my-pi MCP server
io.github.BoxBoxmari/my-pi·v0.1.0-alpha.2·2 starsLocal-first MCP runtime for coding agents with safe workspace access, AST/LSP navigation, and Git.
2 stars76 downloads/wk
Reviews
Write oneNobody has reviewed my-pi yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
my-pi tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it
- Code scan3 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 1 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumeval / new Function used
exec.evaldist/main.js: …urceCode, sch); const validate2 = new Function(`${names_1.default.self}`, `${names_1.de…
How my-pi compares
Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 85/100
- higher than 70% of 1,119 Developer tools servers
- GitHub stars
- 2
- more than 65% of 855 Developer tools servers
- Downloads a week
- 76
- more than 50% of 436 Developer tools servers with a package
Install my-pi in Claude Code, Cursor or VS Code
Runs npx -y @koonwang03/my-pi on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add my-pi -- npx -y @koonwang03/my-pi
What the publisher says
From the my-pi repository's README, as published. We do not edit it. Read it on GitHub
my-pi
Local-first MCP runtime for coding agents — safer workspace access without an unrestricted shell Bounded filesystem · content-preconditioned writes · Tree-Sitter AST search · LSP navigation · Git tooling
What is my-pi?
my-pi is a deterministic local coding capability runtime exposed through the official Model Context Protocol (MCP). It gives MCP-capable coding agents controlled access to a real workspace through explicit workspace authority, bounded reads, guarded writes, structural search, language-server intelligence, and Git operations.
It is aimed at developers who want agentic coding tools to understand and modify code without handing the agent a general-purpose shell or silently granting the current working directory.
Why use it?
- Local-first: source code and detailed workspace state remain on the host.
- Read-only by default: writes and language-server process startup require explicit trusted elevation.
- Safer mutation: writes can require SHA-256 content preconditions instead of blind overwrite semantics.
- Code-aware search: Tree-Sitter structural search across TypeScript, JavaScript, Python, Rust, and Go.
- Semantic navigation: LSP symbols, definitions, references, hover, and diagnostics for supported host language servers.
- Git-aware context: bounded status and diff operations with secret filtering and large-diff spillover.
- No secondary paid LLM dependency: the core runtime executes locally and does not select models or spawn agents.
Release channel: Alpha. The npm badge above is authoritative for the currently published package version. This repository may contain a newer release candidate before publication completes. Suitable for evaluation and controlled local development; review the security model before enabling the trusted profile.
Install in under a minute
Requires Node.js >=24.0.0 (Node 24 LTS is the normative runtime).
npm install -g @koonwang03/my-pi
my-pi-mcp --workspace /path/to/your/projectThe server starts read-only. For a workspace you explicitly trust:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
my-pi: common questions
- Is my-pi MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the my-pi safety report
- How do I install my-pi?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does my-pi need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is my-pi maintained?
- The last commit was 32 days ago (2026-10-03). The latest release is v0.1.0-alpha.2.
- What can I use instead of my-pi?
- Servers from other publishers that do the same job: Nexusmem MCP server, Agent Memory MCP server and Repowise MCP server. Compare all my-pi alternatives.
- How does my-pi compare with other Developer tools MCP servers?
- safety score 85/100 (higher than 70% of 1,119 Developer tools servers); github stars 2 (more than 65% of 855 Developer tools servers); downloads a week 76 (more than 50% of 436 Developer tools servers with a package). Full comparison.
Alternatives to my-pi
Same job from other publishers: the closest match first, then the best rated.
- NexusmemLocal-first memory for AI coding agents: shell history with exit codes, git diffs, docs, MCP.not reviewedGrowingA
- Agent MemoryGit-native project memory for AI coding agents: Markdown source of truth, reviewable, secret-safe.not reviewedGrowingA
RepowiseCodebase intelligence for AI coding agents — graph, git history, docs, decisions, code health.not reviewedEstablishedB- ForemergeCoordinate parallel coding agents, above Gitnot reviewedGrowingA
- komnetLets AI coding agents coordinate asynchronously through a private git repository. No server.not reviewedGrowingA