Distil MCP server
io.github.dshakes/distil·v1.30.0·16 starsReversibly compress tool outputs to recoverable handles; expand to exact original bytes on demand.
16 stars
Reviews
Write oneNobody has reviewed Distil yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Distil tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it
- Code scan134 source files scanned15/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (2)
- mediumsubprocess with shell=True
exec.shell-truedistil_llm-1.30.0/distil/cli.py: …_proxies() rc = subprocess.run(cmd, shell=True).returncode if rc == 0: pri…
- mediumeval / new Function used
exec.evaldistil_llm-1.30.0/distil/codec/train_transformer.py: …}") # --- evaluation --- model.eval() tp = fp = fn = tn = 0 with tor…
How Distil compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 77/100
- higher than 50% of 48,255 servers
- GitHub stars
- 16
- more than 90% of 28,688 servers
Install Distil in Claude Code, Cursor or VS Code
claude mcp add distil -- uvx distil-llm
What the publisher says
From the Distil repository's README, as published. We do not edit it. Read it on GitHub
<!-- mcp-name: io.github.dshakes/distil -->
Something is rewriting your agent's context.Distil measures what it cost you.
Your provider now edits the context window for you — clearing old tool results, summarizing history — by default, server-side, with no report of what changed.Distil is the instrument that answers the only question that matters: did the agent still do the same thing?
We pointed it at the providers. Anthropic's default context-editing policy (keep=3) changed the agent's next action in 95–100% of cases, against a 2.5% A/A noise floor. Keeping the 3 most recent tool uses didn't lower the change rate at all — it turned stalling into acting on missing facts. OpenAI's compaction changed 12.5–20%. Pre-registered, replicated, n=40 per run.
Read the study → · rerun it on your own config
Distil also compresses — the tool output, logs, and history your agent re-sends every turn, reversibly.It's the one context operation that ships with its own certificate, its own adversarial gate, and a number it is willing to refuse to print.
The 60-second version
Compression that cannot be checked is a guess about your agent's behaviour.Distil is built so every part of it is checkable, and so the checks are allowed to come back no.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Distil: common questions
- Is Distil MCP server safe?
- Mostly: it is graded B (77/100). Read the Distil safety report
- How do I install Distil?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Distil need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Distil maintained?
- The last commit was 40 days ago (2026-09-24). The latest release is v1.30.0.
- How does Distil compare with other MCP servers?
- safety score 77/100 (higher than 50% of 48,255 servers); github stars 16 (more than 90% of 28,688 servers). Full comparison.