PAMPA

Provides semantic code search and retrieval capabilities for AI agents, enabling them to query codebases using natural language with automatic learning, hybrid search, and intelligent chunking of functions and classes.

→ tecnomanu/pampa · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 3 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: COHERE_API_KEY, OPENAI_API_KEY, PAMPA_ENCRYPTION_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAPI_BASE_URL

🔐 secretCOHERE_API_KEY— Cohere 🟡 ~$0.05/1000 functions 🔴 None Set + npm install cohere-ai

configCORS_ORIGIN

configDATABASE_URL

configHOST

configLOG_LEVEL

configMONITORING_ENABLED

🔐 secretOPENAI_API_KEY— OpenAI 🔴 ~$0.10/1000 functions 🔴 None Set

configPAMPA_BENCH_BM25— off npm run bench – disable BM25 candidate generation

configPAMPA_BENCH_HYBRID

configPAMPA_BENCH_MODES— base,hybrid npm run bench – limit to specific modes

configPAMPA_BENCH_RERANKER

🔐 secretPAMPA_ENCRYPTION_KEY— export ="$(openssl rand -base64 32)"

configPAMPA_MOCK_RERANKER_TESTS— Benchmark runs never download external models when =1 (enabled by default inside the harness).

configPAMPA_RERANKER_MAX

configPAMPA_RERANKER_MODEL

configPORT

configSSL_CA_PATH

configSSL_CERT_PATH

configSSL_ENABLED

configSSL_KEY_PATH

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/tecnomanu-pampa-1s1m3x)](https://m8ven.ai/mcp/tecnomanu-pampa-1s1m3x)

commit: 34a8991df2350700b19deb798d7ca416043661ca

code hash: 61e818414f4597b4bab1a962ba878f8386fd04755f517f014350c3ad0d17d9cf

verified: 4/18/2026, 6:36:28 PM

view raw JSON →