MCP.Market

loci MCP server

by 3M1RY33T·io.github.3M1RY33T/loci·v0.6.0·1 stars

Scoped memory for coding agents: picks the right project, answers in scope, or abstains.

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
New

1 stars37 downloads/wk

Reviews

Write one

Nobody has reviewed loci yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

loci tools (1)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • scopes

    List indexed projects with their sizes.

Public scan report

scanner v0.1.10 · 2026-10-14 · same rubric, same numbers if you re-run it

no findings
  • Code scan34 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 34 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How loci compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 75% of 48,243 servers
Tools
1
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 65% of 28,706 servers
Downloads a week
37
more than 26% of 12,306 servers with a package

What its tools let an agent do: 1 read

Install loci in Claude Code, Cursor or VS Code

claude mcp add loci -- uvx loci-mem
Add to Cursor

What the publisher says

From the loci repository's README, as published. We do not edit it. Read it on GitHub

loci

<!-- mcp-name: io.github.3M1RY33T/loci -->

Scoped memory for coding agents. A router in front of two stores.

question ──▶ router ──▶ ┌── structure store   what calls what
             (no LLM)   └── episode store     what happened and why
                        └─▶ merged, cited answer   │
                            or ABSTAIN ────────────┘

Knowledge graphs hold structure but no prose, so they cannot answer why did the cookie get dropped. Verbatim-recall systems hold prose but no call graphs, so they cannot answer what calls runagentturn. Both make you name the namespace when you write.

loci decides the scope when you read. One question path serves "how does auth work here" and "have I solved this in any project" — only the size of the scope set changes.

The shape, in one picture

A street of independent shops. Each shop is one project — its own stock, its own books, nothing pooled in a shared warehouse. Each keeps two ledgers: what calls what, and what happened and why. They are read together or not at all.

Shops wear overlapping badges — yours, this client's, that vendor's, this monorepo's. A badge can cover shops at opposite ends of the street, which is why they are labels rather than a hierarchy.

You never walk the street yourself. You ask the dispatcher, who knows only which uncommon words are stocked where. They send you into at most three shops, or say nobody here carries that and name who might.

Each shop also hangs a signboard naming what it is — repository, package, command — and keeps a list of what it reaches for. Reading one against the other is how the street answers which of my shops buys from another, which no amount of asking the dispatcher ever could: that question is about the road between two shops, and the dispatcher only knows what is stocked inside them.

One thing the street still lacks: aisles inside a shop, so a word found in a test fixture does not count like the same word in shipped code.

The problem it solves

Put every project in one index and the largest one wins regardless of the question. Measured against a merged graph of ten real repositories:

That third row is the trap. Merged retrieval looks excellent whenever the answer happens to live in the largest corpus and collapses when it does not. It is the same failure in both directions, visible in only one.

Install

The distribution is loci-mem; the command, the import and the project are all loci. PyPI's loci is an unrelated outlier-detection package abandoned in 2018 — the same split as python-dateutil installing as dateutil.

pipx install loci-mem                 # routing + lexical search, one dependency
pipx install 'loci-mem[all]'          # + graphify, local embeddings, MCP server

The base install pulls numpy, and nothing else. Routing, BM25 and the char-gram matrix are a compiled Rust extension as of 0.6.0, so scikit-learn (and scipy behind it), rank-bm25 and joblib are gone. No torch, no vector database, no model download unless you ask for one.

Wheels are published for macOS, Linux and Windows; installing from the sdist builds from source and needs a Rust toolchain (1.75+).

Quickstart

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

loci: common questions

Is loci MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the loci safety report
How do I install loci?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does loci need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is loci maintained?
The last commit was 56 days ago (2026-09-11). The latest release is v0.6.0.
What can I use instead of loci?
Servers from other publishers that do the same job: Deja Vu MCP server and Memorix MCP server.
How does loci compare with other MCP servers?
safety score 88/100 (higher than 75% of 48,243 servers); tools 1 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to loci

Same job from other publishers: the closest match first, then the best rated.

  • Deja Vu
    deja-vu: local memory over the session histories of forty-three coding agents.
    A
  • Memorix
    Local-first project memory with legacy MCP and 2026 discovery compatibility.
    B