UltraRAG

Overview

From the repository's own README, as read at the audited commit.

<p align="center">  <picture>    <source media="(prefers-color-scheme: dark)" srcset="./docs/ultrarag_dark.svg">    <source media="(prefers-color-scheme: light)" srcset="./docs/ultrarag.svg">    <img alt="UltraRAG" src="./docs/ultrarag.svg" width="55%">  </picture></p><h3 align="center">Less Code, Lower Barrier, Faster Deployment</h3><p align="center"><a href="https://trendshift.io/repositories/18747" target="_blank"><img src="https://trendshift.io/api/badge/repositories/18747" alt="OpenBMB%2FUltraRAG | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a></p><p align="center">  <a href="https://ultrarag.github.io/"><img src="https://img.shields.io/badge/Homepage-6ABED8?style=for-the-badge&logoColor=white" alt="Homepage"/></a>&nbsp;  <a href="https://ultrarag.openbmb.cn/pages/en/getting_started/introduction"><img src="https://img.shields.io/badge/Documentation-66B89E?style=for-the-badge&logo=bookstack&logoColor=white" alt="Documentation"/></a>&nbsp;  <a href="https://modelscope.cn/datasets/UltraRAG/UltraRAG_Benchmark"><img src="https://img.shields.io/badge/Dataset-DE8EA6?style=for-the-badge&logo=databricks&logoColor=white" alt="Dataset"/></a>&nbsp;  <a href="https://github.com/OpenBMB/UltraRAG/tree/rag-paper-daily/rag-paper-daily"><img src="https://img.shields.io/badge/Paper_Daily-A48BC8?style=for-the-badge&logo=arxiv&logoColor=white" alt="Paper Daily"/></a></p><p align="center">  <a href="./docs/README_zh.md"><b>简体中文</b></a> &nbsp;|&nbsp; <b>English</b></p>---**Latest News** 🔥- **[2026.01.23]** 🎉 UltraRAG 3.0 Released: Say no to "black box" development—make every line of reasoning logic clearly visible 👉 [📖 Blog](https://github.com/OpenBMB/UltraRAG/blob/page/project/blog/en/ultrarag3_0.md)- **[2026.01.20]** 🎉 AgentCPM-Report Model Released! DeepResearch is finally localized: 8B on-device writing agent AgentCPM-Report is open-sourced 👉 [🤗 Model](https://huggingface.co/openbmb/AgentCPM-Report)<details><summary><b>Previous News</b></summary><br

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add frontend --env EXA_API_KEY=${EXA_API_KEY} --env LLM_API_KEY=${LLM_API_KEY} --env RETRIEVER_API_KEY=${RETRIEVER_API_KEY} --env TAVILY_API_KEY=${TAVILY_API_KEY} -- npx -y [email protected]

{
  "mcpServers": {
    "frontend": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "EXA_API_KEY": "${EXA_API_KEY}",
        "LLM_API_KEY": "${LLM_API_KEY}",
        "RETRIEVER_API_KEY": "${RETRIEVER_API_KEY}",
        "TAVILY_API_KEY": "${TAVILY_API_KEY}"
      }
    }
  }
}

Exposed tools (47) 41 read · 6 write · 0 destructive

Details

Source

openbmb/ultrarag

npm

frontend@0.0.0

PyPI

ultrarag

Transports

stdio · streamable-http

Credentials it reads

EXA_API_KEYLLM_API_KEYRETRIEVER_API_KEYTAVILY_API_KEYULTRARAG_SESSION_SECRETZHIPUAI_API_KEY

License

Apache-2.0

Stars

5,694 · pushed 0d ago

Trust audit

Install with care. The audit found things worth knowing before you trust its output.

What the source does

Filesystem

declared (7 observation(s))

Network

declared (7 observation(s))

Shell

declared (2 observation(s))

Dependencies

not all pinned

Secrets in source

none-found

Findings (17)

module = importlib.import_module(module_path, package=__package__)

module = importlib.import_module(module_path, package=__package__)

PATH="/root/.local/bin:/ultrarag/.venv/bin:${PATH}"

if ".." in path_str or path_str.startswith("/etc/") or path_str.startswith("/proc/"):

target: "http://127.0.0.1:5050",

.env.dev

exec(compile(module, str(BENCHMARK_SRC), "exec"), namespace)

exec(compile(module, str(EVALUATION_SRC), "exec"), namespace)

base_url: http://127.0.0.1:65501/v1 # [!code ++]

base_url: http://127.0.0.1:65504/v1 # [!code ++]

retriever_url: http://127.0.0.1:64501

- `/api` -> `http://127.0.0.1:5050`

@radix-ui/react-dialog, @radix-ui/react-dropdown-menu, @radix-ui/react-select, @radix-ui/react-slot, @radix-ui/react-tabs, @tanstack/react-query, @xyflow/react, class-variance-authority

curl -LsSf https://astral.sh/uv/0.12.0/install.sh | sh

curl -LsSf https://astral.sh/uv/0.12.0/install.sh | sh

curl -LsSf https://astral.sh/uv/install.sh | sh

ui/frontend/dist/assets/index-CJkYAW3o.js

Gates applied: no_behavioural_pass.

Audited 2026-09-16 · audit v0.4.0 · source sha 80d07c4833c7 · full audit: observations/trust-audit/mcp-server/openbmb__ultrarag.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions