Back to Home
Daniel-Barta icon

mcp-rag-server

Verified Safe

by Daniel-Barta

Overview

Provides a local Retrieval-Augmented Generation (RAG) server for any code repository, integrating with clients that speak the Model Context Protocol (MCP) like GitHub Copilot Agent.

Installation

Run Command
npm start

Environment Variables

  • REPO_ROOT

Security Notes

The server implements strong security measures. It includes explicit path traversal prevention using `Indexer.ensureWithinRoot` to constrain all file operations to `REPO_ROOT`. For the HTTP transport, it offers DNS rebinding protection and configurable host allow-lists by default. No `eval` or direct command injection points were identified. Configuration uses environment variables, avoiding hardcoded secrets.

Similar Servers

Stats

Interest Score32
Security Score9
Cost ClassLow
Avg Tokens800
Stars2
Forks0
Last Update2025-12-01

Tags

RAGLocal EmbeddingsMCPAI Agent ToolCode Search