private permissions where the platform\nsupports it, but they are not encrypted. Any process that can read files as your\noperating-system user may be able to read the tokens.\n\nUse file mode only on machines where you trust local user-account access. For CI\nand automation, prefer `GITHITS_API_TOKEN` instead of browser OAuth.\n\nInspect auth and runtime state with:\n\n```sh\nnpx githits@latest auth status\nnpx githits@latest doctor\n```\n\nSee the [authentication docs](https://docs.githits.com/authentication) for\nkeychain behavior, file storage mode, CI setup, and troubleshooting.\n\n## Manual MCP Setup\n\nIf your coding tool is not auto-configured by `init`, add GitHits to its MCP\nconfiguration manually:\n\n```json\n{\n \"mcpServers\": {\n \"githits\": {\n \"command\": \"npx\",\n \"args\": [\"-y\", \"githits@latest\", \"mcp\", \"start\"]\n }\n }\n}\n```\n\nYour tool runs this command over stdio. No background daemon or global install\nis required.\n\nTo remove configuration written by `init`:\n\n```sh\nnpx githits@latest uninstall\n```\n\nThis removes GitHits MCP configuration and guidance written by `init`, while\npreserving stored credentials. Run `npx githits@latest logout` separately to\nremove credentials. The compatibility form `npx githits@latest init uninstall`\naccepts the same `--yes`, `--project`, and `--keep-guidance` options.\n\n## Project Setup\n\nFor project-local MCP config, run:\n\n```sh\nnpx githits@latest init --project\n```\n\nProject setup is available only for tools with verified project-local MCP\nsupport. Project config contains no secrets, but it may be committed like other\ntooling configuration, so review generated files before adding them to source\ncontrol.\n\nAgent-safe non-interactive setup uses staged discovery and explicit install:\n\n```sh\nnpx githits@latest init --detect-agents --json\nnpx githits@latest init --install-agents cursor,codex-cli\n```\n\n## Plugin and Extension Packaging\n\nThe repository and published package provide the plugin and extension assets\nused by compatible hosts. Git-based installs also retain the context-file\nsymlinks (`CLAUDE.md` and `GEMINI.md`) to the canonical `AGENTS.md`:\n\n- `.plugin/plugin.json`\n- `.claude-plugin/plugin.json`\n- `.claude-plugin/marketplace.json`\n- `.codex-plugin/plugin.json`\n- `.cursor-plugin/plugin.json`\n- `.mcp.json`\n- `gemini-extension.json`\n- `plugin.json` (Google Antigravity)\n- `mcp_config.json` (Google Antigravity)\n- `AGENTS.md`\n- `CLAUDE.md`\n- `GEMINI.md`\n- `skills/`\n\nThe root skill tree is shared by all supported hosts. Every plugin and extension\ninstall uses the hosted remote MCP, including Claude, Codex, Cursor, Gemini CLI,\nGoogle Antigravity, and VS Code/GitHub Copilot OpenPlugin. Direct `githits init`\nsetup is a separate path: it installs local stdio configurations for supported\ntools except Cursor, which remains remote-only. The repository root is a native\nAntigravity plugin through `plugin.json`, `mcp_config.json`, and the shared\n`skills/` tree. Generated manifests are refreshed with `bun run plugins:generate`\nand validated with `bun run plugins:check`.\n\nGuided `init` installs the four canonical skills (`githits-code`, `githits-mcp`,\n`githits-onboarding`, and `githits-package`) only for selected agents. Shared\nskill-capable agents use `~/.agents/skills/` at user scope or `.agents/skills/`\nat project scope; native-only agents use their verified native skill directory.\nCompatible agents reading a shared root can discover those skills. A later\nguided run repairs missing skills, and migration removes only the historical\nCline or Junie `githits-mcp/SKILL.md` after the complete shared set is verified.