React Analyzer MCP
Extracts React component and prop information locally, generating llm.txt and docs for an entire project in one pass.
Delv Safety Grade: C
Score 58/100 · assessed 2026-04-28
React Analyzer MCP is a local static analysis tool from solo developer Azer Koculu that scans React codebases to extract component and prop structures. It operates entirely locally with no external network calls, which limits blast radius. The tool performs filesystem reads across your project directory to parse JSX and generate documentation. Installation requires cloning and building from source rather than a published package, which increases supply chain friction and means you're running unverified code. The maintainer has a GitHub presence but this appears to be a personal project without organisational backing or visible community review. No security incidents are known, but the lack of package distribution and the need to execute build scripts on your machine warrant caution. Permissions are reasonably scoped to read-only filesystem access for analysis purposes, though the build step itself could execute arbitrary code during npm install.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREEReads local source. Single-axis.
Green flags
- Fully local analysis with no external network calls or cloud dependencies
- Open source with visible repository and code inspection possible
- Read-only filesystem operations for analysis, no writes to codebase
- Narrow scope: static analysis only, no shell execution or system access
Red flags
- No published npm package, requires clone-and-build from source
- Solo maintainer with no organisational backing or bus factor protection
- Build scripts execute during install without package verification
- Limited community review or adoption signals visible
Permissions requested
Install
npm install && npm run build
Review
Install this if you're working on a large React codebase and need to ask structural questions about components and props without manual grepping. Skip it if your project is small, you're not using Claude Desktop regularly, or you need runtime analysis rather than static prop extraction.
Good at
- Analyses entire React projects in one pass instead of file-by-file queries, saving time on large codebases.
- Generates structured llm.txt output that Claude can parse accurately without inventing prop names.
- Runs entirely locally with no API dependencies or cloud services required.
- Useful for prop audits, migration planning, and enforcing component patterns across teams.
Watch out
- No published npm package, so installation requires cloning the repo and building manually.
- Minimal documentation means you'll need to be comfortable editing Claude Desktop config files yourself.
- Static analysis only, so it misses dynamic prop spreading, rest patterns, and runtime prop injection.
- Updates require pulling from main and rebuilding rather than a simple package update.
Use cases
- React codebase analysis
- component documentation
- prop audit
- migration planning
Getting started
Works with
Similar MCPs
- GitHubFull GitHub API access - manage repos, issues, PRs, and code search. One of the most useful MCPs for any developer workflow.
- GrafanaGrafana Labs' official MCP. Read dashboards, datasources, alerts, and run Loki/Prometheus queries from inside your agent.
- SentryPull live errors, issues, and replays from Sentry into Claude. Great for debugging sessions where the model can see what actually broke in prod.
- MCP CLIInteractive CLI inspector for MCP servers supporting OAuth, tool calls, resource reads, and prompt runs.