code-sage
Verified Safeby faxioman
Overview
A high-performance MCP server for semantic code search, analyzing codebases using AST-based chunking and providing hybrid keyword and vector embeddings search capabilities for AI clients.
Installation
target/release/code-sageEnvironment Variables
- EMBEDDING_PROVIDER
- OPENAI_API_KEY
- EMBEDDING_MODEL
- EMBEDDING_BASE_URL
- DATA_DIR
- DEFAULT_TOP_K
- MIN_SCORE
- RRF_K
- CHUNK_SIZE
- CHUNK_OVERLAP
- BATCH_SIZE
- MAX_CHUNKS
- RUST_LOG
Security Notes
The project uses standard and well-audited libraries for networking (reqwest), file system access (tokio::fs, ignore), and hashing (sha2, md5). Environment variables are used for sensitive information like API keys, preventing hardcoding. Input path validation is present. Regex patterns for ignore files are escaped to prevent injection. The llama.cpp backend explicitly voids logs to prevent interference, a good practice for structured output. No obvious `eval` or dynamic code execution from user input was found.
Similar Servers
code-assistant
Standardizes communication between code editors and AI coding agents, enabling autonomous code analysis and modification via command-line, GUI, or server modes.
trustify-mcp
Acts as an MCP (Model Context Protocol) server, exposing Trustify instance's security vulnerability and SBOM data as structured tools for AI agents.
mcp-server
A Model Context Protocol (MCP) server that provides real-time Indian options market data and volatility analytics from GetOutpost.in for integration with AI chat models like Claude.
cozyreq
An AI agent to interact with and explore API endpoints by consuming OpenAPI specifications and user prompts.