\n\nFor Claude Code marketplace installs:\n\n```sh\nclaude plugin marketplace add githits-com/githits-cli\nclaude plugin install githits@githits-plugins\n```\n\nFor Gemini CLI extension installs:\n\n```sh\ngemini extensions install https://github.com/githits-com/githits-cli\n```\n\n## Command Reference\n\n```text\ngithits init Connect GitHits to your coding agents\ngithits uninstall Remove GitHits MCP configuration and guidance\ngithits init uninstall Compatibility alias for `githits uninstall`\ngithits login Sign in to your GitHits account\ngithits logout Remove stored credentials\ngithits mcp Show setup instructions or start the local MCP server\ngithits mcp start Always start the local MCP server over stdio\ngithits example Find real-world implementations from open source\ngithits languages List or filter supported programming languages\ngithits feedback Submit feedback about GitHits results\ngithits doctor Diagnose configuration and auth state\ngithits resolve Experimental: resolve a fuzzy name to canonical targets\ngithits settings View and update preferences, privacy, and terms\ngithits search Explore repository code, dependencies, docs, and symbols\ngithits search-status Check the status of a previous indexed search\ngithits code List, read, grep, or experimentally diff indexed source\ngithits pkg Inspect package metadata, vulnerabilities, deps, and changelogs\ngithits docs Browse and read package documentation\ngithits auth Manage authentication\ngithits auth status Show authentication status\n```\n\nFull CLI reference: https://docs.githits.com/cli/commands\n\n## Environment Variables\n\nMost users do not need environment variables. These are the common overrides for\nCI, auth storage, and local diagnostics:\n\n| Variable | Purpose | Default |\n|---|---|---|\n| `GITHITS_API_TOKEN` | API token for authentication | unset |\n| `GITHITS_AUTH_STORAGE` | Override OAuth storage mode: `keychain` or `file` | `keychain` |\n| `GITHITS_DISABLE_UPDATE_CHECK` | Disable npm latest-version update notices | unset |\n| `GITHITS_TELEMETRY` | Emit local timing diagnostics to stderr | unset |\n\nFull reference: https://docs.githits.com/cli/environment-variables\n\n## Source Layout\n\nThis repository contains the GitHits CLI and reusable MCP package:\n\n- `src/` - CLI commands, local auth, setup flows, and local MCP stdio startup\n- `packages/mcp/` - public `@githits/mcp` package for transport-neutral MCP\n server APIs, tool registration, instructions, and smoke-test helpers\n- `packages/core-internal/` - shared workspace implementation used by the CLI\n and MCP package\n- `docs/` - implementation notes and contributor guidelines\n- `scripts/` - package validation, smoke tests, and development utilities\n\nSee [CHANGELOG.md](https://github.com/githits-com/githits-cli/blob/main/CHANGELOG.md) for released changes, pending work, and the\ncurrent package-version impact.\n\n## Development\n\nRequirements:\n\n- Node.js `^20.18.1 || >=22.13.0`\n- Bun\n\nCommon commands:\n\n```sh\nbun install\nbun run dev --help\nbun test\nbun run typecheck\nbun run build\n```\n\nWhen changing MCP tools, CLI commands, shared formatters, auth/error envelopes,\nor MCP/CLI parity behavior, also run the relevant smoke suites:\n\n```sh\nbun run smoke:mcp\nbun run smoke:cli\n```\n\nCI also checks the built product without credentials or live backend calls. Run\nthe same checks locally after `bun run build`:\n\n```sh\nbun run smoke:cli:built\nbun run smoke:mcp:built\n```\n\nThe harness remains on Bun, while product subprocesses execute `dist/cli.js`\nwith `node` from `PATH`. CI provisions that runtime from `.node-version`.\n\nWhen changing MCP instructions, tool descriptions, or agent-facing behavior,\nuse the targeted agent evals described in `eval/agentic/README.md`:\n\n```sh\nbun run agent:e2e\n```\n\n## License\n\nApache-2.0\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays",0,"upstream",{"_112":113,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123},"requiredSecrets",[],"tags",[99,100,101,102,103,104,105,106,107,108,109,110,111],"assets",[],"stats",{"_97":86,"_98":86},"ratingAvg","reviewCount","ai-coding-tools","ai-tools","cli","code-graph","code-search","context-api","context-engineering","context-layer-for-ai","context7-alternative","documentation-mcp","index","remote-mcp","skills","topics",[99,100,101,102,103,104,105,106,107,108,109,129,130,110,111],"license","Apache-2.0","language","TypeScript","registryName","com.githits/githits","homepage","https://githits.com","packages",[124],{"_125":126,"_127":128,"_76":77},"registryType","npm","identifier","githits","mcp","mcp-server","ENV",{"_133":134,"_135":136,"_137":138},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]