Skim MCP server
io.github.helloderekg/skim-mcp·v0.1.1Lossless skim-then-expand reading of big files, repos, and command output with far fewer tokens
0 stars15 downloads/wk
Reviews
Write oneNobody has reviewed Skim yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Skim tools (6, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
skim_expandReturn exact, verbatim source lines for one or more anchor ids from a skim_open result.
skim_openOpen a large file and return a compact skeleton + expandable anchor ids (not the full text).
skim_patchwrite actionReplace exactly one anchored span (or literal "L<start>-<end>" range) of a skimmed file on disk.
skim_repoBuild a LOSSLESS, ranked, token-budgeted map of a whole repo/directory.
skim_runwrite actionRun a shell command and return a COMPACT, expandable view of its output instead of the full dump.
skim_searchFind which anchors/lines contain `query` (case-insensitive) without reading the whole file.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- Code scan23 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 85 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Skim compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 75% of 48,255 servers
- Tools
- 6
- the typical server has 7
- Tools that change things
- 33%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 15
- more than 4% of 12,191 servers with a package
What its tools let an agent do: 4 read · 2 change
Install Skim in Claude Code, Cursor or VS Code
claude mcp add skim-mcp -- uvx skim-mcp
What the publisher says
From the Skim repository's README, as published. We do not edit it. Read it on GitHub
skim
Token-efficient skim-then-expand I/O for agentic models (Claude Code / desktop Claude).
Independent community project — not affiliated with, endorsed by, or sponsored by Anthropic.
No telemetry; runs entirely on your machine. See Trademarks, privacy & license.
Instead of reading a whole large file into context, the model calls skimopen(path) and gets a compact skeleton — structure, signatures, and (for logs/data) preserved critical values like ids, numbers, dates, and error codes — plus anchor ids. It reads the skeleton cheaply, then calls skimexpand(handle, anchors=[...]) to pull only the exact spans it needs, verbatim and lossless.
Compression is lazy, not lossy: nothing is paraphrased or destroyed, only deferred. Expansion is always one call away — which is what makes it safe for a closed model that can't ingest latent vectors.
What it does that other tools don't
The mainstream tools are lossy in context — repo-maps and --compress drop function bodies; summarizers and compression models paraphrase. The closest neighbors either cover code only, or show the model a transformed view and keep originals in a side cache. skim's line is stricter: whatever lands in context is verbatim source, and everything not shown is one anchored expand away — an agent can edit code from what it read without re-reading. That holds everywhere:
are promoted into the skeleton, never silently dropped) and dedup of repeated blocks.
- Files — Python (ast) + ~17 languages (tree-sitter); bodies folded, one expand away.
- Whole repos — skim_repo builds a ranked, token-budgeted map; expand exact code from any file.
- Command output — skim_run compresses verbose test / build / log output, fully recoverable.
- Data & logs — a generic path with a retention guarantee (ids, numbers, error codes, negations
See DESIGN.md for the architecture and verified prior-art positioning.
Falsifiable, not claimed
A reduction percentage is marketing until you can check it. skim ships the checker:
uv run skim-verify path/to/your/gnarliest_file.py # any file at all; exit code tells CIFive invariants, verified on your files, locally: every non-blank line recoverable, expands byte-exact, anchors in-bounds, reconstruction equal to the decoded file, deterministic output. The test suite enforces the same contract with Hypothesis fuzzing on every path; a reproducible FAIL on any readable file is a bug — please report it. Summarize-first tools cannot ship this command, because for them the equivalent check fails by design.
The cost-vs-correctness question has its own open yardstick — eval/ACCURACY.md prices every eval question under a full read vs skim (including the rows where skim loses), and any other context tool can be scored under the same protocol.
Built to be audited
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Skim: common questions
- Is Skim MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Skim safety report
- How do I install Skim?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Skim need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Skim maintained?
- The last commit was 123 days ago (2026-07-03). The latest release is v0.1.1.
- What can I use instead of Skim?
- Servers from other publishers that do the same job: Codebase Memory MCP server, Desktop Commander MCP server and Ouroboros MCP server.
- How does Skim compare with other MCP servers?
- safety score 88/100 (higher than 75% of 48,255 servers); tools 6 (the typical server has 7); tools that change things 33% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Skim
Same job from other publishers: the closest match first, then the best rated.
- Codebase MemoryCodebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.not reviewedWidely usedC
- Desktop CommanderMCP server for terminal commands, file operations, and process managementnot reviewedWidely usedC
- OuroborosPins an acceptance spec; the verify command and expected output never enter the success contract.not reviewedWidely usedC
- SSH ManagerSSH for AI agents: commands, files, backups and health, with approval, a vault and an audit trailnot reviewedEstablishedA
TraceCode graph MCP: 81 languages, 91 frameworks, 72.7% fewer PR-review tokens, comprehension at paritynot reviewedEstablishedA