← Back to search

io.github.radiovisual/zoekt-mcp

radiovisual Scanned 6d ago

Fast indexed code search for AI agents, powered by Sourcegraph Zoekt.

? Not scanned yet

Versions

0.3.0latest
first seen Jun 5, 2026

Tools 3

search_code
annotations: none low

Run a Zoekt query against the indexed corpus. Query syntax highlights: - ``repo:NAME`` restrict to repos whose name matches NAME (regex) - ``file:PATH`` restrict to files whose path matches PATH (regex) - ``lang:LANGUAGE`` restrict to a language (``python``, ``go``, ...) - ``sym:IDENT`` match symbol definitions (functions, classes, ...) - ``case:yes`` case-sensitive content match - ``/regex/`` regex content match (literal match by default) - whitespace is AND; use ``or`` for boolean OR Examples: - ``lang:python def hello`` — Python files containing ``def hello`` - ``sym:users`` — anything that defines a ``users`` symbol - ``repo:flask-app file:app.py`` — within one file of one repo Returns a compact object with ``files`` (each containing ``repo``, ``file``, ``language``, and ``matches``) plus top-level stats. Results are capped at ``max_results`` files.

query str max_results int context_lines int
list_repos
annotations: none low

List indexed repositories. ``filter`` is an optional ``repo:`` atom (e.g. ``repo:flask`` or ``repo:.`` for all) used to narrow the list. Leave empty to list every indexed repository. Returns ``{"repos": [{name, url, branches, ...}, ...], "count": N}``.

filter str
get_file
annotations: none low

Fetch the full contents of a file from an indexed repository. ``repo`` is the repository name as reported by ``list_repos``; ``path`` is the file path within that repo; ``branch`` defaults to ``HEAD`` but can be any branch zoekt has indexed. Returns ``{"repo", "path", "branch", "content"}``.

path str repo str branch str

Permissions 3

network medium
Server uses network capabilities via: httpx
filesystem low
Server uses filesystem capabilities via: os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 30

low
Tool 'search_code' has no annotations annotation_checker · 100%
low
Tool 'list_repos' has no annotations annotation_checker · 100%
low
Tool 'get_file' has no annotations annotation_checker · 100%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: express@4.19.2 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: flask@3.0 (GHSA-68rp-wp8r-4726) dependency_analyzer · 95%
medium
Vulnerable dependency: flask@3.0 (PYSEC-2026-2151) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: search_code manifest_parser · 90%
info
Tool: list_repos manifest_parser · 90%
info
Tool: get_file manifest_parser · 90%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 2 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%