mcp-local-rag — security grade SAFE, quality 73/100

Security audit verdict: SAFE · quality 73/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by shinpr · MCP Server · ★ 402

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is mcp-local-rag safe to install? View the security audit →

About mcp-local-rag

MCP Local RAG Local RAG for developers via MCP or CLI. Semantic search with keyword boost for exact technical terms — fully private, zero setup. Features Semantic search with keyword boost Vector search first, then keyword matching boosts exact matches. Terms like , error codes, and class names rank higher—not just semantically guessed. Smart semantic chunking Chunks documents by meaning, not character count. Uses embedding similarity to find natural topic boundaries—keeping related content together and splitting where topics change. Quality-first result filtering Groups results by relevance gaps instead of arbitrary top-K cutoffs. Get fewer but more trustworthy chunks. Runs entirely locally No API keys, no cloud, no da

agent-skillscli-tooldeveloper-toolshybrid-searchlocal-firstlocal-ragmcpmcp-servermodel-context-protocolprivacy-first

Quick Facts

Stars402
Forks73
LanguageTypeScript
CategoryMCP Server
LicenseMIT
Quality Score73.2224949260671/100
Open Issues2
Last Updated2026-09-22
Created2025-10-31
Platformscli, mcp, node
Est. Tokens~21k

Compatible Skills

These tools work well together with mcp-local-rag for enhanced workflows:

  • quanta-quest — semantic(0.20)+complementary+same_lang+similar_pop+shared_platform (52%)
  • obsidian-gemini-helper — semantic(0.20)+complementary+same_lang+similar_pop+shared_platform (52%)
  • easy-skills — semantic(0.19)+complementary+same_lang+similar_pop+shared_platform (52%)
  • lucid-memory — semantic(0.17)+complementary+same_lang+similar_pop+shared_platform (51%)
  • ccpoke — semantic(0.15)+complementary+same_lang+similar_pop+shared_platform (50%)

mcp-local-rag alternative? Top 6 similar tools

Looking for a mcp-local-rag alternative? If you're comparing mcp-local-rag with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • octocode by Muvon · ⭐ 475

    Structural code intelligence for AI agents — semantic search, knowledge graphs, and a built-in MCP server in o

  • mcp-memory-service by doobidoo · ⭐ 2.0k

    Open-source persistent memory for AI agent pipelines (LangGraph, CrewAI, AutoGen) and Claude. REST API + knowl

  • grepai by yoanbernabeu · ⭐ 1.9k

    Semantic Search & Call Graphs for AI Agents (100% Local)

  • comfyui-mcp by artokun · ⭐ 745

    Local-first, agent-native control plane for ComfyUI — MCP server + sidebar agent that generates images, video

  • roam-code by Cranot · ⭐ 518

    Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 comman

  • mcpproxy-go by smart-mcp-proxy · ⭐ 379

    Supercharge AI Agents, Safely

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular TypeScript Agent Tools

Frequently Asked Questions

What is mcp-local-rag?

mcp-local-rag is Local-first RAG server for developers. Semantic + keyword search for code and technical docs. Works with MCP or CLI. Fully private, zero setup.. It is categorized as a MCP Server with 402 GitHub stars.

What programming language is mcp-local-rag written in?

mcp-local-rag is primarily written in TypeScript. It covers topics such as agent-skills, cli-tool, developer-tools.

How do I install or use mcp-local-rag?

You can find installation instructions and usage details in the mcp-local-rag GitHub repository at github.com/shinpr/mcp-local-rag. The project has 402 stars and 73 forks, indicating an active community.

What license does mcp-local-rag use?

mcp-local-rag is released under the MIT license, making it free to use and modify according to the license terms.

What are the best alternatives to mcp-local-rag?

The top alternatives to mcp-local-rag on Agent Skills Hub include octocode, mcp-memory-service, grepai. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools