Is io.github.callobuzz/cob-rag-mcp safe to use?

io.github.callobuzz/cob-rag-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.

How do I install io.github.callobuzz/cob-rag-mcp?

Install io.github.callobuzz/cob-rag-mcp via npm: `npx cob-rag-mcp`. Then add it to your MCP client config file.

What can io.github.callobuzz/cob-rag-mcp do?

io.github.callobuzz/cob-rag-mcp provides 3 tools: usage, ask, confirm_name. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.callobuzz/cob-rag-mcp?

io.github.callobuzz/cob-rag-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.callobuzz/cob-rag-mcp actively maintained?

io.github.callobuzz/cob-rag-mcp is actively maintained - last commit was 1 day ago.

io.github.callobuzz/cob-rag-mcp

cob-rag-mcp

Give any MCP client a business's own knowledge base from a self-hosted cob-rag-engine.

302/wk 3 tools GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio

3 tools

Grade F

MCPpedia last refreshed this data 9h ago

Edit this pageView history

io.github.callobuzz/cob-rag-mcp is an MCP server that give any MCP client a business's own knowledge base from a self-hosted cob-rag-engine. Its tool list has not been published yet over stdio, requires no API key, and scores 58/100 on MCPpedia's security, maintenance and efficiency rubric.

Education

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-callobuzz-cob-rag-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "cob-rag-mcp"
      ]
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-callobuzz-cob-rag-mcp)](https://mcppedia.org/s/io-github-callobuzz-cob-rag-mcp)

Read me

What io.github.callobuzz/cob-rag-mcp does

Give any MCP client a business's own knowledge base from a self-hosted cob-rag-engine.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y 'cob-rag-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

58/100across 5 weighted dimensions

How we score →

0255075100

−42

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked cob-rag-mcp against OSV.dev.

Inventory

Tools (3)

Click any tool to inspect its schema.

Help improve this page

This server is missing a description. If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.callobuzz/cob-rag-mcp safe to use?: io.github.callobuzz/cob-rag-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.callobuzz/cob-rag-mcp?: Install io.github.callobuzz/cob-rag-mcp via npm: `npx cob-rag-mcp`. Then add it to your MCP client config file.
What can io.github.callobuzz/cob-rag-mcp do?: io.github.callobuzz/cob-rag-mcp provides 3 tools: usage, ask, confirm_name. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.callobuzz/cob-rag-mcp?: io.github.callobuzz/cob-rag-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.callobuzz/cob-rag-mcp actively maintained?: io.github.callobuzz/cob-rag-mcp is actively maintained - last commit was 1 day ago.

Similar servers

Others in education

View all →

Auto Claude Code Research In Sleep91

ARIS ⚔️ (Auto-Research-In-Sleep) — Lightweight Markdown-only skills for autonomous ML research: cross-model review loops, idea discovery, and experiment automation. No framework, no lock-in — works with Claude Code, Codex, OpenClaw, or any LLM agent.

19.2k 5

io.github.mims-harvard/tooluniverse91

2,700+ scientific tools for AI scientists: life science, research, literature, and more.

1.8k 4

Daofy90

Daofy for Delphi — MCP Server that compiles Delphi projects and queries knowledge base for AI assistants.

108 10

io.github.Fireiscoolsolo/canvas-lms-mcp-local89

Student-focused Canvas LMS: 237 tools for grades, deadlines, planning, submissions and study plans.

2 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.callobuzz/cob-rag-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Education

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-callobuzz-cob-rag-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "cob-rag-mcp"
      ]
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-callobuzz-cob-rag-mcp)](https://mcppedia.org/s/io-github-callobuzz-cob-rag-mcp)

Read me

What io.github.callobuzz/cob-rag-mcp does

Give any MCP client a business's own knowledge base from a self-hosted cob-rag-engine.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y 'cob-rag-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

cob-rag-mcp

Website · cob-rag-engine · Engine website · npm · Callobuzz open source

An MCP server and a full CLI for cob-rag-engine, the self-hosted knowledge layer for AI assistants and agents. Plug a business's own knowledge base into Claude, Cursor, VS Code, n8n or any MCP client, or work with it straight from the shell. One set of 52 tools, two ways in.

[!IMPORTANT] You host the engine. There is no hosted service, and there never will be. cob-rag-mcp is only a client: it talks to a cob-rag-engine that you run yourself, on your laptop, your server or your cloud, using the URL and key you give it. Nothing is sent anywhere else. If you do not have an engine yet, start with the engine's quick start (one docker compose up), then come back here.

Why

An agent is only as useful as what it knows about the business it works for: the returns policy, the price list, which tests need fasting. cob-rag-engine holds that knowledge, one isolated knowledge base (a corpus) per business, with hybrid search, citations and usage metering. This package puts it where agents and people work:

In any MCP client. The agent calls search to pull the right passages, with sources, and answers from them with its own model. Or it calls ask for a complete cited answer written by the model configured in your engine.
In the shell. cob-rag-engine search "...", ingest records, corpora create, usage: every tool is also a command, with readable tables by default and --json for scripts.
Scoped by the key you hand it. A corpus key (ck_) sees one knowledge base and nothing else. A tenant key (tk_) manages that tenant's corpora. The admin key runs the engine. The server asks the engine who the key is and offers only the tools that key can use.

	CLI (`cob-rag-engine`)	MCP server (`cob-rag-mcp start`)
Who it is for	You, scripts, CI, an agent's own terminal	Claude, Cursor, VS Code, n8n, any MCP client
Output	Tables; `--json` for machines	JSON tool results
Destructive actions	Asks first, or `--yes`	Hidden unless `COB_RAG_ALLOW_DESTRUCTIVE=true`
Transports	n/a	stdio (default) and streamable HTTP

Prerequisites

A running cob-rag-engine you can reach, and a key for it: the admin key (RAG_ADMIN_API_KEY in the engine's .env), a tenant key (tk_...) or a corpus key (ck_...). See the engine's quick start.
Node.js 22 or newer.
For ask: a model configured in the engine (engine default, per corpus, or per request with the bring-your-own-key setting

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

58/100across 5 weighted dimensions

How we score →

0255075100

−42

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked cob-rag-mcp against OSV.dev.

Inventory

Tools (3)

Click any tool to inspect its schema.

Help improve this page

This server is missing a description. If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.callobuzz/cob-rag-mcp safe to use?: io.github.callobuzz/cob-rag-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.callobuzz/cob-rag-mcp?: Install io.github.callobuzz/cob-rag-mcp via npm: `npx cob-rag-mcp`. Then add it to your MCP client config file.
What can io.github.callobuzz/cob-rag-mcp do?: io.github.callobuzz/cob-rag-mcp provides 3 tools: usage, ask, confirm_name. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.callobuzz/cob-rag-mcp?: io.github.callobuzz/cob-rag-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.callobuzz/cob-rag-mcp actively maintained?: io.github.callobuzz/cob-rag-mcp is actively maintained - last commit was 1 day ago.