MCP.Market

Myc MCP server

by aistastudio·io.github.aistastudio/myc·v0.3.13·14 stars

Task queue, decisions and memory for coding agents. Local SQLite, no network. Requires Bun.

C66/100grade C
What users say
No reviews yet
Be the first
Safety scan
C66/100

full report

Adoption
Established

14 stars1.1k downloads/wk

Reviews

Write one

Nobody has reviewed Myc yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Myc tools (13, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • myc_callers

    Who calls a symbol (in) or what it calls (out): one edge per caller,

  • myc_code_grep

    Every occurrence of a string in the repo's files, with its owner (function, class) \u2014

  • myc_code_map

    Map of an unfamiliar repo: directories by weight, their hub symbols and who depends on whom by import. One call to get oriented, then myc_code_search and myc_callers.

  • myc_code_search

    Find code by a question in your own words when you don't know the name: files by rank

  • myc_code_symbol

    Where a symbol with this exact name is defined: path:span, kind, export, mention

  • myc_linkwrite action

    Create or remove a link between nodes: blocks/blocked-by (dependency), relates-to, duplicates, supersedes, contradicts, replies-to, derived-from,

  • myc_prime

    Project start packet: ready queue, work in progress, core and recent decisions.

  • myc_ready

    Tasks with no open blockers \u2014 what you can take right now.

  • myc_remember

    Record a conclusion, decision or fact so later sessions know it. One claim at a time, concrete, with its reason. No raw code or secrets. A contradiction gets flagged, it does not overwrite the old one.

  • myc_show

    Full content of one or more nodes at once: body, deps, links, code anchors. Pass the list of ids in one call, not one by one.

  • myc_skeleton

    A file's API instead of reading it whole: declarations with signatures and spans, nesting by indent, and how many times cheaper this is than the file. Then read

  • myc_updatewrite action

    Every task state change in one tool: claim, release, close, reopen, assign, priority, note, extend; confirm/reject a compaction candidate.

  • no-pass

    do not hand the input to any foreign statusLine

Public scan report

scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it

3 medium
  • Code scan6 source files scanned10/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10

Findings (3)

  • mediumnpm install lifecycle script presentinstall.script
  • mediumeval / new Function usedexec.eval
    dist/myc.js: …gs}) => { ${body} };`;ASM_CONSTS[start]=eval(func)}if("__start_em_asm"in moduleExport…
  • mediumnpm install lifecycle script presentinstall.script
    package.json: …": "bin/myc.js" }, "scripts": { "postinstall": "node bin/preflight.js" }, "engines…
Overall 66/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Myc compares

Against every graded Databases MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
66/100
higher than 18% of 802 Databases servers
Tools
13
the typical Databases server has 8
Tools that change things
15%
typical: 10%. Fewer write tools means less an agent can break
GitHub stars
14
more than 81% of 602 Databases servers
Downloads a week
1,150
more than 91% of 328 Databases servers with a package

What its tools let an agent do: 11 read · 2 change

Install Myc in Claude Code, Cursor or VS Code

Runs npx -y @aistastudio/myc on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add myc -- npx -y @aistastudio/myc
Add to Cursor

What the publisher says

From the Myc repository's README, as published. We do not edit it. Read it on GitHub

myc

A local, fast task-and-memory layer for coding agents: a task queue, an oplog of facts and decisions, hybrid (lexical + vector) search over the project's memory, and a built-in code index — with no network calls of its own and no mandatory LLM key. The network is reached only when you ask: myc models fetch, myc code fetch, myc version --check (or MYCUPDATECHECK=1, a background version check at most once a day from init and wire).

Agents forget. myc is the part that doesn't: decisions survive context compaction, work survives process death, and both survive being moved between machines through plain git.

Design docs live in docs/design/ (start with 00-brief.md); the measurements quoted below are reproducible from bench/ and scripts/.

Site: — every capability with the release it arrived in and a command that shows it, the roadmap, and the measurements as charts, in English and Russian, with the command that reproduces each number printed next to it. It is the one source of numbers: bun run site/build.ts checks every figure on the site against the measurement artefacts in this repository, the figures in this README and in the Russian one against the site's site/measurements.json, and every myc command and flag on the site and in both READMEs against this build's --help; a mismatch fails the build.

