Install
$ agentstack add mcp-daniel-barta-mcp-rag-server ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
mcp-rag-server (RAG MCP server for any repository)
mcp-rag-server is a lightweight Retrieval‑Augmented Generation helper you can plug into any client that speaks the [Model Context Protocol (MCP)]. GitHub Copilot Agent mode in Visual Studio / VS Code is just one option – you can also use the official MCP Inspector, future MCP‑aware IDEs, or custom tooling.
It indexes a target repository directory, chunks the content (default chunk size 2400 characters, about 800 tokens, with 400 characters of overlap, about 120 tokens; both configurable via CHUNK_SIZE / CHUNK_OVERLAP), builds embeddings using either local inference via @huggingface/transformers or an OpenAI‑compatible embeddings API, and exposes MCP tools:
rag_query– semantic search returning scored snippets (path, score, snippet)read_file– secure file read (optional line range) constrained toREPO_ROOT. For PDF files, text is automatically retrieved from the unified cache file if availablelist_files– list directory contents (files & subdirectories) with optional recursion, depth and extension filtering
Two transports are supported (select with MCP_TRANSPORT=stdio|http):
stdio– simplest integration for IDEs that spawn a process (backward compatible default)http(Streamable HTTP) – recommended for large repos / first run so you can watch logs & poll readiness before attaching a client. Enable viaMCP_TRANSPORT=http. Includes DNS rebinding protection by default.
Features
- Embeddings via local inference (
@huggingface/transformers) or an OpenAI‑compatible API - Multi‑language source + docs support (configurable via
ALLOWED_EXT) - PDF support: Automatically extracts text from PDF files during indexing and caches it in a unified
pdf-text-cache.jsonfile (located alongside the index store) for fast retrieval. PDF text is treated like any other text file for semantic search - Excluded folder patterns support (configurable via
EXCLUDED_FOLDERS) - Fast glob file discovery and overlapping chunking for better recall
- Simple cosine similarity ranking (optionally swap to ANN later)
- Pluggable model selection via
MODEL_NAME(see guidance below) - Optional persistent index (multi-file storage) + warm start & incremental reindexing via
INDEX_STORE_PATH - Incremental change detection (additions / deletions / file size changes) to avoid full rebuilds
- Stdio or Streamable HTTP transport (with optional host allow‑list / DNS rebinding protection)
- Safe path handling (rejects attempts to escape
REPO_ROOT) - Minimal dependencies; quick startup after first local model load or remote API configuration validation
- Ready for extension: add new MCP tools or ANN / hybrid retrieval backends
Planned / Nice‑to‑have: hybrid BM25 + embedding search, ANN acceleration (HNSW / IVF), per‑language tokenizer heuristics, batched / parallel embedding, semantic boundary aware chunking.
Requirements
- Node.js 20+
- Path to your repository (
REPO_ROOT)
Optional MCP clients (any one is enough):
- The official MCP Inspector
- Visual Studio 2022 17.14+ with GitHub Copilot (Agent mode enabled)
- VS Code with GitHub Copilot Agent mode
- Any other MCP-aware tooling
Install
npm install
npm run build
Run (local test)
Build then start (stdio transport by default). Use either npm start or invoke the built file directly.
Windows PowerShell
npm run build
$env:REPO_ROOT="C:\path\to\your-repo"; node dist/index.js
Or:
$env:REPO_ROOT="C:\path\to\your-repo"; npm start
macOS / Linux (bash/zsh)
npm run build
export REPO_ROOT="/path/to/your-repo"; node dist/index.js
Or:
export REPO_ROOT="/path/to/your-repo"; npm start
Optionally set a model cache to speed up subsequent runs (first start downloads the model once):
export TRANSFORMERS_CACHE="/path/to/cache" # macOS/Linux
$env:TRANSFORMERS_CACHE="C:\path\to\cache" # Windows PowerShell
OpenAI-compatible API embeddings
Set EMBEDDING_PROVIDER=openai to call a remote /embeddings endpoint instead of loading a local transformer model. The request format follows the OpenAI embeddings API and works with providers that expose a compatible protocol such as OpenAI, Mistral, and Jina AI.
