Back to Browse

Llmscribe MCP Server

Developer ToolsModerate5.4MCP RegistryLocal
Free

Server data from the Official MCP Registry

Deterministic repo map, search and file reader for AI agents.

About

Deterministic repo map, search and file reader for AI agents.

Security Report

5.4
Moderate5.4Moderate Risk

The source reviewed is a deterministic repository extractor with no data exfiltration, shell-injection, or hardcoded-secret patterns in the visible code. The main considerations are that the HTTP transport can expose local file paths if an operator enables MCP_ALLOW_LOCAL_PATHS or MCP_ALLOWED_ROOTS, and the GUI source was truncated so it could not be fully reviewed. Permissions (GitHub API network access, optional GITHUB_TOKEN, git subprocess) match the stated purpose. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

5 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

stdio or httpOptional

Environment variable: MCP_TRANSPORT

HTTP bind addressOptional

Environment variable: HOST

HTTP portOptional

Environment variable: PORT

Accepted Host values for /mcp (comma-separated, host:* for any port, * for any). Default: loopback plus RENDER_EXTERNAL_HOSTNAME / RAILWAY_PUBLIC_DOMAINOptional

Environment variable: MCP_ALLOWED_HOSTS

Accepted Origin values for /mcp (requests without an Origin, i.e. all non-browser clients, are always accepted). Default: loopback, claude.ai, the platform hostname; * allows anyOptional

Environment variable: MCP_ALLOWED_ORIGINS

1 allows any local path over HTTPOptional

Environment variable: MCP_ALLOW_LOCAL_PATHS

Directories (separated by : / ;) allowed as path over HTTPOptional

Environment variable: MCP_ALLOWED_ROOTS

GitHub snapshots kept in memory (0 disables)Optional

Environment variable: LLMSCRIBE_CACHE_MAX_ENTRIES

Snapshot lifetimeOptional

Environment variable: LLMSCRIBE_CACHE_TTL_SECONDS

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-amrito-kundu-llmscribe": {
      "env": {
        "HOST": "your-host-here",
        "PORT": "your-port-here",
        "MCP_TRANSPORT": "your-mcp-transport-here",
        "MCP_ALLOWED_HOSTS": "your-mcp-allowed-hosts-here",
        "MCP_ALLOWED_ROOTS": "your-mcp-allowed-roots-here",
        "MCP_ALLOWED_ORIGINS": "your-mcp-allowed-origins-here",
        "MCP_ALLOW_LOCAL_PATHS": "your-mcp-allow-local-paths-here",
        "LLMSCRIBE_CACHE_MAX_ENTRIES": "your-llmscribe-cache-max-entries-here",
        "LLMSCRIBE_CACHE_TTL_SECONDS": "your-llmscribe-cache-ttl-seconds-here"
      },
      "args": [
        "-y",
        "llmscribe-site"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!