Mmcp.market

Loki Mode MCP server

by asklokesh·io.github.asklokesh/loki-mode·v9.50.1

Autonomous spec-to-product coding-agent CLI with an MCP server exposing 36 tools over stdio.

B77/100grade B
What users say
No reviews yet
Be the first
Safety scan
B77/100

full report

Adoption
Established

1.1k stars4.8k downloads/wk

Reviews

Write one

Nobody has reviewed Loki Mode yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Loki Mode tools (43, 5 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • _to_threadwrite action

    Run a blocking callable off the event loop.

  • bashwrite action

    Run a bash command in a persistent shell. State (cwd, env vars) persists across calls.

  • edit

    Replace old_string with new_string in a file. old_string must be unique unless replace_all.

  • glob

    Match files under the workdir against a glob pattern. Results are mtime-sorted, newest first.

  • grep

    Search file contents for a regex. Uses ripgrep if available, otherwise a built-in walker.

  • loki_agent_metrics

    Get agent metrics including token usage, task completion rates, and timing.

  • loki_checkpoint_restore

    List available checkpoints or restore project state from a specific checkpoint.

  • loki_code_search

    Search the loki-mode codebase semantically.

  • loki_code_search_stats

    Get statistics about the code search index.

  • loki_complete_task

    Declare that the current PRD / task is complete.

  • loki_consolidate_memorywrite action

    Run memory consolidation to extract patterns from recent episodes.

  • loki_counter_evidence_template

    Generate a counter-evidence file template for the given iteration.

  • loki_findings

    Read structured code-review findings for a given iteration.

  • loki_get_co_changes

    Find files that frequently change together with a given file.

  • loki_get_doc_coverage

    Get documentation coverage status for the project.

  • loki_get_hotspots

    Get the most frequently changed files in the repository.

  • loki_graph_query

    Answer a codebase question from a knowledge graph instead of reading files.

  • loki_learnings

    Read recent learnings (newest first) from relevant-learnings.json.

  • loki_memory_capture_session_summary

    v7.7.18 capture wedge: store an episode for the current agent session.

  • loki_memory_redact

    Redact memory versions in the managed-agents store whose content matches a regex.

  • loki_memory_retrieve
  • loki_memory_store_pattern

    Store a new semantic pattern learned during this session.

  • loki_metrics_efficiency

    Get efficiency metrics for the current session.

  • loki_project_status

    Get the current project status including RARV cycle state, agent activity, and task progress.

  • loki_quality_report

    Get quality gate results including blind review scores, council verdicts, and test coverage.

  • loki_start_project

    Start a new Loki Mode project from a PRD.

  • loki_state_get

    Get the current Loki Mode state including phase, metrics, and status.

  • loki_task_queue_add

    Add a new task to the Loki Mode task queue.

  • loki_task_queue_list

    List all tasks in the Loki Mode task queue.

  • loki_task_queue_updatewrite action

    Update a task's status or priority.

  • loki_verify_fast

    Verify code deterministically in milliseconds. No model call, no network.

  • lsp_check_exists

    Cheap existence check for a symbol in the current workspace.

  • lsp_find_definition_by_name

    Find where a named symbol is defined, without needing a file position upfront. Convenience wrapper: runs workspace/symbol then returns the first result's location.

  • lsp_find_references

    Find references to the symbol at the given file / line / character.

  • lsp_get_diagnostics

    Return current LSP diagnostics (errors + warnings) for a file.

  • lsp_go_to_definition

    Resolve the definition location for the symbol at file / line / character.

  • lsp_symbol_at_position

    Return the hover / symbol info at the given file / line / character. Uses LSP `textDocument/hover` which returns a `MarkupContent` plus an optional range.

  • lsp_workspace_symbols

    Fuzzy-search symbols across the entire workspace.

  • mem_get

    Fetch full details for one or more memory entries by ID.

  • mem_search

    Search memory using full-text search (FTS5).

  • mem_timeline

    Get chronological context from memory timeline.

  • read

    Read a UTF-8 text file relative to the workdir.

  • writewrite action

    Write a UTF-8 text file relative to the workdir, creating parent directories as needed.

Public scan report

scanner v0.1.9 · 2026-09-19 · same rubric, same numbers if you re-run it

2 medium
  • Code scan482 source files scanned15/25
  • Live reliabilityno gateway calls yet and no remote to proben/a
  • Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 4 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • mediumeval / new Function usedexec.eval
    autonomy/run.sh: … # v7.5.8: Strict whitelist before eval (mirrors app-runner.sh # …
  • mediumsubprocess with shell=Trueexec.shell-true
    web-app/server.py: … # Start backend process (uses shell=True because command contains 'cd ...') …
Overall 77/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Grade history

  • 2026-09-19restoreCBscore 77: eval / new Function used; subprocess with shell=True
  • 2026-09-19restoreDCscore 58: Whole environment serialized (possible credential exfil); eval / new Function used; subprocess with shell=True
  • 2026-09-19restoreFDscore 54: Whole environment serialized (possible credential exfil); curl | sh in a script; eval / new Function used

Install directly

Runs npx -y loki-mode on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add loki-mode -- npx -y loki-mode
Add to Cursor

Loki Mode: common questions

Is Loki Mode MCP server safe?
Mostly: it is graded B (77/100). Read the Loki Mode safety report
How do I install Loki Mode?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Loki Mode need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Loki Mode maintained?
The last commit was 4 days ago (2026-09-15). The latest release is v9.50.1.
What can I use instead of Loki Mode?
Servers from other publishers that do the same job: Releases MCP server, AutoID Product Catalog & Support MCP server and Cra Annex Ii Docs Lint MCP server. Compare all Loki Mode alternatives.

Alternatives to Loki Mode

Same job from other publishers: the closest match first, then the best rated.

All Loki Mode alternatives →
  • Releases
    An agent-friendly API for product changelogs. A unified registry via CLI, API, or MCP.
    A
  • AutoID Product Catalog & Support
    Read-only AutoID Romania MCP for product search, live stock/prices, specs, and technical support.
    A
  • Cra Annex Ii Docs Lint
    19 rules over the user documentation that ships with your product: support-period end date, vulnerab
    A
  • Shopware
    Query and safely manage a Shopware 6 shop: products, orders, customers, stock, audits, reports.
    B
  • HasData Walmart
    Walmart search, product pages and customer reviews on walmart.com and walmart.ca, as JSON.
    A

More from asklokesh