MCP.Market

OpenGrok MCP Server

by IcyHot09·io.github.IcyHot09/opengrok-mcp-server·v9.6.0·9 stars

MCP server bridging OpenGrok search engine with AI for instant context across massive codebases.

B75/100grade B
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
Growing

9 stars120 downloads/wk

Reviews

Write one

Nobody has reviewed OpenGrok MCP Server yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

OpenGrok MCP Server tools (31, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • opengrok_api

    Return the full Code Mode API specification.

  • opengrok_batch_search
  • opengrok_blame
  • opengrok_browse_directory
  • opengrok_call_graph
  • opengrok_dependency_map
  • opengrok_executewrite action

    Execute JavaScript against the OpenGrok API (see opengrok_api for available methods)

  • opengrok_find_file
  • opengrok_get_all_matches
  • opengrok_get_compile_info
  • opengrok_get_download_url
  • opengrok_get_file_annotate
  • opengrok_get_file_content
  • opengrok_get_file_diff
  • opengrok_get_file_history
  • opengrok_get_file_history_with_files
  • opengrok_get_file_symbols
  • opengrok_get_project_repositories
  • opengrok_get_suggest_popularity
  • opengrok_get_symbol_context
  • opengrok_index_health
  • opengrok_list_groups
  • opengrok_list_projects
  • opengrok_memory_status

    Show current memory bank file sizes and modification times.

  • opengrok_read_memory

    Read active-task.md or investigation-log.md from the memory bank.

  • opengrok_search_and_read
  • opengrok_search_code

    Project name

  • opengrok_search_pattern
  • opengrok_search_suggest
  • opengrok_update_memorywrite action

    Write or append to active-task.md or investigation-log.md.

  • opengrok_what_changed

Public scan report

scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it

1 medium
  • Code scan4 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 20 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • mediumeval / new Function usedexec.eval
    out/server/main.js: …&&(A=this.opts.code.process(A,e));let g=new Function(`${cu.default.self}`,`${cu.default.scope…
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How OpenGrok MCP Server compares

Against every graded Web search MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
75/100
higher than 45% of 3,470 Web search servers
Tools
31
the typical Web search server has 5
Tools that change things
6%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
9
more than 85% of 1,786 Web search servers
Downloads a week
120
more than 61% of 827 Web search servers with a package

What its tools let an agent do: 31 create

Install OpenGrok MCP Server in Claude Code, Cursor or VS Code

Runs npx -y opengrok-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add opengrok-mcp-server -- npx -y opengrok-mcp-server
Add to Cursor

What the publisher says

From the OpenGrok MCP Server repository's README, as published. We do not edit it. Read it on GitHub

OpenGrok MCP Server

Code intelligence for any OpenGrok-indexed codebase — search, read, blame, symbol navigation, diffs, commit history, call graphs, dependency maps, and guided investigation. Optimized for token efficiency through Code Mode and AST-aware code reads.

Quick Start

Option 1 — VS Code Extension

Install OpenGrok MCP from the VS Code Marketplace, or search "OpenGrok" in the Extensions panel. The configuration panel opens on first launch — enter your OpenGrok endpoint, username, and password, then click Save Settings and reload when prompted.

The extension provides a visual configuration UI and manages the MCP server process automatically. No Python, external Node.js install, or manual environment setup required.

Option 2 — npm / npx CLI

npm install -g opengrok-mcp-server
opengrok-mcp setup      # interactive wizard: URL, credentials, MCP client registration

Or run without installing:

npx opengrok-mcp-server setup

Other CLI commands:

opengrok-mcp status      # health check: validates connectivity and detects installed MCP clients
opengrok-mcp setup --test                     # test the stored connection without the wizard
opengrok-mcp setup --set contextBudget=generous  # update one stored setting non-interactively
opengrok-mcp export-audit --format json --output audit.jsonl  # export the audit log
opengrok-mcp version     # print version and exit
opengrok-mcp help        # show all commands

Works with any MCP-compatible client (CLI or IDE). See MCP_CLIENTS.md for config format and troubleshooting.

Credentials are stored in the OS keychain (macOS Keychain, Windows Credential Manager, Linux libsecret) with an AES-256-GCM encrypted file fallback for headless environments.

[!TIP]

Automatic Updates — The extension checks GitHub for new releases once per 24 hours and notifies you when one is available. Use OpenGrok: Check for Updates to check on demand.

The Problem

Engineers working in large codebases face a specific gap when using AI coding assistants. The model's context window contains the file currently open, the conversation, and whatever has been manually shared — but a production codebase has structure, history, and cross-module relationships that exist entirely outside that window.

A symbol defined in one module and called from seventy others. A function whose behavior only becomes clear from the three commits that shaped it. An include chain stretching across a dozen directories. A call graph showing which components depend on a service before it gets refactored.

Without access to the code index, the model fills these gaps by guessing: it fabricates file paths, invents function signatures, misattributes changes to authors. The model is not wrong because it is unintelligent — it is wrong because it is isolated.

OpenGrok already solves this for human engineers. It indexes source in dozens of programming languages, maintains a full-text index across committed history, and exposes definition lookups, reference graphs, blame, directory traversal, and file history through a REST API. The problem was that AI tools had no way to reach it.

How It Works

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Grade history

  • 2026-09-19restoreC → Bscore 75: eval / new Function used

OpenGrok MCP Server: common questions

Is OpenGrok MCP Server safe?
Mostly: it is graded B (75/100). Read the OpenGrok MCP Server safety report
How do I install OpenGrok MCP Server?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does OpenGrok MCP Server need an API key?
Yes. The registry entry asks for OPENGROK_PASSWORD.
Is OpenGrok MCP Server maintained?
The last commit was 40 days ago (2026-09-25). The latest release is v9.6.0.
What can I use instead of OpenGrok MCP Server?
Servers from other publishers that do the same job: Free Search MCP server, Repomix MCP server and Socraticode MCP server.
How does OpenGrok MCP Server compare with other Web search MCP servers?
safety score 75/100 (higher than 45% of 3,470 Web search servers); tools 31 (the typical Web search server has 5); tools that change things 6% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to OpenGrok MCP Server

Same job from other publishers: the closest match first, then the best rated.

  • Free Search
    No-API-key web search, page fetching and document reading across many engines. Local-first.
    B
  • Repomix
    Pack local or remote codebases into AI-friendly files that LLMs and coding agents can read or search
    A
  • Socraticode
    MCP server for enterprise local codebase indexing, semantic search, and code dependency graphs.
    B
  • Jshookmcp
    Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
    C
  • Sui Knowledge Base (kapa.ai)
    Semantic search across Sui documentation and knowledge sources, powered by kapa.ai
    A