Windows PowerShell:
$env:REPO_ROOT="C:\path\to\your-repo"
$env:EMBEDDING_PROVIDER="openai"
$env:EMBEDDING_API_BASE_URL="https://api.openai.com/v1"
$env:EMBEDDING_API_KEY=""
$env:MODEL_NAME="text-embedding-3-small"
npm start
macOS / Linux:
export REPO_ROOT="/path/to/your-repo"
export EMBEDDING_PROVIDER="openai"
export EMBEDDING_API_BASE_URL="https://api.openai.com/v1"
export EMBEDDING_API_KEY=""
export MODEL_NAME="text-embedding-3-small"
npm start
Notes:
EMBEDDING_API_BASE_URLshould point to the provider's API base (for examplehttps://api.openai.com/v1), not the/embeddingspath itself.MODEL_NAMEis passed verbatim to the remote embeddings API whenEMBEDDING_PROVIDER=openai.EMBEDDING_API_BATCH_SIZEcontrols how many chunks are sent per remote embeddings request during indexing. Default:200.TRANSFORMERS_CACHEis only relevant for local inference.
Streamable HTTP mode (recommended for large initial indexes)
Run the MCP server as an HTTP endpoint and only open your IDE after Embeddings ready. shows (avoids client timeouts on cold start):
npm run build
$env:REPO_ROOT="C:\path\to\your-repo"; $env:MCP_TRANSPORT="http"; npm start
export REPO_ROOT="/path/to/your-repo"; MCP_TRANSPORT=http npm start
Default HTTP bind: http://127.0.0.1:3000/mcp. Override with HOST and MCP_PORT envs. A readiness endpoint is available at http://127.0.0.1:3000/health returning JSON like:
{
"version": "0.x.y",
"repoRoot": "C:/abs/path",
"modelName": "",
"transport": "stdio" | "http",
"ready": true | false,
"startedAt": "2025-01-01T00:00:00.000Z",
"indexing": {
"filesDiscovered": 123,
"chunksTotal": 456,
"chunksEmbedded": 456
}
}
ready flips to true only once all discovered chunks have embeddings (post cold build or incremental update completion).
Instructions endpoint
The server also exposes GET /instructions, which serves the Markdown file docs/copilot-instructions.md with all occurrences of ` replaced by the FOLDERINFONAME value from your environment (default REPO_ROOT`).
Notes:
- Start the server from the repository root so
docs/copilot-instructions.mdresolves via the current working directory. - Response content type is
text/markdown; charset=utf-8.
Linting & Formatting
- Type-check (no emit):
npm run typecheck - Run ESLint (check):
npm run lint - Auto-fix ESLint issues:
npm run lint:fix - Format with Prettier:
npm run format - Check formatting:
npm run format:check
Test with MCP Inspector (without VS)
Use the MCP Inspector to exercise the server locally and try the tools without Visual Studio.
Windows PowerShell:
npm run build
$env:REPO_ROOT="C:\path\to\your-repo"; npx @modelcontextprotocol/inspector node .\\dist\\index.js
Streamable HTTP via Inspector (Windows):
npm run build
$env:REPO_ROOT="C:\path\to\your-repo"; $env:MCP_TRANSPORT="http"; npx @modelcontextprotocol/inspector http://localhost:3000/mcp --transport http
macOS/Linux (bash/zsh):
export REPO_ROOT="/path/to/your-repo"
npx @modelcontextprotocol/inspector node dist/index.js
Streamable HTTP (macOS/Linux):
export REPO_ROOT="/path/to/your-repo"; MCP_TRANSPORT=http npx @modelcontextprotocol/inspector http://localhost:3000/mcp --transport http
Notes:
- First run in local mode downloads the embedding model and builds embeddings; the Inspector will connect only after startup completes. Watch the terminal for progress logs printed to stderr.
