MCP.Market

Oxcode MCP server

by snowmead·io.github.snowmead/oxcode·v0.4.1·4 stars

PageRank-curated code intelligence for coding agents over an indexed source repository.

B77/100grade B
What users say
No reviews yet
Be the first
Safety scan
B77/100

full report

Adoption
Growing

4 stars43 downloads/wk

Reviews

Write one

Nobody has reviewed Oxcode yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Oxcode tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 17 days ago15/15
  • Maintainer identitynamespace and repository owner differ4/10
Overall 77/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Oxcode compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
77/100
higher than 50% of 48,255 servers
GitHub stars
4
more than 82% of 28,688 servers
Downloads a week
43
more than 35% of 12,191 servers with a package

Install Oxcode in Claude Code, Cursor or VS Code

Runs npx -y @snowmead/oxcode-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add oxcode -- npx -y @snowmead/oxcode-mcp
Add to Cursor

What the publisher says

From the Oxcode repository's README, as published. We do not edit it. Read it on GitHub

oxcode

oxcode indexes source code into a graph and serves it to coding agents. It is built on oxgraph — a storage-agnostic, zero-copy-friendly graph/hypergraph topology substrate for Rust — and stores the index in a native oxgraph database under .oxcode/index.oxgdb/.

The CLI keeps raw OxQL available, but agent navigation should usually start with context, symbols, files, and the call graph commands because they expand graph IDs back into function names, definition ranges, signatures, docstrings, source previews, and call-site source context.

Get Started

1. Install

Prebuilt binary (recommended — no Rust toolchain, grammars are statically linked so it runs offline):

# macOS / Linux
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/oxgraph/oxcode/releases/latest/download/oxcode-cli-installer.sh | sh
# Windows (PowerShell)
powershell -ExecutionPolicy ByPass -c "irm https://github.com/oxgraph/oxcode/releases/latest/download/oxcode-cli-installer.ps1 | iex"

Or download an archive from the Releases page. With Cargo instead:

cargo binstall oxcode-cli   # prebuilt, no compile
cargo install --force oxcode-cli   # build from source

This installs one oxcode binary — the CLI plus the MCP server (oxcode mcp). (The crate is oxcode-cli because the bare oxcode name is taken on crates.io; the command is still oxcode.) Re-run the installer (or cargo install --force oxcode-cli) to replace an existing install; oxcode mcp also self-updates on startup once you are on v0.1.2+.

2. Index a project

cd your-project
oxcode index
oxcode context "How does authentication work?"

3. Wire up an agent (MCP)

Add the server to your agent. For Claude Code (~/.claude.json):

{
  "mcpServers": {
    "oxcode": { "type": "stdio", "command": "oxcode", "args": ["mcp"] }
  }
}

Once wired, have the agent call oxcodewatch once: it builds the index and keeps it current as files change. When path is omitted, the project root comes from OXCODEROOT, CLAUDEPROJECTDIR, or WORKSPACEFOLDERPATHS — not from the MCP process cwd (hosts often start servers in $HOME). Across multiple agents on one repo a file lock elects a single writer (the one watcher/re-indexer) while the rest serve reads, so you can run as many as you like. Then ask questions with oxcode_explore.

Optionally auto-allow the tools in ~/.claude/settings.json (the query tools are read-only; oxcodewatch only builds/maintains the local index): mcpoxcodeoxcodewatch, explore, search, callers, callees, symbol, files, _status.

Claude Code plugin (one-command install)

Instead of hand-editing the config above, install the bundled plugin from the oxgraph marketplace — it wires up the MCP server for you:

/plugin marketplace add oxgraph/oxgraph
/plugin install oxcode@oxgraph

The plugin still needs the oxcode binary on your PATH and an indexed project (steps 1–2). See claude-plugin/README.md.

Other MCP clients (registry / npm)

oxcode is listed in the official MCP Registry as io.github.snowmead/oxcode, so registry-aware clients can discover it. For clients that prefer an npx launch command there's also an npm package:

{
  "mcpServers": {
    "oxcode": { "command": "npx", "args": ["-y", "@snowmead/oxcode-mcp"] }
  }
}

@snowmead/oxcode-mcp is a thin wrapper that runs oxcode mcp, so it still needs the oxcode binary on your PATH (step 1) — if you have it, command: "oxcode" above is the simpler config.

How Indexing Works

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Oxcode: common questions

Is Oxcode MCP server safe?
Mostly: it is graded B (77/100). Read the Oxcode safety report
How do I install Oxcode?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Oxcode need an API key?
Yes. The registry entry asks for GITHUB_TOKEN.
Is Oxcode maintained?
The last commit was 57 days ago (2026-09-07). The latest release is v0.4.1.
What can I use instead of Oxcode?
Servers from other publishers that do the same job: Deja Vu MCP server.
How does Oxcode compare with other MCP servers?
safety score 77/100 (higher than 50% of 48,255 servers); github stars 4 (more than 82% of 28,688 servers); downloads a week 43 (more than 35% of 12,191 servers with a package). Full comparison.

Alternatives to Oxcode

Same job from other publishers: the closest match first, then the best rated.

  • Deja Vu
    deja-vu: local memory over the session histories of forty-three coding agents.
    A