74
/ 100
10 hours ago
glama

code-context

An MCP server that indexes a repository locally and provides keyword, semantic, hybrid, and SQL search tools, enabling coding agents to answer questions about the codebase efficiently without reading files one by one.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 2 critical
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
// known CVEs in dependencies2 critical

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@3GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

criticalvitest@3GHSA-9crc-q9x8-hgqq

Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configBENCH_MODEL
configCX_AUTO_INDEXon 0 makes a query on an unindexed repo error instead of building the index inline on the first search/sql
configCX_AUTO_SYNCon 0 disables the MCP server's background staleness sync
configCX_BENCH_CONCURRENCY
configCX_BENCH_QUESTIONS
configCX_BENCH_REPO
configCX_COMPACTION_TARGET_MIB
configCX_EMBED_DTYPE
configCX_EMBED_MODEL
configCX_EMBED_RAW
configCX_INDEX_DIRrepo>/.infino where the index lives
configCX_MAX_FILES/ CX_MAX_FILE_BYTES 20000 / 1MB indexing caps (files over the file cap are left out; search/sql then flag the index as partial so an absence isn't read as proof)
configCX_MAX_FILE_BYTESCX_MAX_FILES / 20000 / 1MB indexing caps (files over the file cap are left out; search/sql then flag the index as partial so an absence isn't read as proof)
configCX_NO_EMBEDoff keyword-only mode for the MCP server (skip the vector stage)
configCX_NO_RECEIPToff 1 turns off usage accounting - the per-call receipt on results and the cx usage ledger
configCX_ROOTPoint the server at a repo explicitly with env: { "": "/path/to/repo" }
configCX_SEARCH_K10 default number of hits search returns (also settable per call and via the CLI -k flag)
configCX_SESSION_MAXTURNS
configCX_SYNC_INTERVAL_SECS30 auto-sync debounce between staleness checks
configINJECT_LOCAL_CX
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/infino-ai-code-context-qie0if)](https://m8ven.ai/mcp/infino-ai-code-context-qie0if)
commit: d6f14c4d56b915550ce2f3defa895832ff4ea78a
code hash: 4d1fdc0d8a5f085dfb252ad0576e48a9be4454046f0661be69a31bec9ade8399
verified: 7/31/2026, 9:07:41 AM
view raw JSON →