io.github.pcas-io/plexus is an MCP server that typed on-prem knowledge graph for AI agents — read-only for humans, write-only for agents via MCP. Its tool list has not been published yet over stdio and http, requires no API key, and scores 54/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"plexus": {
"url": "https://<your-plexus-host>/mcp",
"type": "http",
"headers": {
"Authorization": "Bearer pt_YOUR_TOKEN"
}
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/io-github-pcas-io-plexus)
Read me
What io.github.pcas-io/plexus does
Typed on-prem knowledge graph for AI agents — read-only for humans, write-only for agents via MCP.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y 'vitest' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
54/100across 5 weighted dimensions
0255075100
23
9
12
10
−46
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev2 fixed
CVE-2026-47429critical · fixedCVSS 9.8
When Vitest UI server is listening, arbitrary file can be read and executed
### Summary Arbitrary file can be read on Windows when Vitest UI server is listening, especially when exposed to the network. ### Impact Only users that match either of the following conditions are affected: - explicitly exposes the Vitest UI server to the network (using `--api.host` or [`api.host` config option](https://vitest.dev/config/api.html)) - running the Vitest UI or Browser Mode on Windows ### Details The API handler for `/__vitest_attachment__` uses the deprecated `isFileServingAll
CVE-2025-24964critical · fixedCVSS 9.6
Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening
### Summary Arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site WebSocket hijacking (CSWSH) attacks. ### Details When [`api` option](https://vitest.dev/config/#api) is enabled (Vitest UI enables it), Vitest starts a WebSocket server. This WebSocket server did not check Origin header and did not have any authorization mechanism and was vulnerable to CSWSH attacks. https://github.com/vitest-dev/vitest/blob/9a581e1c43e5c02b11e2a8026
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is io.github.pcas-io/plexus safe to use?
- io.github.pcas-io/plexus has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
- How do I install io.github.pcas-io/plexus?
- io.github.pcas-io/plexus supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What AI clients work with io.github.pcas-io/plexus?
- io.github.pcas-io/plexus is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
- Is io.github.pcas-io/plexus actively maintained?
- io.github.pcas-io/plexus is less actively maintained - last commit was 135 days ago.
Related
Similar servers
Others in ai-ml
I
io.github.callstack/agent-device96MCP server for mobile app automation: verify, control, and debug iOS, Android, TV, and desktop apps
4.5k 5
Gpt Researcher96An autonomous agent that conducts deep research on any data using any LLM providers
29.4k 5
I
io.github.mims-harvard/tooluniverse962,500+ scientific tools for AI scientists: life science, research, literature, and more.
1.7k 4
Suede Creator Skills9528 open-source Agent Skills for Claude Code and Codex: Full Send orchestration, A-F code review, AI evals, CI ship-gates, design, copy, SEO/AEO/GEO, app shipping, creator rights, and consumer recovery.
134 2
MCP Security Weekly
Get CVE alerts and security updates for io.github.pcas-io/plexus and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.