OpenGrok MCP Server is a native Model Context Protocol (MCP) VS Code extension that seamlessly bridges the gap between your organization's OpenGrok indices and GitHub Copilot Chat. It arms your AI assistant with the deep, instantaneous repository context required to traverse, understand, and search massive codebases using only natural language.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
When Vitest UI server is listening, arbitrary file can be read and executed
esbuild: Missing binary integrity verification in Deno module enables remote code execution via NPM_CONFIG_REGISTRY
process.env. You'll be asked to provide them before it can run.HTTPS_PROXYHTTP_PROXYOPENGROK_ALLOWED_ORIGINS— comma-separated origins CORS allowlist (replaces wildcard CORS)OPENGROK_AUTH_SERVERS— comma-separated URLs Trusted authorization server URIsOPENGROK_BASE_URL— opengrok-mcp status Health check: validates connectivity and detects installed MCP clients. Reads config from ~/.claude.json, ~/.copilot/mcp-config.json, or Codex TOML when is not in envOPENGROK_CACHE_ENABLED— true (default) / false Enable TTL response cacheOPENGROK_CACHE_MAX_SIZE— integer (default: 500) Max cache entriesOPENGROK_CODE_MODE— Set =true to switch to a 5-tool interface optimised for multi-step investigations:OPENGROK_CONTEXT_BUDGET— standard (default) / minimal / generous Response size tier: 8 KB / 4 KB / 16 KBOPENGROK_JWKS_URI— URL JWKS endpoint for JWT validation (OAuth 2.1 resource server mode)OPENGROK_LOG_LEVEL— debug / info (default) Verbose structured logging to stderrOPENGROK_MAX_INLINE_LINESOPENGROK_MAX_RESPONSE_BYTESOPENGROK_MEMORY_BANK_DIR— path Override directory for active-task.md + investigation-log.md filesOPENGROK_PASSWORD— string Authentication password (prefer OS keychain via npx opengrok-mcp-server setup)OPENGROK_PASSWORD_FILEOPENGROK_PASSWORD_KEYOPENGROK_RESOURCE_URI— URL This server's resource URI, advertised in RFC 9728 metadataOPENGROK_RESPONSE_FORMAT_OVERRIDE— tsv / toon / yaml / text / markdown Force a response format globally for all toolsOPENGROK_SCOPE_MAP— scope:role,... Map JWT scopes to RBAC roles (e.g., read:readonly,admin:admin)OPENGROK_SEARCH_AND_READ_CAPOPENGROK_STRICT_OAUTH— true / false Reject requests without a valid JWT when OPENGROK_JWKS_URI is setOPENGROK_TIMEOUT— integer (seconds, default: 30) HTTP request timeoutOPENGROK_USERNAME— string Authentication username (optional — leave unset for anonymous access)OPENGROK_VERIFY_SSL— true (default) / false Disable TLS verification for self-signed certsVSCODE_IPC_HOOK_CLIXDG_CONFIG_HOME[](https://m8ven.ai/mcp/icyhot09-opengrok-mcp-server-12bwqv)