Requires Bun — this is not fine print

The runtime is bound to bun:sqlite (no native bindings on the Node side). It will not start on plain Node.js or Deno. Bun ≥ 1.3.0 is required and pinned in package.json → engines.bun.

SQLite ≥ 3.44.0. Below 3.44.0, FTS5 cannot be written from triggers under trustedschema = OFF, so every write fails. On Linux, Bun links its own SQLite (3.53.0 in Bun 1.3.14). On macOS, Bun uses the system SQLite — 3.43.2 on macOS 14 — so the package ships its own: vendor/sqlite/libmyc-sqlite3.dylib, SQLite 3.53.4 built from the official amalgamation for arm64 and x8664 (scripts/build-sqlite.ts), chosen before anything else except an explicit MYCSQLITE=/path/to/libsqlite3.dylib. If the SQLite in use is still below 3.44.0 — a broken install, or MYCSQLITE pointing at an old library — every command, myc init included, refuses with precond.sqliteunsupported and says what to do, instead of creating a workspace it cannot write to. From 3.44.0 up to 3.51.2 myc works but warns (WARN degraded.sqliteold): parallel processes may run a background job more than once; on Linux the cure is bun upgrade. myc doctor names the SQLite in use and where it came from.

Install Bun: https://bun.sh

Install

Installation is one command:

bun install -g @aistastudio/myc   # 5.06 MB compressed, 15.63 MB unpacked, 16 files; no models pulled
myc --version                     # myc 0.3.14 (schema 1)

It runs on macOS and Linux. On Windows, use WSL and install Bun and myc inside it: the myc launcher does not start in cmd or PowerShell, and an npm install on Windows says so.

The embedding model is not downloaded during install. Semantic search is opt-in and explicit: myc models fetch (129 MB, ~7 s). Until then search is lexical and says so on every answer (WARN degraded.embeddings). The grammars for the code index are fetched the same way, once: myc code fetch.

To run the newest code instead of the published release, build from source:

git clone https://github.com/aistastudio/myc && cd myc
bun install
bun run build          # produces a single binary: dist/myc
./dist/myc --version

Put the binary somewhere myc wire can find it — MYCBIN, nodemodules/.bin, ~/.myc/bin/myc, or PATH. If it can't, wire says so out loud instead of writing a config that silently won't start.

Quick start

Two commands set a project up; the rest is the loop an agent lives in. (From a source build, ./dist/myc instead of myc.)

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Grade history

  • 2026-09-19restoreD → Cscore 66: npm install lifecycle script present; eval / new Function used; npm install lifecycle script present

Myc: common questions

Is Myc MCP server safe?
With care: it is graded C, so read the findings first (66/100). Read the Myc safety report
How do I install Myc?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Myc need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Myc maintained?
The last commit was 21 days ago (2026-10-14). The latest release is v0.3.13.
What can I use instead of Myc?
Servers from other publishers that do the same job: open-memex MCP server, Graphmem MCP server and SAME - Stateless Agent Memory Engine MCP server.
How does Myc compare with other Databases MCP servers?
safety score 66/100 (higher than 18% of 802 Databases servers); tools 13 (the typical Databases server has 8); tools that change things 15% (typical: 10%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Myc

Same job from other publishers: the closest match first, then the best rated.

  • open-memex
    Local-first memory for AI coding agents — Markdown + SQLite FTS5, shared across editors via MCP.
    B
  • Graphmem
    Shared local memory for coding agents: SQLite, semantic recall, linked entities, code navigation.
    A
  • SAME - Stateless Agent Memory Engine
    Persistent memory for AI coding agents. Local-first SQLite + vector search. 17 MCP tools.
    B
  • skillmem
    Skill memory for coding agents: learn, recall, reinforce, decay. Local SQLite, no API key.
    A
  • remem-mcp — Local-first MCP Memory + CodeGraph + Wiki
    Local-first memory for AI coding agents. Memory + CodeGraph + Wiki in one SQLite file.
    B