Potpie
Open-source agent platform that turns your codebase into a knowledge graph so agents can debug and build features with context.
Delv Safety Grade: B
Score 68/100 · assessed 2026-04-18
Potpie is an open-source autonomous coding agent that builds knowledge graphs from codebases to enable context-aware debugging and feature development. The project shows good transparency with active GitHub development and clear documentation. However, as a coding agent platform, it requires substantial permissions including filesystem access, code execution capabilities, and network connectivity to function. The maintainer appears to be a smaller startup rather than an established vendor, presenting moderate bus factor risk. Supply chain is reasonable via standard deployment but the agent's autonomous nature and broad codebase access create inherent security considerations. No known incidents, but the platform's ability to modify code and execute in development environments warrants careful scoping and review of what repositories it accesses.
Green flags
- Fully open-source on GitHub with active development and issue tracking
- Clear documentation of knowledge graph approach and agent capabilities
- Freemium model allows self-hosting for full control and inspection
- No known security incidents or malicious behaviour reported
- Active community engagement and transparent development process
Red flags
- Autonomous agent with code modification capabilities across entire codebase
- Smaller startup maintainer with limited track record and bus factor concerns
- Requires broad filesystem write access to modify source code
- Network access needed for knowledge graph operations and external integrations
- Self-hosted deployment complexity may introduce configuration vulnerabilities
Permissions requested
Pricing
Platforms
Review
Pay for the cloud tier if you're debugging or extending a large, modular codebase and tired of agents that lack context. Skip it if your repo is small, messy, or you need rapid prototyping over precision.
Good at
- Knowledge graph catches dependency and import relationships that RAG-based tools miss
- Spec-driven development mode infers patterns from existing code without explicit prompts
- Debugging workflows surface root causes faster than standard LLM search
- Self-hostable open-source version for teams with infrastructure capacity
Watch out
- Self-hosting the OSS version requires non-trivial infrastructure and graph build management
- Struggles with legacy codebases that lack clear module boundaries
- Slower to generate suggestions than competitors like Sweep
- Paid cloud tier pricing steep for small teams
- Autonomy is limited - still requires human review and merge decisions
Use cases
- codebase Q&A
- debugging
- spec-driven development