74
/ 100
22 days ago
glama

Code-Index-MCP

Local-first code indexer that provides deep code understanding for Claude and other LLMs with symbol/text search across 48+ languages, semantic search capabilities, and real-time index updates through the Model Context Protocol.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 9 credentials: VOYAGE_API_KEY, VOYAGE_AI_API_KEY, GITHUB_TOKEN, MCP_CLIENT_SECRET, ANTHROPIC_API_KEY, OPENAI_API_KEY, DEFAULT_ADMIN_PASSWORD, JWT_SECRET_KEY, COHERE_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configQDRANT_URL
configQDRANT_USE_SERVER
🔐 secretVOYAGE_API_KEYexport =your-key
🔐 secretVOYAGE_AI_API_KEY
configBENCHMARK_OUTPUT_DIR
🔐 secretGITHUB_TOKEN
configINDEX_SCHEMA_VERSION
configMCP_ARTIFACT_MAX_AGE_DAYS
configMCP_ATTESTATION_MODE
configMCP_USE_SIMPLE_DISPATCHERfalse # Use simple dispatcher
configRERANKER_TYPEThree rerankers are available, configured via the environment variable:
configSEMANTIC_SEARCH_ENABLEDdocker run -it -v $(pwd):/workspace -e =true -e VOYAGE_API_KEY ghcr.io/viperjuice/code-index-mcp:v1.2.0
configMCP_REPO_REGISTRY
configMCP_ALLOWED_ROOTSPrerequisites: set to an OS-path-separator-separated list of absolute directory paths (: on Unix, ; on Windows) that the server is allowed to index before starting the server:
configMCP_WORKSPACE_ROOT
🔐 secretMCP_CLIENT_SECRET
configQDRANT_PATHvector_index.qdrant
configMCP_SKIP_PLUGIN_PREINDEX
configMCP_LIGHTWEIGHT_DOC_INDEX
configMCP_SERVER_HOST
configMCP_SERVER_PORT
configMCP_REBUILD_ON_SCHEMA_MISMATCH
configMCP_PLUGIN_TIMEOUT
configMCP_ENABLE_MULTI_PATH
configMCP_INDEX_ENABLED
configMCP_AUTO_INDEX_MAX_FILES100000 # Skip auto-index if repo exceeds this file count
configMCP_AUTO_INDEXSet =false in the server environment to skip background auto-indexing and call the reindex MCP tool manually (recommended for very large repos).
configMCP_METRICS_PORT
configMCP_DEBUG
🔐 secretANTHROPIC_API_KEY
🔐 secretOPENAI_API_KEYapi_key_env:
configMCP_MAX_FILE_SIZE_BYTES
configMCP_ARTIFACT_RETENTION_COUNT
configMCP_ARTIFACT_RETENTION_DAYS
configMCP_DISK_READONLY_THRESHOLD_MB
configMCP_PUBLISH_ROLLBACK_ENABLED
configMCP_ENVIRONMENT
configENVIRONMENT
configENV
configMCP_INDEX_PATHS
configDOCKER_CONTAINER
configPYTEST_CURRENT_TEST
configGITHUB_ACTIONS
configGITHUB_WORKSPACE
configWORKSPACE_ROOT
configMCP_PROFILES_PATHAbsolute path to a custom profiles YAML (overrides built-in)
🔐 secretDEFAULT_ADMIN_PASSWORD
configMCP_LOG_FORMAT
configMCP_TOOL_REGISTRY
configMCP_INDEX_STORAGE_PATH
configMCP_TEST_REPOS_PATH
configCONTAINER
config_
configMCP_SUB_AGENT_ACCESS
configMCP_INHERIT_CONFIG
configMCP_PROPAGATE_TOOLS
configMCP_ENABLE_MULTI_REPO
configVOYAGE_RERANK_MODEL
configFLASHRANK_MODEL
configMCP_DISPATCHER_FALLBACK_MS
configCORS_ORIGINS
🔐 secretJWT_SECRET_KEY
configACCESS_TOKEN_EXPIRE_MINUTES
configREFRESH_TOKEN_EXPIRE_DAYS
configPASSWORD_MIN_LENGTH
configMAX_LOGIN_ATTEMPTS
configLOCKOUT_DURATION_MINUTES
configRATE_LIMIT_REQUESTS
configRATE_LIMIT_WINDOW_MINUTES
configDEFAULT_ADMIN_EMAIL
configCACHE_BACKEND
configREDIS_URL
configCACHE_DEFAULT_TTL
configCACHE_MAX_ENTRIES
configCACHE_MAX_MEMORY_MB
configQUERY_CACHE_ENABLED
configQUERY_CACHE_DEFAULT_TTL
configQUERY_CACHE_SYMBOL_TTL
configQUERY_CACHE_SEARCH_TTL
configQUERY_CACHE_SEMANTIC_TTL
configMCP_INDEX_RECOVERY_BRANCH
configMCP_INDEX_RECOVERY_COMMIT
configHYBRID_BM25_WEIGHT
configHYBRID_SEMANTIC_WEIGHT
configHYBRID_FUZZY_WEIGHT
configGIT_COMMIT
configBUILD_TIME
configOPENAI_API_BASETailscale/VPN: Set =http://<tailnet-ip>:8001/v1
🔐 secretCOHERE_API_KEY
configBAML_LOG
configBAML_LOG_JSON_MODE
configBAML_LOG_MAX_CHUNK_LENGTH
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/viperjuice-code-index-mcp-1aejav)](https://m8ven.ai/mcp/viperjuice-code-index-mcp-1aejav)
commit: 55eedd68b8be9f78aa36f674608ed7e8cd65a1b4
code hash: c5a0aa2e047548e4e96dd52d148c299c4ca4360359739d1721d2f18589fa7e26
verified: 6/17/2026, 12:44:33 PM
view raw JSON →