project
Command-line AI coding tool named as able to call Graphify.
No evidence-backed relationships are recorded.
The gap is documented rather than debatable. A vendor's own survey adds the numbers: four parallel-agent tools shipped in the past year, none of them running natively on Windows.
Reality
Adversa.ai says Claude Code's folder-trust dialog stopped naming MCP servers in v2.1, while a repo-supplied config can still launch an unsandboxed process on one keypress.
Reality
The vendor reports 10-plus CVEs and up to 200,000 exposed instances, and says Anthropic declined to change the protocol, describing the behaviour as expected.
Reality
A Google AI series on dev.to shows how Inspect AI turns "is this MCP server worth my tokens" into a measured question, using a cheap grader model and three runs per test.
Reality
A dependency rule for agent config files read only the scalar form of a YAML key. Authors who declared nothing went clean; authors who declared properly got the warning.
Reality
Anthropic's own study found users approved 97% of prompts and caught 13.6% of harmful actions. From August 14 the click stops being the safeguard, and deny rules become the job.
Reality
Graphify was a weekend project given away free. It is now callable by Claude Code, Cursor, Codex and Gemini CLI, which makes its maintenance a procurement question nobody is asking.
Reality