Flameox MCP server
Bounded local runtime evidence from explicit artifacts and typed direct targets.
199 stars364 downloads/wk
Reviews
Write oneNobody has reviewed Flameox yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Flameox tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it
- Code scan105 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 3 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Flameox compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 95% of 48,255 servers
- GitHub stars
- 199
- more than 95% of 28,688 servers
- Downloads a week
- 364
- more than 84% of 12,191 servers with a package
Release history: 3 versions in the registry since 2026-09-12, latest 2026-10-10, typically one every 27 days.
Install Flameox in Claude Code, Cursor or VS Code
claude mcp add flameox -- uvx flameox
What the publisher says
From the Flameox repository's README, as published. We do not edit it. Read it on GitHub
flameox
Bounded local runtime evidence for coding agents.
<!-- mcp-name: io.github.morluto/flameox -->
Flameox coordinates profilers, benchmark tools, trace processors, and direct local targets. It gives an agent a short path from an explicit native artifact or live command to bounded evidence, while keeping preservation optional.
There is no workspace to initialize, flameox.toml, SQLite control plane, durable job to poll, or parent-directory discovery. Analyze existing artifacts by passing their exact paths and formats.
Quick start
uv sync --extra dev --extra memory --extra trace --extra cpu
uv run flameox mcp inspect
uv run flameox analyze artifact.preview /absolute/path/to/artifact.json
uv run flameox capture --provider direct --cwd "$PWD" -- python benchmark.pyThe MCP server has no workspace or project binding:
uv run flameox mcp serveRun the short global setup wizard through npm:
npx flameox@latest setupSetup detects Claude Code, Cursor, OpenCode, Codex, Gemini CLI, and Google Antigravity, then asks which clients should use Flameox. It preserves unrelated client configuration and writes a Python 3.12 uvx launcher pinned to the exact Flameox release that ran setup. Restart or reconnect changed clients afterward. For automation, pass --client codex --yes, repeat --client, or use --all --yes; --dry-run reports the same global paths without writing them. Detection is never automation consent.
Explicit --provider selections prepare the exact version-pinned uvx environment in the saved launcher by resolving it once into uvx's cache; they do not create a persistent global uv tool installation. Each invocation declares the complete managed provider set for that launcher rather than adding to remembered state. Use --timeout-seconds for a slow cold resolution. System and vendor tools are diagnosed with external install guidance. Setup never initializes or mutates a project.
Authority model
explicit artifact paths / typed direct target
│
▼
bounded process-lifespan runtime
│ │
▼ ▼
inline evidence session scratch/cache
│
explicit preservation
│
▼
user Flameox data directoryAnalysis and unpreserved capture make no durable Flameox writes. Capture artifacts stay in bounded session scratch until preservation, least-recently-used eviction, or server shutdown. An evicted analysisid returns EXPIREDSESSIONANALYSIS; preserve conclusions before relying on them. The first preserveevidence call creates the user-level Flameox data directory and stores native bytes and a canonical evidence bundle by SHA-256. FLAMEOXDATADIR overrides the platform default for isolation or another storage location. Flameox never edits project Git files.
The console-retention default is bounded diagnostics in memory, with explicit omission counts. Keep native artifacts when needed; retain full console output on disk only when it is the evidence, an oracle needs it, or the caller requests it. Preservation alone does not request full logs. See console retention.
Workload time and RSS budgets are optional: use target.budget in MCP or --workload-budget in CLI capture. They do not inherit analysis-worker limits; cancellation and storage protection remain active when no workload budget is set.
The agent owns hypotheses and narrative findings in its own notes. Flameox owns only observed inputs, effective requests, execution provenance, typed evidence, coverage, truncation, limitations, and optional immutable preservation.
MCP interface
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-09-19restoreB → Ascore 92
Flameox: common questions
- Is Flameox MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Flameox safety report
- How do I install Flameox?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Flameox need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Flameox maintained?
- The last commit was 23 days ago (2026-10-12). The latest release is v0.2.9.
- How does Flameox compare with other MCP servers?
- safety score 92/100 (higher than 95% of 48,255 servers); github stars 199 (more than 95% of 28,688 servers); downloads a week 364 (more than 84% of 12,191 servers with a package). Full comparison.