Same index, two users

For the person. For the agent.

human

Push, review, browse.

git push over SSH - native, no wrapper

pull requests with suggested edits and CODEOWNERS gates

browse the symbol graph in the web UI

keyboard shortcut to any repo, symbol, or audit row

agent

One token, real tools.

mcp session

$ tools/call kg.callers { symbol: "AssignSeat" }
3 callers across 2 repos
# audit row written - actor=mcp:claude

For agents

Scraping vs a protocol.

brittle CSS selectors

typed MCP tools with a schema

no real auth model

scoped, revocable bearer tokens

invisible, unlogged access

named agent entity with scoped token and revocable access

rate-limited HTML scraping

structured JSON over streamable HTTP

breaks on every redesign

a versioned protocol (MCP 2025-11-25)

No testimonials

Receipts, not quotes.

We won't show you logos. Here's what the system actually emits on a push.

Audit row

id #1170

actor db@src.land

action push

ns rethunk/payments/payments-core

at 2026-06-04T18:17:30Z

Symbol diff

processPaymentmodified

body sha256 4f9c...a210 -> 7b1e...c904

callers 2 -> 3

0 symbols removed

Security & governance

Built for teams that get audited.

self-host

Offline license, no phone-home.

SCIM 2.0

RFC 7643/7644 provisioning

scoped tokens

per action and namespace, revocable

audit retention

90 / 365 / 2555-day retention by tier

device policy

AAGUID passkey allowlists

data export

full account export on request

No magic

Built on standards.

No vendor transport layer. Agents connect over RFC 8628 device flow; auditors page the audit log over plain HTTPS.

OAuth 2.1

auth-code + PKCE-S256

RFC 8628

device grant for headless CLI

RFC 7591

dynamic client registration

RFC 8414

authorization-server metadata

WebAuthn

discoverable-key passkeys

MCP 2025-11-25

streamable HTTP transport

SCIM 2.0

RFC 7644 provisioning

Ed25519

offline license signatures

Wire an agent

Issue a scoped token.

Agent token guide Join the waitlist

Built for MCP.