Back to Home
Daniel-Barta icon

mcp-rag-server

Verified Safe

by Daniel-Barta

Overview

Provides a local, zero-network Retrieval-Augmented Generation server for any code repository, enabling semantic search and file access through the Model Context Protocol (MCP) for AI clients like GitHub Copilot Agent.

Installation

Run Command
export REPO_ROOT="/path/to/your-repo"; npm start

Environment Variables

  • REPO_ROOT

Security Notes

The server demonstrates strong security practices for a local RAG solution. It explicitly enables DNS rebinding protection by default in HTTP mode and restricts allowed hosts to localhost. Crucially, path handling functions like `Indexer.ensureWithinRoot` are used to prevent directory traversal attacks, ensuring that file operations are confined to the specified `REPO_ROOT`. No hardcoded sensitive secrets or malicious patterns were identified. File system operations are either confined to the repository root or managed cache locations, or validated against traversal attempts.

Similar Servers

Stats

Interest Score32
Security Score9
Cost ClassLow
Avg Tokens1200
Stars2
Forks0
Last Update2026-01-18

Tags

RAGLocal AICode SearchMCPNode.js