Context-window optimization: caching, compression & smart file tools that cut tokens 60-90%.
MCPpedia last refreshed this data
io.github.ooples/token-optimizer-mcp is an MCP server that context-window optimization: caching, compression & smart file tools that cut tokens 60-90%. Its tool list has not been published yet over stdio, requires no API key, and scores 87/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"io-github-ooples-token-optimizer-mcp": {
"args": [
"-y",
"semantic-release"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Context-window optimization: caching, compression & smart file tools that cut tokens 60-90%.
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y 'semantic-release' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
Exposure of Sensitive Information to an Unauthorized Actor in semantic-release
### Impact _What kind of vulnerability is it? Who is impacted?_ Secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that are excluded from uri encoding by [encodeURI](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/encodeURI). Occurrence is further limited to execution contexts where push access to the related repository is not available without modifying the repository url to inject credentials. ##
Secret disclosure when containing characters that become URI encoded
### Impact Secrets that would normally be masked by `semantic-release` can be accidentally disclosed if they contain characters that become encoded when included in a URL. ### Patches Fixed in v17.2.3 ### Workarounds Secrets that do not contain characters that become encoded when included in a URL are already masked properly.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in ai-ml
Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.
An open-source AI agent that brings the power of Gemini directly into your terminal.
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
Open source device layer for AI agents: control mobile, web, TV, and desktop apps over MCP
MCP Security Weekly
Get CVE alerts and security updates for io.github.ooples/token-optimizer-mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Cut what your AI coding agent costs without cutting what it gets done.
Hooks, a proxy, and an MCP server for Claude Code, Codex, Copilot, Gemini and 12 more clients.
Quick start · How it works · Benchmarks · All 16 clients · Reference · Changelog
On SWE-bench Verified, Claude Code with the plugin in its default mode solved the same tasks as Claude Code without it, at 0.71× the cost (7 of 7 resolved in both arms; across nine runs, 84 tasks resolved without the plugin and 83 with it). It gets there by stopping the waste agents make on their own: re-reading files that have not changed, dumping whole files to see three lines, unbounded searches, and re-deriving what an earlier session already worked out. Everything runs locally. No account, no hosted service, and telemetry is off unless you opt in twice.
The local dashboard: one ledger for every agent, every saving, and what the optimizer itself cost.
Claude Code. Install the plugin rather than the bare MCP server: the plugin's hooks do the saving, while the server alone only offers tools the model can ignore.
/plugin marketplace add ooples/token-optimizer-mcp
/plugin install token-optimizer@token-optimizer
/reload-plugins
You need Node.js 22.14 or later on Claude Code's PATH, and Claude Code 2.1.139 or later. Then check it works:
npx token-optimizer-doctor
The doctor feeds a synthetic payload to the real hook and confirms a large read is handled. Every failure names its own fix.
Codex, Copilot CLI, Gemini CLI, Cursor and the rest. Every client runs the
same server, npx -y @ooples/token-optimizer-mcp@latest. Ready-made configuration
for each one is in src/integrations/, and
docs/INSTALLATION.md walks through all sixteen.
node must be on
the PATH of the client process. If you just installed Node.js or Git, start the
client again from a new terminal so it picks up the new PATH."command": "node", "args": [...]). An older Claude Code ignores args, so the
hooks silently do nothing; the doctor report