OpenGrok MCP Server
MCP server bridging OpenGrok search engine with AI for instant context across massive codebases.
C57/100grade C
Adoption
Growing
6 stars
Reviews
Write oneNobody has reviewed OpenGrok MCP Server yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
OpenGrok MCP Server tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it
1 high1 medium
- Code scan4 source files scanned8/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 3 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (2)
- highShell command built from a string (injection risk)
exec.shell-concatout/server/main.js: …new Av(t?.location??":memory:"),this.#n.exec(` PRAGMA journal_mode = WAL; PRAGMA synchronous = NORMAL; PRAGMA temp_store = memory; PRAGMA optimize; CREATE TABLE IF NOT EXISTS cacheInterceptorV${Nn} ( -- Data specific to us id INTEGER PRIMARY KEY AUTOINCREMENT, url TEXT NOT NULL, method TEXT NOT NULL, -- Data returned to the interceptor body BUF NULL, deleteAt INTEGER NOT NULL, statusCode INTEGER NOT NULL, statusMessage TEXT NOT NULL, headers TEXT NULL, cacheControlDirectives TEXT NULL, etag TEXT NULL, vary TEXT NULL, cachedAt INTEGER NOT NULL, staleAt INTEGER NOT NULL ); CREATE INDEX IF NOT EXISTS idx_cacheInterceptorV${Nn}_getValuesQuery ON cacheInterceptorV${Nn}(url, method, deleteAt); CREATE INDEX IF NOT EXISTS idx_cacheInterceptorV${Nn}_deleteByUrlQuery ON cacheInterceptorV${Nn}(deleteAt); `),this.#r=this.#n.pr… - mediumeval / new Function used
exec.evalout/server/main.js: …&&(A=this.opts.code.process(A,e));let g=new Function(`${cu.default.self}`,`${cu.default.scope…
Overall 57/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Install directly
Runs npx -y opengrok-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add opengrok-mcp-server -- npx -y opengrok-mcp-server
OpenGrok MCP Server: common questions
- Is OpenGrok MCP Server safe?
- With care: it is graded C, so read the findings first (57/100). Read the OpenGrok MCP Server safety report
- How do I install OpenGrok MCP Server?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does OpenGrok MCP Server need an API key?
- Yes. The registry entry asks for
OPENGROK_PASSWORD. - Is OpenGrok MCP Server maintained?
- The last commit was 3 days ago (2026-09-16). The latest release is v9.6.0.
- What can I use instead of OpenGrok MCP Server?
- Servers from other publishers that do the same job: GEO Tracker by DigestSEO MCP server, Socraticode MCP server and WebSearch MCP Server. Compare all OpenGrok MCP Server alternatives.
Alternatives to OpenGrok MCP Server
Same job from other publishers: the closest match first, then the best rated.
GEO Tracker by DigestSEOTrack brand citations across five AI search engines. Free OSS; optional EUR 99 client-ready audit.not reviewedEstablishedA- SocraticodeMCP server for enterprise local codebase indexing, semantic search, and code dependency graphs.not reviewedEstablishedC
- WebSearch MCP ServerZero-API-key MCP search server: multi-engine web/academic search, PDF parsing, secure web fetchnot reviewedGrowingA
- My WebsearchMyWebSearch - multi-engine web search MCP server, CLI and local daemon. No API keys required.not reviewedGrowingB
- PyEuropePMCSearch and analyse scientific literature across Europe PMC, PubMed, arXiv, and ClinicalTrials.govnot reviewedGrowingA
