Knowledge RAG MCP Server

Findings (10)

• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  pip@9.0.3: 9 known vulnerabilities

  PYSEC-2020-173, PYSEC-2021-437, PYSEC-2023-228, PYSEC-2026-1795, PYSEC-2026-1796 +4 more

  requirements-dev.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  py@1.9.0: 1 known vulnerability

  PYSEC-2020-92

  requirements-dev.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  orjson@3.9.15: 1 known vulnerability

  PYSEC-2026-107

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  idna@3.9.0: 2 known vulnerabilities

  PYSEC-2026-215, PYSEC-2026-215

  requirements-dev.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  opentelemetry-api@1.9.1: 1 known vulnerability

  GHSA-xcq7-p3pf-p88h

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)

Network activity

Tools exposed (13)

• search_knowledge

  Hybrid search combining semantic search + BM25 keyword search with cross-encoder reranking. Read-only. No side effects. Args: query: Search query text (1–3 keywords recommended; phrase queries also work) max_results: Maximum number of results (default: 5, capped by sea

• get_document

  Get the full content of a specific document by filepath. Read-only. No side effects. Args: filepath: Relative path to the document within the documents directory (e.g., "security/technique.md"). Must be an indexed file — use search_knowledge() to find t

• reindex_documents

  Index or reindex all documents in the knowledge base (runs in background). No flags — incremental pass: index new or changed files, skip unchanged ones, prune deleted sources. Use after filesystem edits outside add_document/update_document. ``force`` — smart reindex: re-embed every

• get_reindex_status

  Get the current status of a background reindex operation. Lightweight — does not compute full index statistics. Use this to poll progress after calling reindex_documents(). Returns: JSON string with reindex status. When active: operation name, progress (processed/total),

• list_categories

  List all document categories with their document counts. Read-only. No side effects. Reflects the live index state. Returns: JSON string with category names, document counts per category, and total document count. Usage: Use before filtering search_knowledge() or list_doc

• list_documents

  List indexed documents one page at a time, optionally filtered by category. Read-only. No side effects. Args: category: Optional category filter. Must be a valid category name — call list_categories() to see available options (e.g., security, ctf, logscale,

• get_index_stats

  Get statistics and health metrics for the knowledge base index. Read-only. No side effects. Returns: JSON string with system metrics: total documents, total chunks, embedding model name, BM25 status, query cache hit rate, and file watcher status. Usage: Use for sy

• add_document

  Add a new document to the knowledge base from raw text content. Mutating — writes a file to disk and indexes it immediately. No auth required. Args: content: Full text content of the document (markdown supported) filepath: Relative path within documents directory (e.g.

• update_document

  Update the content of an existing document in the knowledge base. Mutating — overwrites the file on disk and re-indexes immediately. Old chunks are removed and replaced with new ones. Full content replacement, not a patch. Args: filepath: Full or relative path to the docum

• remove_document

  Remove a document from the knowledge base index. Mutating — removes index entries. If delete_file=True, also permanently deletes the file from disk (irreversible, cannot be undone). Args: filepath: Path to the document file. Must be an indexed document — list_d

• add_from_url

  Fetch content from a URL, convert to markdown, and add to the knowledge base. Mutating — makes an outbound HTTP request (requires internet access), strips HTML, converts to markdown, saves to disk, and indexes immediately. Args: url: Full URL to fetch (https:// required).

• search_similar

  Find documents semantically similar to a given reference document. Read-only. No side effects. Uses the document's embedding for similarity comparison. Args: filepath: Path to the reference document (must already be indexed — list_documents() lists indexed paths, o

• evaluate_retrieval

  Evaluate search quality by testing whether search_knowledge() retrieves expected documents. Read-only. Runs multiple search queries internally. No side effects on the index. Args: test_cases: JSON string array of test cases. Each item requires "query" (search string)