Back to Browse

ossian-mcp MCP Server

by dockndevai
AI & MLLow Risk8.2Local
Free

Ask your own documents with citations, plus durable memory for agents. Safe by default.

About

MCP server for Ossian. ask_documents answers from your organisation's own documents and returns the exact passages each answer came from — and reports 'not found' rather than inventing an answer presented as company policy. remember/recall give the agent a durable memory ranked by relevance, importance and recency; memory and the document corpus are kept as separate stores on purpose. Safe by default: the server starts in a read-only access mode with only the four read tools registered — ingest and remember need read-write, and the irreversible forget_session needs admin plus an explicit opt-in (OSSIAN_ALLOW_FORGET). Access modes, namespace allowlists, protected namespaces, dry-run and a JSON audit log are enforced by a pure policy engine, as defence in depth over the Ossian API key's own roles and namespace confinement.

Security Report

8.2
Low Risk8.2Low Risk

This is a well-designed MCP server with strong security practices and clear threat modeling. Authentication is properly required (API key to Ossian backend), access control is enforced via an explicit multi-layer policy engine with capability gating and namespace scoping, and dangerous operations are guarded with dry-run and audit logging. Code quality is high with proper input validation, no malicious patterns, and appropriate error handling. Minor observations: environment variable handling is not shown in detail, and there is some reliance on the backend Ossian server for enforcement, but these are appropriate for a thin adapter pattern. Package verification found 1 issue.

7 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "ossian-mcp": {
      "args": [
        "-y",
        "ossian-mcp"
      ],
      "command": "npx"
    }
  }
}

Getting Started

Once installed, try these example prompts and explore these capabilities:

  • 1Ask: "What does our refund policy say?" — answered with the exact source passages, or "not covered by the documents".
  • 2remember: "The team standardises on Terraform" — then recall it in a later session.
  • 3Tool: ask_documents — answer from your corpus, with citations
  • 4Tool: recall — retrieve relevant memories ranked by relevance, importance and recency

Reviews

No reviews yet

Be the first to review this server!