Atlas / MCP servers / adeelahmad / lense

lenseBLOCK

Name: lense
Author: adeelahmad

mcp/adeelahmad/lense

MCP server by adeelahmad · agent memory · ai agents · context engineering · Audited 2026-10-10

Lens: intelligence for your agent. Safe, secure and cost-effective. A self-hosted, cited knowledge graph and MCP server for your agents, from a Raspberry Pi to the cloud.

Verdict

BLOCK

Grade

Trust score

44 /100

Exposed tools

5 5r · 0w · 0d

Transport

streamable-http

License

NOASSERTION

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Safe, secure and cost-effective.

Connect your live data streams; Lens turns them into a cited knowledge graph your agent can reason over, through MCP, a REST API or its own assistant. It runs on your hardware with local models or any cloud model, private by default and cost-aware.

Install

curl -fsSL https://raw.githubusercontent.com/adeelahmad/lense/main/install.sh | sh

That one line is all: it opens an installer in your browser that checks the computer, then either installs with the defaults in one click (with a model server it finds on the computer) or asks how Lens should run (in Docker or a microsandbox microVM), the AI model and its key and any extras. Either way it installs what's missing (Docker included), starts Lens and opens its setup page (details). Run it again to update. On Windows, run irm https://raw.githubusercontent.com/adeelahmad/lense/main/install.ps1 | iex in PowerShell; or skip the terminal and double-click the launcher for your system from the latest release. Deployment covers servers and Cloudron; there are also packages for Synology, QNAP and Proxmox.

To work on the code instead, make run builds and runs everything from a checkout, make setup-code prints the first-admin setup code, and make dev runs it with hot reload; see Get started.

Why Lens

AI doesn't lack intelligence. It lacks structure. Lens gives your agent eyes. Without structure, every prompt is a guess about who you are and what happened. Lens sup

Read from source at commit a9e4a99cd55aOBSERVED · 2026-10-10

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add lens --env ARCHIVE_SECRET_KEY=${ARCHIVE_SECRET_KEY} --env AUTH_URL=${AUTH_URL} --env GITHUB_TOKEN=${GITHUB_TOKEN} --env HF_TOKEN=${HF_TOKEN} -- npx -y lens

claude-desktop

{
  "mcpServers": {
    "lens": {
      "command": "npx",
      "args": [
        "-y",
        "lens"
      ],
      "env": {
        "ARCHIVE_SECRET_KEY": "${ARCHIVE_SECRET_KEY}",
        "AUTH_URL": "${AUTH_URL}",
        "GITHUB_TOKEN": "${GITHUB_TOKEN}",
        "HF_TOKEN": "${HF_TOKEN}"
      }
    }
  }
}

Exposed tools (5)

5 read · 0 write · 0 destructive.

Tool	Risk	Description
`Lens`	read	Intelligence for your agent. Safe, secure and cost-effective.
`anthropic-agent-skills`	read	Anthropic example skills
`document-skills`	read	Documents
`document_skills`	read	Documents
`pdf`	read	PDF files

Trust audit

BLOCKgrade F · trust 44/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	FAIL
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (4 observation(s))
Network: declared (6 observation(s))
Shell: declared (1 observation(s))
Dependencies: not all pinned
Secrets in source: found

Findings (25)

HIGHNetwork egress · net.env_exfil · CWE-200, CWE-319

install.sh:119

/.env" ... curl

Why it matters. reads secrets in the same file that sends data out

HIGHObfuscation / stealth · obf.rtl_override · CWE-506, CWE-94

fastapi_backend/app/domain/chats.py:29

_MARKS = re.compile("[--]")

HIGHPrompt injection · prompt.override · CWE-94, CWE-1427

docs/assistant.md:142

ignore previous instructions)"). `patterns` (the default) is free and kept narrow, so it misses rephrased attacks; `model` also

Why it matters. asks the agent to drop prior instructions or safety

Fix. remove the instruction

MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95

fastapi_backend/app/domain/components.py:103

importlib.import_module(m)

MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319

nextjs-frontend/components/admin/people-model.ts:52

"amber anchor apple arrow aspen basil beacon birch bramble breeze canyon cedar chalk cinder clover comet copper coral crane crystal dahlia delta ember fennel fern fjord flint forest garnet glacier gra