# BumpGuard

Tells you which lines of your own code break when a dependency is upgraded, and checks AI-written code against the package version you actually have.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 5
- Author: appcreationsca
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/appcreationsca/bumpguard-mcp
- Updated: 2026-06-17
- HTML: https://affpapa.org/en/nevibecode/mcp/bumpguard

## What it does

BumpGuard is an MCP server for the moment you bump a package and wonder what will fall over. It reads the public API of the version you have and of the target version, diffs the two, then scans your code for the spots that the changes really touch. Each finding comes with a symbol, a line number, a severity and a hint at the replacement.

Everything is static analysis. Third-party code is never imported or run, and the target version is pulled down as a wheel and unpacked into a temp directory, so there are no import side effects and no hangs on heavy packages. Alongside the upgrade check there are tools to list a package's real symbols, test whether an import resolves, and match a snippet against the installed API — that last one catches calls to functions your version no longer has.

Run the server in the same environment as the project, otherwise it inspects the wrong set of packages. Python 3.10+ is required. The .NET provider needs `dotnet` on `PATH`; Java is read straight from `.jar` bytecode in pure Python. Because the analysis is static, an empty report means nothing was proven to break, not that nothing will — the server says so in its own output.

## Requirements
- Needs: Python and uv (commands run via uvx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add bumpguard -- uvx bumpguard-mcp
```
uvx runs the command named after the package; if the README names another one, use uvx --from bumpguard-mcp <command>

### Codex

**Platform CLI**
```bash
codex mcp add bumpguard -- uvx bumpguard-mcp
```
uvx runs the command named after the package; if the README names another one, use uvx --from bumpguard-mcp <command>

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "bumpguard": {
            "command": "uvx",
            "args": [
                "bumpguard-mcp"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from bumpguard-mcp <command>

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "bumpguard": {
            "type": "stdio",
            "command": "uvx",
            "args": [
                "bumpguard-mcp"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from bumpguard-mcp <command>

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add bumpguard uvx bumpguard-mcp
```
uvx runs the command named after the package; if the README names another one, use uvx --from bumpguard-mcp <command>

## When to use it
- find out which lines break when pydantic moves from 1 to 2
- catch a method call that the installed SDK version does not have
- filter a library's changelog down to the changes your code hits
- confirm that an agent-written snippet uses real function names
- read the actual signatures of a package's public API

## Example prompts
- Before I upgrade pandas to 2.2, check whether my data pipeline breaks
- Check this snippet against the installed OpenAI SDK — do those methods exist
- List the real methods on `httpx.Client`

## Similar
- [114-java-maven-search](https://affpapa.org/en/nevibecode/skills/114-java-maven-search.md) — skill · 315 installs
- [knip](https://affpapa.org/en/nevibecode/skills/knip.md) — skill · 3900 installs
- [110-java-maven-best-practices](https://affpapa.org/en/nevibecode/skills/110-java-maven-best-practices.md) — skill · 478 installs
- [outdated](https://affpapa.org/en/nevibecode/skills/outdated.md) — skill · 2800 installs
- [maven-tools-mcp](https://affpapa.org/en/nevibecode/mcp/maven-tools-mcp.md) — MCP server · ★ 35
- [health-check](https://affpapa.org/en/nevibecode/skills/health-check.md) — skill · 2800 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md