OpenGrok MCP Server
io.github.IcyHot09/opengrok-mcp-server·v9.6.0·9 starsMCP server bridging OpenGrok search engine with AI for instant context across massive codebases.
9 stars120 downloads/wk
Reviews
Write oneNobody has reviewed OpenGrok MCP Server yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
OpenGrok MCP Server tools (31, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
opengrok_apiReturn the full Code Mode API specification.
opengrok_batch_searchopengrok_blameopengrok_browse_directoryopengrok_call_graphopengrok_dependency_mapopengrok_executewrite actionExecute JavaScript against the OpenGrok API (see opengrok_api for available methods)
opengrok_find_fileopengrok_get_all_matchesopengrok_get_compile_infoopengrok_get_download_urlopengrok_get_file_annotateopengrok_get_file_contentopengrok_get_file_diffopengrok_get_file_historyopengrok_get_file_history_with_filesopengrok_get_file_symbolsopengrok_get_project_repositoriesopengrok_get_suggest_popularityopengrok_get_symbol_contextopengrok_index_healthopengrok_list_groupsopengrok_list_projectsopengrok_memory_statusShow current memory bank file sizes and modification times.
opengrok_read_memoryRead active-task.md or investigation-log.md from the memory bank.
opengrok_search_and_readopengrok_search_codeProject name
opengrok_search_patternopengrok_search_suggestopengrok_update_memorywrite actionWrite or append to active-task.md or investigation-log.md.
opengrok_what_changed
Public scan report
scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it
- Code scan4 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 20 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumeval / new Function used
exec.evalout/server/main.js: …&&(A=this.opts.code.process(A,e));let g=new Function(`${cu.default.self}`,`${cu.default.scope…
How OpenGrok MCP Server compares
Against every graded Web search MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 75/100
- higher than 45% of 3,470 Web search servers
- Tools
- 31
- the typical Web search server has 5
- Tools that change things
- 6%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 9
- more than 85% of 1,786 Web search servers
- Downloads a week
- 120
- more than 61% of 827 Web search servers with a package
What its tools let an agent do: 31 create
Install OpenGrok MCP Server in Claude Code, Cursor or VS Code
Runs npx -y opengrok-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add opengrok-mcp-server -- npx -y opengrok-mcp-server
What the publisher says
From the OpenGrok MCP Server repository's README, as published. We do not edit it. Read it on GitHub
OpenGrok MCP Server
Code intelligence for any OpenGrok-indexed codebase — search, read, blame, symbol navigation, diffs, commit history, call graphs, dependency maps, and guided investigation. Optimized for token efficiency through Code Mode and AST-aware code reads.
Quick Start
Option 1 — VS Code Extension
Install OpenGrok MCP from the VS Code Marketplace, or search "OpenGrok" in the Extensions panel. The configuration panel opens on first launch — enter your OpenGrok endpoint, username, and password, then click Save Settings and reload when prompted.
The extension provides a visual configuration UI and manages the MCP server process automatically. No Python, external Node.js install, or manual environment setup required.
Option 2 — npm / npx CLI
npm install -g opengrok-mcp-server
opengrok-mcp setup # interactive wizard: URL, credentials, MCP client registrationOr run without installing:
npx opengrok-mcp-server setupOther CLI commands:
opengrok-mcp status # health check: validates connectivity and detects installed MCP clients
opengrok-mcp setup --test # test the stored connection without the wizard
opengrok-mcp setup --set contextBudget=generous # update one stored setting non-interactively
opengrok-mcp export-audit --format json --output audit.jsonl # export the audit log
opengrok-mcp version # print version and exit
opengrok-mcp help # show all commandsWorks with any MCP-compatible client (CLI or IDE). See MCP_CLIENTS.md for config format and troubleshooting.
Credentials are stored in the OS keychain (macOS Keychain, Windows Credential Manager, Linux libsecret) with an AES-256-GCM encrypted file fallback for headless environments.
[!TIP]
Automatic Updates — The extension checks GitHub for new releases once per 24 hours and notifies you when one is available. Use OpenGrok: Check for Updates to check on demand.
The Problem
Engineers working in large codebases face a specific gap when using AI coding assistants. The model's context window contains the file currently open, the conversation, and whatever has been manually shared — but a production codebase has structure, history, and cross-module relationships that exist entirely outside that window.
A symbol defined in one module and called from seventy others. A function whose behavior only becomes clear from the three commits that shaped it. An include chain stretching across a dozen directories. A call graph showing which components depend on a service before it gets refactored.
Without access to the code index, the model fills these gaps by guessing: it fabricates file paths, invents function signatures, misattributes changes to authors. The model is not wrong because it is unintelligent — it is wrong because it is isolated.
OpenGrok already solves this for human engineers. It indexes source in dozens of programming languages, maintains a full-text index across committed history, and exposes definition lookups, reference graphs, blame, directory traversal, and file history through a REST API. The problem was that AI tools had no way to reach it.
How It Works
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-09-19restoreC → Bscore 75: eval / new Function used
OpenGrok MCP Server: common questions
- Is OpenGrok MCP Server safe?
- Mostly: it is graded B (75/100). Read the OpenGrok MCP Server safety report
- How do I install OpenGrok MCP Server?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does OpenGrok MCP Server need an API key?
- Yes. The registry entry asks for
OPENGROK_PASSWORD. - Is OpenGrok MCP Server maintained?
- The last commit was 40 days ago (2026-09-25). The latest release is v9.6.0.
- What can I use instead of OpenGrok MCP Server?
- Servers from other publishers that do the same job: Free Search MCP server, Repomix MCP server and Socraticode MCP server.
- How does OpenGrok MCP Server compare with other Web search MCP servers?
- safety score 75/100 (higher than 45% of 3,470 Web search servers); tools 31 (the typical Web search server has 5); tools that change things 6% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to OpenGrok MCP Server
Same job from other publishers: the closest match first, then the best rated.
Free SearchNo-API-key web search, page fetching and document reading across many engines. Local-first.not reviewedEstablishedB- RepomixPack local or remote codebases into AI-friendly files that LLMs and coding agents can read or searchnot reviewedWidely usedA
- SocraticodeMCP server for enterprise local codebase indexing, semantic search, and code dependency graphs.not reviewedEstablishedB
- JshookmcpSearch-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.not reviewedEstablishedC
- Sui Knowledge Base (kapa.ai)Semantic search across Sui documentation and knowledge sources, powered by kapa.ainot reviewedEstablishedA