Auth is handled in src/auth/oauth.py via OAuth 2.0. The verify_token() middleware runs on every protected route.
Sources
How it works
Three pillars, one platform. Each grounded in your actual source, each citing its work.
01 · Chat
No more grepping for hours. Ask plain English questions — 'Where does auth live?' 'Why are we doing X in file Y?' — and get answers with clickable citations to the exact files and line ranges.
slowapi decorator with 100 req/min limits…02 · Security
Not noise. Not false positives. Structured findings classified by CWE with concrete remediation steps — ready to paste into your security review.
03 · Architecture
Auto-generated Mermaid diagrams of your architecture. Onboarding guides written from the actual code. Everything a new engineer needs on day one.
Unlike anything else
Cursor ships autocomplete. Sourcegraph ships search. Copilot ships suggestions. We ship the workflows that actually solve engineering's hardest problems.
01 · Blast Radius
Paste a diff — see every file, test, and service affected, ranked by risk. Recommended reviewers auto-selected from git blame. Coverage gaps flagged. Like `terraform plan` for code.
Trace a sample diff02 · Onboarding Simulator
New hire Monday? We build a role-calibrated curriculum from your actual codebase. Real bugs as first-PR targets. Real owners as 'people to meet'. Real gotchas surfaced from git history.
Build a starter curriculum03 · Tribal Knowledge Capture
Senior engineer leaving? Auto-generate a brain dump of what only they knew: areas owned, decisions made, conventions introduced. The first product built for engineering succession.
Capture a knowledge dump04 · Dependency Health Radar
Lodash is fine. But is its maintainer still shipping? Is the release cadence slowing? Are there 3 healthier alternatives that fit your usage? We surface it proactively, weekly.
Audit your dependencies05 · Codebase Time Machine
Pick /src/auth. We reconstruct 2 years of its story: file count over time, contributor shifts, major refactors, incidents. Animated. Lessons from history applied to today.
Replay a module's historyFull feature set
Every feature below is grounded in your indexed source. Each one replaces an internal tool, a wiki page, or a one-off script that someone wrote and then forgot to maintain.
Ask plain English questions. Every answer cites the exact files and line numbers.
Ask the demo a questionArchitecture overviews and module docs from the source of truth — the code itself.
Generate docs from a repoCWE-classified findings with remediation. Hardcoded secrets, SQLi, XSS, auth flaws.
Run a sample security scanAuto-drawn Mermaid diagrams of your system. See the big picture in one glance.
Visualize your system'New developer in 30 minutes' — setup, entry points, key abstractions, gotchas.
Build a new-hire guideCode smells, complexity hotspots, missing tests. Each finding ships with a concrete fix.
Audit a repositoryAI-generated Jira-style tickets with priority, difficulty, and suggested files.
Draft your first sprintGitHub webhooks keep your analysis fresh. HMAC-verified, idempotent, zero setup.
Wire up a webhookInvite teammates, share repos, manage roles. SSO, audit log, RBAC on Team plan.
Spin up a workspaceFree to try. No credit card. Your first repository is indexed in under a minute.
Create an Account for Free