rag-vaultCAUTION
One command. Zero cloud. Your docs stay private.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://opensource.org/licenses/MIT) [](https://www.typescriptlang.org/) [](https://registry.modelcontextprotocol.io/servers/io.github.RobThePCGuy/rag-vault)
Your documents. Your machine. Your control.
RAG Vault lets your AI coding assistant search your private documents, things like API specs, research papers, and internal docs. Everything runs locally and your data stays on your machine unless you choose to pull in content from a remote URL.
One command to run, minimal setup, privacy by default.
Why RAG Vault?
Security
RAG Vault comes with security built in:
- API Authentication: Optional API key via
RAG_API_KEY - Rate Limiting: You can throttle requests
- CORS Control: Restrict allowed origins
- Security Headers: Helmet.js protection
See SECURITY.md for complete documentation.
First-Time Setup Checklist
Before adding MCP config:
- Install Node.js 20 or newer.
- Pick a documents directory and set
BASE_DIRto that path. - Make sure your AI tool process can read
BASE_DIR. - Restart your AI tool after editing config.
Get Started Quickly
For Cursor
Add to ~/.cursor/mcp.json:
{
"mcpServers": {
"local-rag": {
"type": "stdio",
"command": "np63bedf30677cOBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add rag-vault -- npx -y @robthepcguy/[email protected]
Exposed tools (7)
7 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
Test | read | A longer description for testing |
all-MiniLM-L6-v2 | read | Fast, general-purpose model (384 dimensions) |
all-mpnet-base-v2 | read | Higher quality, slower (768 dimensions) |
allenai-specter | read | Optimized for scientific papers and citations |
bge-small-en-v1.5 | read | Optimized for retrieval (384 dimensions) |
embeddinggemma-300M | read | High-quality multilingual (300M params, 100+ languages) |
jina-code-v2 | read | Optimized for code and technical documentation |
Trust audit
CAUTIONgrade B · trust 88/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (7 observation(s))
- Shell
- declared (2 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (15)
# Default: http://localhost:5173,http://localhost:3000,http://127.0.0.1:5173,http://127.0.0.1:3000
'http://127.0.0.1:5173',
'http://127.0.0.1:3000',
sample-e2e.docx
.madgerc
import { RAGServer } from '../../server/index.js'import { RAGServer } from '../../server/index.js'import { RAGServer } from '../../server/index.js'import { RAGServer } from '../../server/index.js'import { DocumentParser, ParserValidationError } from '../../parser/index.js'- `http://127.0.0.1:5173`
- `http://127.0.0.1:3000`
const json = atob(base64)
@huggingface/transformers, @lancedb/lancedb, @modelcontextprotocol/sdk, @mozilla/readability, compression, cors, express, file-type
@tanstack/react-query, @tanstack/react-virtual, framer-motion, react, react-dom, react-dropzone, react-router-dom, tailwindcss
Gates applied: no_behavioural_pass.
63bedf30677cfull audit observations/trust-audit/mcp-server/robthepcguy__rag-vault.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 63bedf30677c | CAUTION | B | 88 | first audit |
Questions
What is the rag-vault MCP server?
One command. Zero cloud. Your docs stay private.
What tools does rag-vault expose?
7 in total: 7 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is rag-vault safe to connect to an agent?
With care. The audit graded it B (88/100) and found 15 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does rag-vault need?
No credential environment variables were found in its source, so it appears to need none.
How does rag-vault run?
It speaks sse, stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as rag-vault-ui at 1.7.2.
How current is this page?
The grade is for one exact copy of the source (63bedf30677c), read on 2026-10-11. The repository is watched and re-audited when it changes.