loci MCP server
io.github.3M1RY33T/loci·v0.6.0·1 starsScoped memory for coding agents: picks the right project, answers in scope, or abstains.
1 stars37 downloads/wk
Reviews
Write oneNobody has reviewed loci yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
loci tools (1)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
scopesList indexed projects with their sizes.
Public scan report
scanner v0.1.10 · 2026-10-14 · same rubric, same numbers if you re-run it
- Code scan34 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 34 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How loci compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 75% of 48,243 servers
- Tools
- 1
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 65% of 28,706 servers
- Downloads a week
- 37
- more than 26% of 12,306 servers with a package
What its tools let an agent do: 1 read
Install loci in Claude Code, Cursor or VS Code
claude mcp add loci -- uvx loci-mem
What the publisher says
From the loci repository's README, as published. We do not edit it. Read it on GitHub
loci
<!-- mcp-name: io.github.3M1RY33T/loci -->
Scoped memory for coding agents. A router in front of two stores.
question ──▶ router ──▶ ┌── structure store what calls what
(no LLM) └── episode store what happened and why
└─▶ merged, cited answer │
or ABSTAIN ────────────┘Knowledge graphs hold structure but no prose, so they cannot answer why did the cookie get dropped. Verbatim-recall systems hold prose but no call graphs, so they cannot answer what calls runagentturn. Both make you name the namespace when you write.
loci decides the scope when you read. One question path serves "how does auth work here" and "have I solved this in any project" — only the size of the scope set changes.
The shape, in one picture
A street of independent shops. Each shop is one project — its own stock, its own books, nothing pooled in a shared warehouse. Each keeps two ledgers: what calls what, and what happened and why. They are read together or not at all.
Shops wear overlapping badges — yours, this client's, that vendor's, this monorepo's. A badge can cover shops at opposite ends of the street, which is why they are labels rather than a hierarchy.
You never walk the street yourself. You ask the dispatcher, who knows only which uncommon words are stocked where. They send you into at most three shops, or say nobody here carries that and name who might.
Each shop also hangs a signboard naming what it is — repository, package, command — and keeps a list of what it reaches for. Reading one against the other is how the street answers which of my shops buys from another, which no amount of asking the dispatcher ever could: that question is about the road between two shops, and the dispatcher only knows what is stocked inside them.
One thing the street still lacks: aisles inside a shop, so a word found in a test fixture does not count like the same word in shipped code.
The problem it solves
Put every project in one index and the largest one wins regardless of the question. Measured against a merged graph of ten real repositories:
That third row is the trap. Merged retrieval looks excellent whenever the answer happens to live in the largest corpus and collapses when it does not. It is the same failure in both directions, visible in only one.
Install
The distribution is loci-mem; the command, the import and the project are all loci. PyPI's loci is an unrelated outlier-detection package abandoned in 2018 — the same split as python-dateutil installing as dateutil.
pipx install loci-mem # routing + lexical search, one dependency
pipx install 'loci-mem[all]' # + graphify, local embeddings, MCP serverThe base install pulls numpy, and nothing else. Routing, BM25 and the char-gram matrix are a compiled Rust extension as of 0.6.0, so scikit-learn (and scipy behind it), rank-bm25 and joblib are gone. No torch, no vector database, no model download unless you ask for one.
Wheels are published for macOS, Linux and Windows; installing from the sdist builds from source and needs a Rust toolchain (1.75+).
Quickstart
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
loci: common questions
- Is loci MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the loci safety report
- How do I install loci?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does loci need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is loci maintained?
- The last commit was 56 days ago (2026-09-11). The latest release is v0.6.0.
- What can I use instead of loci?
- Servers from other publishers that do the same job: Deja Vu MCP server and Memorix MCP server.
- How does loci compare with other MCP servers?
- safety score 88/100 (higher than 75% of 48,243 servers); tools 1 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to loci
Same job from other publishers: the closest match first, then the best rated.