Is Srclight safe to use?

Srclight has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install Srclight?

Srclight supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Srclight do?

Srclight provides 5 tools: get_callers, codebase_map, semantic_search, detect_changes, hybrid_search. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Srclight?

Srclight is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Srclight actively maintained?

Srclight is recently maintained — last commit was 69 days ago. It has 49 GitHub stars.

Srclight

Name: Srclight
Author: srclight

srclight · by srclight

Deep code indexing MCP server for AI agents. 25 tools: hybrid FTS5 + embedding search, call graphs, git blame/hotspots, build system analysis. Multi-repo workspaces, GPU-accelerated semantic search, 10 languages via tree-sitter. Fully local, zero cloud dependencies.

49 5 tools GitHub PyPI

No known CVEs

MIT license

Maintained

Last commit 69d ago

Works with most clients

Transport: stdio, sse, http

5 tools · ~287 tok

Grade A · 0.1% of 200K ctx

Edit this pageView history

Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "srclight": {
      "args": [
        "serve",
        "--workspace",
        "myworkspace"
      ],
      "command": "srclight"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/srclight)](https://mcppedia.org/s/srclight)

Read me

What Srclight does

Deep code indexing for AI agents. SQLite FTS5 + tree-sitter + embeddings + MCP.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

83/100across 5 weighted dimensions

How we score →

0255075100

−17

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked srclight against OSV.dev.

Inventory

Tools (5)

Click any tool to inspect its schema.

~287 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Srclight safe to use?: Srclight has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Srclight?: Srclight supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Srclight do?: Srclight provides 5 tools: get_callers, codebase_map, semantic_search, detect_changes, hybrid_search. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Srclight?: Srclight is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Srclight actively maintained?: Srclight is recently maintained — last commit was 69 days ago. It has 49 GitHub stars.

Similar servers

Others in developer-tools

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

6.0k 2

Jscpd97

Copy/paste detector for programming source code, supports 223 formats. AI-ready with token-efficient reporter, skill and MCP server.

5.8k 1

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.0k 1

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

MCP Security Weekly

Get CVE alerts and security updates for Srclight and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "srclight": {
      "args": [
        "serve",
        "--workspace",
        "myworkspace"
      ],
      "command": "srclight"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/srclight)](https://mcppedia.org/s/srclight)

Read me

What Srclight does

Deep code indexing for AI agents. SQLite FTS5 + tree-sitter + embeddings + MCP.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

README

Srclight

Deep code indexing for AI agents. SQLite FTS5 + tree-sitter + embeddings + MCP.

Srclight builds a rich, searchable index of your codebase that AI coding agents can query instantly — replacing dozens of grep/glob calls with precise, structured lookups. It is the most comprehensive code intelligence MCP server available: 42 tools covering symbol search, relationship graphs, community detection, impact analysis, git change intelligence, semantic search, build system awareness, and document extraction — capabilities no other single MCP server combines. Fully local and private: your code never leaves your machine.

Why?

AI coding agents (Claude Code, Cursor, etc.) spend 40-60% of their tokens on orientation — searching for files, reading code to understand structure, hunting for callers and callees. Srclight eliminates this waste.

Without Srclight	With Srclight
8-12 grep rounds to find callers	`get_callers("lookup")` — one call
Read 5 files to understand module	`codebase_map()` — instant overview
"Find code that does X" → 20 greps	`semantic_search("dictionary lookup")` — one call
Edit a function, break 47 callers	`detect_changes()` — shows blast radius before you commit
15-25 tool calls per bug fix	5-8 tool calls per bug fix

Features

Minimal dependencies — single SQLite file per repo, no Docker/Redis/vector DB
Fully offline — no API calls, works air-gapped (Ollama local embeddings)
Incremental — only re-indexes changed files (content hash detection)
11 languages — Python, C, C++, C#, JavaScript, TypeScript, PHP, Dart, Swift, Kotlin, Java, Go
10 document formats — PDF, DOCX, XLSX, HTML, CSV/TSV, email (.eml), images (PNG/JPG/SVG/etc.), plain text, RST, Markdown
Optional OCR — PaddleOCR for scanned/image-only PDF pages; pytesseract for images
4 search modes — symbol names, source code (trigram), documentation (stemmed), semantic (embeddings)
Hybrid search — RRF fusion of keyword + semantic results for best accuracy
Multi-repo workspaces — search across all your repos simultaneously via SQLite ATTACH+UNION
MCP server — works with Claude Code, Cursor, and any MCP client
CLI — index, search, and inspect from the terminal
Auto-reindex — git post-commit/post-checkout hooks keep indexes fresh

Requirements

Python 3.11+
Git (for change intelligence and auto-reindex hooks)
Ollama (optional, for semantic search / embeddings) — ollama.com
NVIDIA GPU + cupy (optional, for GPU-accelerated vector search)
Poppler (optional, for PaddleOCR scanned-PDF support) — apt install poppler-utils / brew install poppler

Quick Start

# Install from PyPI
pip install srclight

# Install from source
git clone https://github.com/srclight/srclight.git
cd srclight
pip install -e .

# Optional: document format support (PDF, DOCX, XLSX, HTML, images)
pip install 'srclight[docs,pdf]'

# Optional: OCR for scanned PDFs (also needs poppler-utils on your system)
pip install 'srclight[pdf,paddleocr]'

# Optional: OCR for images (needs tesseract on your system)
pip install 'srclight[docs,ocr]'

# Optional: GPU-accelerated vector search (requires CUDA 12.x)
pip install 'srclight[gpu]'

# Everything (docs + pdf + ocr + paddleocr + gpu)
pip install 'srclight[all]'

# Index your project
cd /path/to/your/project
srclight index

# Index with embeddings (requires Ollama running)
srclight index --embed qwen3-embedding

# Search
srclight search "lookup"
srclight search --kind function "parse"
srclight symbols src/

... [View full README on GitHub](https://github.com/srclight/srclight#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

83/100across 5 weighted dimensions

How we score →

0255075100

−17

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked srclight against OSV.dev.

Inventory

Tools (5)

Click any tool to inspect its schema.

~287 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Srclight safe to use?: Srclight has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Srclight?: Srclight supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Srclight do?: Srclight provides 5 tools: get_callers, codebase_map, semantic_search, detect_changes, hybrid_search. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Srclight?: Srclight is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Srclight actively maintained?: Srclight is recently maintained — last commit was 69 days ago. It has 49 GitHub stars.