- You can also put settings in a
.envfile at the project root (e.g.,REPO_ROOT,TRANSFORMERS_CACHE,EMBEDDING_PROVIDER,EMBEDDING_API_BASE_URL).
In the Inspector UI:
- Click "List tools" to verify these tools are available:
rag_query,read_file,list_files. - Select a tool and click "Call tool". Provide JSON input as shown below.
Examples
- Semantic search over the repo
Tool: rag_query
Input JSON:
{
"query": "protobuf message X schema",
"top_k": 5
}
The response includes an array of matches with path, score, and snippet.
- List files in a directory (non-recursive by default)
Tool: list_files
Input JSON:
{
"dir": "src",
"recursive": false
}
Recursive with filters and limits:
Tool: list_files
Input JSON:
{
"dir": "src",
"recursive": true,
"maxDepth": 3,
"includeExtensions": ["ts", "md"],
"limit": 200
}
Response shape:
{
"entries": [
{ "path": "src/", "type": "dir" },
{ "path": "src/index.ts", "type": "file", "size": 1234 },
{ "path": "src/lib/", "type": "dir" }
]
}
- Read a file (optionally with a line range)
Tool: read_file
Input JSON:
{
"path": "src/path/to/file.txt", // relative to REPO_ROOT
"startLine": 1,
"endLine": 120
}
Troubleshooting
- Slow startup: set
TRANSFORMERS_CACHEto a fast local folder and (optionally) setALLOWED_EXT(e.g.,ts,tsx,jsfor TypeScript/JS only, or any list you need). - Path errors:
pathmust be relative toREPO_ROOT. Absolute paths are rejected for safety. - Nothing appears in Inspector for minutes: the server is still initializing (model download + embedding). This is expected on first run.
- Slow warm restarts: provide
INDEX_STORE_PATHso embeddings persist and only changed files re‑embed.
Environment configuration (.env)
You can configure environment variables via a local .env file.
Steps:
- Copy
.env.exampleto.env. - Edit values as needed.
Supported variables:
REPO_ROOT(required): path to the repository to index.FOLDER_INFO_NAME(optional): display label used inside MCP tool descriptions for the repository root (defaultREPO_ROOT). This is purely cosmetic for client UX; it does NOT affect which directory is indexed (that is controlled only byREPO_ROOT). Set it if you prefer a friendlier name (e.g.,frontend-appormonorepo-root) to appear in tool metadata and path guidance returned to the client.EMBEDDING_PROVIDER(optional):local(default) oropenai.openaimeans “use an OpenAI-compatible/embeddingsAPI”, not specifically OpenAI as the vendor.TRANSFORMERS_CACHE(optional): cache folder for local model files.EMBEDDING_API_BASE_URL(required whenEMBEDDING_PROVIDER=openai): base URL for the OpenAI-compatible API, such ashttps://api.openai.com/v1,https://api.mistral.ai/v1, or your provider-specific equivalent.EMBEDDING_API_KEY(required whenEMBEDDING_PROVIDER=openai): bearer token used for the embeddings API.EMBEDDING_API_BATCH_SIZE(optional whenEMBEDDING_PROVIDER=openai): number of chunks sent per remote embeddings request during indexing. Default:200.ALLOWED_EXT(optional): comma-separated list of file extensions to index. Default includes common text/code formats pluspdf. PDF files are automatically processed: text is extracted once during indexing and cached in a unifiedpdf-text-cache.jsonfile for fast retrieval.EXCLUDED_FOLDERS(optional): comma-separated list of folder patterns to exclude from indexing. Supports both exact folder names (e.g.,node_modules,dist,build,.git) and basic glob patterns (e.g.,**/test/**,**/tests/**). Files in these folders will be skipped during indexing. Defaults include common build/dependency folders:node_modules,dist,build,.git,target,bin,obj,.cache,coverage,.nyc_output.MCP_TRANSPORT(optional):httporstdio.VERBOSE(optional): true/1/yes/on for more granular progress logs during indexing & embedding.INDEX_STORE_PATH(optional): base path for persisted embedding index storage (e.g.,C:\repo\.mcp-indexor/repo/.mcp-index). The index is stored as multiple