43
/ 100
1 month ago
glama

vs-token-safer

Token-safe code search for AI agents: queries the language-server index (clangd / Roslyn / tsserver / pyright) instead of grep and returns a token-capped file:line list — ~20x fewer tokens. Symbol-level editing + a grep→index rewrite hook. Local-only, no IDE.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configCLAUDE_PLUGIN_DATA
configCLAUDE_PLUGIN_ROOT
configFIELDS
configGDLOG_CONFIG_FILE
configGDLOG_ENFORCE
configGDLOG_REWRITE
configLOG
configLOG_B
configP4CLIENT
configP4CONFIG
configP4IGNORE
configP4PORT
configVTS_BACKEND_IDLE_MS300000 Idle language server shut down after this (0 = off).
configVTS_CENTRALITY_BUDGET_MSVTS_CENTRALITY_MAX / 20000 / 400 Include-centrality scan bounds (0 disables / cache-only).
configVTS_CLANGD_ARGSclangdCmd VTS_CLANGD_CMD / clangd clangd executable (persist via vts setup --clangdCmd <path> — VS-bundled 19.1.x deadlocks UE, use ≥ 22) / args.
configVTS_CLANGD_CMDclangdCmd / VTS_CLANGD_ARGS clangd clangd executable (persist via vts setup --clangdCmd <path> — VS-bundled 19.1.x deadlocks UE, use ≥ 22) / args.
configVTS_CLANGD_REMOTEpoints clangd at a shared prebuilt index server.
configVTS_CLAUDE_PROJECTS~/.claude/projects Where vts discover looks for transcripts.
configVTS_COMPACT_RESULTS1 0 restores one-location-per-line output.
configVTS_COMPACT_VCS1 0 stops rerouting read-only git/p4 to the compacted wrapper.
configVTS_CONFIG_FILE
configVTS_DB_DIR~/.vs-token-safer/db Out-of-tree home for generated compile DBs.
configVTS_EDIT_BLOCK_AFTER
configVTS_EDIT_LEDGER
configVTS_EDIT_MIN_LINES
configVTS_EDIT_STEER1 0 hides the one-line hint (on a focused search_symbol/goto_definition result) pointing at the symbol-edit tools. VTS_EDIT_STEER_MAX (10) caps the result size that gets it.
configVTS_EDIT_STEER_MAXVTS_EDIT_STEER 1 0 hides the one-line hint (on a focused search_symbol/goto_definition result) pointing at the symbol-edit tools. (10) caps the result size that gets it.
configVTS_EDIT_WARN
configVTS_ENFORCE1 0 lets Bash code-grep through (escape hatch).
configVTS_EXCLUDE_COMMANDSComma list of executables to exempt (also excludeCommands in config).
configVTS_GREP_BLOCK1 0 reverts the Grep/Glob tool escalation from block to warn-only.
configVTS_INCLUDE_GRAPHVTS_QUERY_HISTORY / ~/.vs-token-safer/… Warm-up ordering caches.
configVTS_LANGlang auto Hook message language: ko / en (auto-detects from OS locale).
configVTS_LSP_TIMEOUT_MS30000 Per-request LSP timeout. Raise for a cold, large index.
configVTS_MAX_BACKENDS2 Max concurrently-live language servers (LRU-evict past the cap).
configVTS_OUTLINE_RAW
configVTS_PREWARM_BACKENDSauto auto / all / comma list — which backends to pre-warm.
configVTS_PREWARM_HOOK
configVTS_PROJECT_PATHprojectPath cwd Project root (where the compile DB / .sln lives).
configVTS_QUERY_HISTORY/ VTS_INCLUDE_GRAPH ~/.vs-token-safer/… Warm-up ordering caches.
configVTS_REWRITEsub>Illustrative output with public Unreal Engine symbols. =0 blocks instead of rewriting.</sub>
configVTS_SAVINGS_FILE
configVTS_TEE/ VTS_TEE_DIR truncate Recovery file for a capped find_files/search_text result.
configVTS_TEE_DIRVTS_TEE / truncate Recovery file for a capped find_files/search_text result.
configVTS_TEXT_STEER
configVTS_TS_OPEN_CAP/ VTS_PY_OPEN_CAP 60 Files the JS/TS / Python warm-up opens.
configVTS_UE_ROOT
configVTS_WARM_CAP_RATIO/ VTS_WARM_CAP_MAX 0.1 / 300 Adaptive warm-up open-cap (fraction of a language's files, clamped).
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/jsungmin-vs-token-safer-owt5zc)](https://m8ven.ai/mcp/jsungmin-vs-token-safer-owt5zc)
commit: b0a0725993d98e8c491c849209a904738fe5d18d
code hash: dad973947c155e8a3f144b24d7543980444c48d9cb36a9e210408498a40acf75
verified: 6/17/2026, 11:29:27 AM
view raw JSON →