Back to Browse

Code Context MCP Server

Developer ToolsModerate5.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

Local code search for AI coding agents: hybrid search and SQL aggregation over an in-repo index.

About

Local code search for AI coding agents: hybrid search and SQL aggregation over an in-repo index.

Security Report

5.8
Moderate5.8Moderate Risk

code-context is a well-designed MCP server for local code search with strong security fundamentals. It operates entirely offline with no authentication, API keys, or network calls required—all computation and data stay on the machine. The codebase shows careful attention to safe practices: no credential storage, no dangerous patterns, proper input validation, and appropriate use of streaming to bound memory. Minor code quality observations (broad error handling in a few places) do not materially impact security. Permissions are well-scoped to the server's purpose: filesystem access for indexing, subprocess for embedding model downloads, and environment variables for configuration. Supply chain analysis found 1 known vulnerability in dependencies (1 critical, 0 high severity). Package verification found 1 issue.

4 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Repository root to serve. Optional - defaults to the working directory the server is launched in.Optional

Environment variable: CX_ROOT

Where the index lives. Optional - defaults to .infino/ inside the repository root.Optional

Environment variable: CX_INDEX_DIR

Set to 0 to disable the background staleness sync that runs as queries arrive.Optional

Environment variable: CX_AUTO_SYNC

Set (1/true/yes) for keyword-only mode - skip the vector stage entirely.Optional

Environment variable: CX_NO_EMBED

Set (1/true/yes) to turn off local usage accounting: the per-call receipt on results and the cx usage ledger. Optional - on by default, computed locally, nothing leaves the machine.Optional

Environment variable: CX_NO_RECEIPT

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-infino-ai-code-context": {
      "env": {
        "CX_ROOT": "your-cx-root-here",
        "CX_NO_EMBED": "your-cx-no-embed-here",
        "CX_AUTO_SYNC": "your-cx-auto-sync-here",
        "CX_INDEX_DIR": "your-cx-index-dir-here",
        "CX_NO_RECEIPT": "your-cx-no-receipt-here"
      },
      "args": [
        "-y",
        "@infino-ai/code-context"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!