Change Firewall v0.2.0•Native MCP Engine

Your AI wrote the code.We tell you what it broke.

Standard git diffs only see text lines (+1 / -1). Change Firewall computes deterministic AST behavioral mutations, maps downstream caller blast radius, and provides stdio MCP tools for autonomous AI self-correction.

Documentation Get Future Updates

Zero API Keys / 100% Offline

Deterministic AST Engine

Claude, Antigravity & Cursor Ready

AST Behavioral Diff & Blast Radius Simulator

Interactive Radar

Scenario: AI refactored return in user.ts (return user ➔ return { user })

Blast Radius: 6 Broken Downstream Callers

Tap any node to inspect broken callsite & runtime exceptionAST Graph View

src/controllers/user.tsLine 42

-return user;

+return { user };

AI wrapped the return payload in a nested object without updating downstream contract deserializers.

High Risk Mutation Detected

Risk Score: 74 / 100

💥 6 Downstream Callers Severed

AST analysis discovered that 6 consumer files depend on the direct properties of user. Without Change Firewall, this innocent 1-line change silently breaks web, auth, and billing.

Automated CI Gate:MERGE BLOCKED (Exit 1)

Four Core Pillars

Engineered for the Agentic Coding Era

Standard linters and tests aren't enough when AI modifies 20 files in 5 seconds.

Compiler Intelligence

AST Behavioral Diffing

Raw git diffs only understand line counts. Change Firewall parses TypeScript ASTs to detect mutated API contracts, altered auth guards, and modified function nullability before you merge.

Graph Intelligence

Caller Blast Radius Mapping

Constructs the project reverse-dependency graph and traces consumer callers up to 3 hops deep. Instantly reveals which public API routes, client screens, and services will break.

Zero Hallucination

Deterministic Risk Scoring (0-100)

A predictable, mathematically reproducible risk algorithm. No LLM randomness, no prompt drift. Produces transparent contribution breakdown for every security and architecture risk.

Merge Gate

Autonomous Self-Healing Gate

Integrates into Husky pre-commit hooks, GitHub Actions, and agent self-correction loops. AI agents read structured JSON preflight blockers and fix their own errors before human review.

Open Standard Protocol (MCP)

Universal AI Integration

Configure once. Connect Change Firewall natively to Claude Desktop, Google Antigravity, Cursor, Windsurf, and Copilot with zero custom wrappers.

Claude Desktop Configuration

~/Library/Application Support/Claude/claude_desktop_config.json

mcp_config.json

2 "mcpServers": {

3 "change-firewall": {

4 "command": "npx",

5 "args": ["-y", "change-firewall", "mcp"]

6 }

7 }

How it works: Claude Desktop natively spawns Change Firewall as a local process over stdio. A hammer icon appears in chat with all 4 tools ready to execute.

Simulated Claude Desktop ExperienceMCP Active

Claude 3.7 Sonnet

18ms

User Input

“Refactor user session authentication and check if anything broke.”

Autonomous Tool Invocation

change-firewall.analyze_changes

Deterministic Feedback

AST diff complete: 0 contract breaks. Risk Score: 12/100 (Safe).

Checked 14 export signatures across 3 files
2 downstream consumers auto-updated
All parameter nullability contracts verified

Safety Gate Result:READY TO MERGE

Exposed MCP Tools:Click for details

Developer Updates

Never miss a breakthrough update.

Get notified when new superpowers launch: Automated AI Self-Healing Patches (--fix), Python/Go AST engines, and GitHub PR review bots.