# squiggles Let your coding agent see the squiggles — LSP diagnostics, navigation, refactoring, and extras - **Type:** MCP server - **Trust:** 60/100 (B), scored on the package rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.0.2 - **Author:** io.github.carldaws - **License:** Unknown - **npm:** squiggles - **Source:** https://github.com/carldaws/squiggles - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 60/100 (B), scored on the package rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 1 day ## Security scan - **Status:** clean - **Scanned:** 2026-09-20T11:19:20.963Z - **Version scanned:** 1.0.2 - **CVEs:** none found by OSV at scan time ## Tools 40 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `goto_definition` — Go to the definition of a symbol at the given position. Returns the file and location where the symbol is defined. - `goto_type_definition` — Go to the type definition of a symbol. Returns where the type of the symbol at the given position is defined. - `goto_implementation` — Go to implementations of an interface or abstract method. Returns concrete implementation locations. - `goto_declaration` — Go to the declaration of a symbol (relevant in C/C++ for header declarations). - `find_references` — Find all references to a symbol across the project. Returns every location where the symbol is used. - `hover` — Get hover information (type signature, documentation) for a symbol at the given position. - `signature_help` — Get parameter information for a function call at the given position. - `document_symbols` — Get all symbols (functions, classes, variables, etc.) defined in a file as a hierarchical tree. - `workspace_symbols` — Search for symbols across the entire project by name. Supports fuzzy matching. - `code_actions` — Get available code actions (quick fixes, refactorings) at the given position. Diagnostics overlapping the range are passed to the server so quick fixes are incl - `format` — Format a file using the language server's formatter and write the result to disk. - `rename_prepare` — Check if a symbol at the given position can be renamed, and get its current name. - `rename` — Rename a symbol across all affected files. Returns the workspace edit, or applies it to disk when apply is true. - `call_hierarchy_incoming` — Find all functions/methods that call the function at the given position. - `call_hierarchy_outgoing` — Find all functions/methods that are called by the function at the given position. - `type_hierarchy` — Get the type hierarchy (supertypes and subtypes) for the type at the given position. - `open_file` — Open a file in the LSP server. This triggers diagnostics and makes the file available for subsequent no-arg diagnostics calls. - `diagnostics` — Get current diagnostics (errors, warnings) for a file. If no file is specified, returns diagnostics for all currently open files with issues. Waits for fresh re - `clangd_switch_source_header` — Switch between a C/C++ source file and its corresponding header - `clangd_symbol_info` — Get the USR and symbol details for the symbol at the given position - `clangd_ast` — Show the Clang AST for a range in a C/C++ file - `go_list_known_packages` — List packages that are importable from the given Go file - `go_list_imports` — List the imports of a Go file and the package it belongs to - `go_add_import` — Add an import path to a Go file. Applies the change to disk. - `go_mod_tidy` — Run go mod tidy for the module containing the given go.mod file - `go_vulncheck` — Run govulncheck to find known vulnerabilities in dependencies. May take a while on first run. - `go_modules` — List Go modules found under a directory - `ruby_discover_tests` — Discover test cases (Minitest, RSpec) in a Ruby file - `ruby_go_to_relevant_file` — Navigate between implementation and test file - `ruby_show_syntax_tree` — Show the Prism AST for a Ruby file - `ruby_dependencies` — List project gem dependencies - `rust_expand_macro` — Expand the macro invocation at the given position and show the generated code - `rust_parent_module` — Navigate to the parent module of the given position - `rust_open_cargo_toml` — Find the Cargo.toml of the crate containing the given file - `rust_external_docs` — Get documentation URLs (docs.rs, local rustdoc) for the symbol at the given position - `rust_related_tests` — Find tests that cover the code at the given position - `rust_view_syntax_tree` — Show the syntax tree for a Rust file - `rust_runnables` — List runnable targets (tests, binaries, doctests) at the given position - `rust_reload_workspace` — Reload workspace metadata from Cargo, e.g. after editing Cargo.toml - `rust_dependencies` — List all crates in the workspace dependency graph ## Install **Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for. **Cautions** (coverage gaps and advisories — never blocking) - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"squiggles\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"squiggles\"\n ]\n }\n }\n}" ``` ## Blast radius Moderate to extensive — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: mutates data; runs on your machine. - Floor 31, ceiling 55 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/squiggles - Install plan: https://forgeregistry.com/api/v1/packages/squiggles/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/squiggles - HTML page: https://forgeregistry.com/registry/squiggles - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.