JSON files with this prefix (e.g.,.mcp-index.part0000.json,.mcp-index.part0001.json, etc.) along with a manifest file (.mcp-index.manifest.json) that tracks metadata, compatibility parameters, and the list of data files. Enables fast warm starts + incremental reindex (new / deleted / size‑changed files only).MODEL_NAME(optional): override the default embedding model (jinaai/jina-embeddings-v2-base-code). ForEMBEDDING_PROVIDER=local, this must be a model supported by@huggingface/transformers. ForEMBEDDING_PROVIDER=openai, this is passed directly to the remote/embeddingsAPI. Examples:MODEL_NAME=jinaai/jina-embeddings-v2-base-code(default) — Balanced multilingual/code embedding model; strong for mixed natural language + source code semantic search.MODEL_NAME=Xenova/bge-base-en-v1.5— High-quality English general-purpose text embeddings (good for documentation/wiki style corpora).MODEL_NAME=Xenova/bge-small-en-v1.5— Faster/lighter English model when latency or memory matters more than a few points of recall.
Any compatible sentence / feature-extraction model supported by @huggingface/transformers should work for local mode.
HOST(optional, HTTP mode): bind host (default127.0.0.1).MCP_PORT(optional, HTTP mode): TCP port (default3000).ENABLE_DNS_REBINDING_PROTECTION(optional, HTTP mode): defaults totrue; set tofalseto disable host allow‑list checks.ALLOWED_HOSTS(optional, HTTP mode): comma-separated list of hosts allowed when DNS rebinding protection is enabled. Defaults include localhost and 127.0.0.1 with/without port.CHUNK_SIZE(optional): maximum characters per chunk before embedding (default 2400, roughly 800 tokens depending on tokenizer/model). Larger values reduce total embeddings (faster build, less memory) but can blur fine-grained matches. Typical ranges:- 2100‑2700 (roughly 700‑900 tokens; balanced default)
- 3000‑4200 (roughly 1000‑1400 tokens; large prose / long functions; fewer vectors)
- 1200‑1800 (roughly 400‑600 tokens; fine‑grained code navigation; more vectors / memory)
CHUNK_OVERLAP(optional): trailing characters carried into the next chunk (default 400, roughly 120 tokens or about 15% of the default chunk size). Recommended 10‑20% ofCHUNK_SIZE(for example 240‑540 whenCHUNK_SIZE=2400). Increase slightly (up to ~20‑25%) if you observe answers missing cross‑boundary context; decrease to speed up builds.
Safety caps: CHUNK_SIZE is clamped to 8000 and CHUNK_OVERLAP to 4000; if overlap >= size it's automatically reduced (logged) to preserve forward progress.
DOCS_PER_FILE(optional): maximum number of documents to store in a single JSON file when persisting the index (default 10000). This prevents JSON.stringify from creating excessively large strings that could cause memory issues. Lower values create more files but reduce memory pressure during save/load operations. Minimum value is 100.
Persistence & Incremental Reindexing
Set INDEX_STORE_PATH to enable a persisted index storing chunks + embeddings across multiple JSON files. On startup:
- If the manifest file exists (
.manifest.json) and its metadata (model name, chunk size, overlap) matches, the index is loaded from the data files referenced in the manifest. - The repository is rescanned; removed files' chunks are discarded, and new or size‑changed files are re‑chunked & re‑embedded.
- The merged index is saved back to disk (cold build path also persists when configured).
The manifest file contains metadata about the index (version, chunk parameters, model name, timestamp) and a list of all data files (.part####.json) that comprise the full index.
Benefits:
- Dramatically faster warm starts for large repositories.
- Avoids re‑embedding unchanged content.
Current limita
…
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Daniel-Barta
- Source: Daniel-Barta/mcp-rag-server
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.