mcp-local-rag

Local-first RAG server for developers. Semantic + keyword search for code and technical docs. Works with MCP or CLI. Fully private, zero setup.

→ shinpr/mcp-local-rag · listed on github_topic

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

github_topic

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configBASE_DIR— Set to the folder you want to search (or BASE_DIRS for multiple roots — see [Configuration](#configuration)). Documents must live under one of the configured roots.

configBASE_DIRS— Set BASE_DIR to the folder you want to search (or for multiple roots — see [Configuration](#configuration)). Documents must live under one of the configured roots.

configCACHE_DIR— Profile model identifiers and quantization variants are fixed per release. Both profiles share the same (default: ./models/); the first run on each profile downloads its model.

configCHUNK_MIN_LENGTH— chunk-min-length 50 Minimum chunk length in characters (1–10000)

configCODEX_HOME

configDB_PATH— export =./my-db

configHF_MODEL_REVISION

configMAX_FILE_SIZE— max-file-size 104857600 (100MB) Maximum file size in bytes

configMODEL_NAME— ⚠️ CLI --model-name must match the MCP server's env var. Using a different embedding model against an existing database produces incompatible vectors, silently degrading search quality.

configRAG_DEVICE

configRAG_DTYPE

configRUN_E2E

configRUN_E2E_KEEP_CACHE

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/shinpr-mcp-local-rag-1y29hd)](https://m8ven.ai/mcp/shinpr-mcp-local-rag-1y29hd)

commit: f4186b45ade551e3e9c2045244c7b2b23768ea4a

code hash: 853f7c969620e15e6ccfad51e22a73c697d6d21e1e2ef18c8953433e08a8ec67

verified: 6/14/2026, 10:31:53 AM

view raw JSON →