compass

mcp
Security Audit
Fail
Health Pass
  • License — License: Apache-2.0
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 67 GitHub stars
Code Fail
  • rm -rf — Recursive force deletion command in buf.gen.yaml
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
This tool acts as a context engine that builds a knowledge graph of your organization's metadata. It makes entities, relationships, and data lineage discoverable and queryable for both humans and AI agents.

Security Assessment
The application requires access to your organization's metadata and relies on a PostgreSQL database to function, meaning it handles potentially sensitive infrastructure data. It operates as a local server and exposes an SSE endpoint for MCP integrations, which involves network requests. No hardcoded secrets or dangerous runtime permissions were found. A rule-based scan flagged a recursive force deletion command (`rm -rf`), but this is safely isolated within a build configuration file (`buf.gen.yaml`) and poses no threat during standard runtime. Overall risk is rated as Low.

Quality Assessment
The project exhibits strong health indicators. It is actively maintained, with repository updates pushed as recently as today. It uses the standard and permissive Apache 2.0 license, making it highly suitable for open-source and commercial use. The project has a moderate community following with 67 GitHub stars, indicating early but real adoption and peer review. The repository features robust CI workflows, code coverage tracking, and clear documentation.

Verdict
Safe to use.
SUMMARY

Compass is a context engine that builds a knowledge graph of your organization's metadata, capturing entities, relationships, and lineage across systems and time, making it discoverable and queryable for both humans and AI agents.

README.md

Compass

test workflow
release workflow
Coverage Status
License
Version

Compass is a context engine that builds a knowledge graph of your organization's metadata, capturing entities, relationships, and lineage across systems and time, making it discoverable and queryable for both humans and AI agents.

Key Features

  • Knowledge Graph -- Typed, directed, temporal relationships between entities including lineage, ownership, and custom edge types.
  • Hybrid Search -- Keyword precision with semantic similarity using Postgres-native full-text search and pgvector embeddings.
  • Context Assembly -- Multi-hop bidirectional traversal builds a subgraph around any entity.
  • Impact Analysis -- Downstream blast radius analysis traces what breaks when something changes.
  • Documents -- Attach runbooks, decisions, and annotations to entities, indexed for semantic search.
  • MCP Server -- AI agents query the graph via Model Context Protocol.
  • Open Type System -- Any entity type, any edge type, any properties.

Documentation

  • Quickstart -- Get running in 5 minutes
  • Guides -- Entities, edges, search, context, MCP, CLI, API
  • Internals -- Architecture, search engine, storage

Installation

Install Compass on macOS, Windows, Linux, or via Docker.

macOS

brew install raystack/tap/compass

Linux

Download .deb or .rpm from releases:

sudo dpkg -i compass_*.deb

Docker

docker pull raystack/compass:latest

Build from Source

git clone https://github.com/raystack/compass.git
cd compass && make

Usage

# Start PostgreSQL
docker-compose up -d

# Initialize and run
compass config init
compass server migrate
compass server start

# Search the graph
compass entity search "orders" --mode hybrid

# Explore context
compass entity context urn:bigquery:orders --depth 2

# Analyze impact
compass entity impact urn:kafka:events --depth 3

MCP Server

Connect AI agents to Compass via MCP. Add to .mcp.json:

{
  "mcpServers": {
    "compass": {
      "type": "sse",
      "url": "http://localhost:8080/mcp"
    }
  }
}

License

Compass is Apache 2.0 licensed.

Reviews (0)

No results found