Atlas / MCP servers / roomi-fields / RTFM

RTFMCAUTION

mcp/roomi-fields/rtfm

The open retrieval layer for AI coding agents. Indexes code, docs, legal, research, data — 22 parsers (incl. EPUB, DOCX, ODT), FTS5 + semantic search, knowledge graph. Serves surgical context via MCP. Open source, local, free.

Verdict
CAUTION
Grade
B
Trust score
84 /100
Exposed tools
8 8r · 0w · 0d
Transport
stdio
License
MIT
Stars
25
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

*Retrieve The Forgotten Memory*

The open retrieval layer your AI agent was missing

Index everything in your project — code, docs, PDFs, legal texts, research, data — and your agent finds the right context instantly. No hallucinations. No cloud. No API costs.

`Free · Local · Open Source · MIT`

[](https://pypi.org/project/rtfm-ai/) [](https://opensource.org/licenses/MIT) [](https://www.python.org/) [](https://modelcontextprotocol.io/) [](https://claude.ai/claude-code) [](https://github.com/roomi-fields/rtfm)

The problem

Your AI agent is flying blind.

It greps through thousands of files, misses the doc that answers the question, invents modules that don't exist, forgets what you decided last session. The bigger the project, the worse it gets. You've added a smarter model. It didn't help. Because the bottleneck isn't intelligence — it's retrieval.

Code indexers (Augment, Sourcegraph, Cursor) only see code. But your project isn't just code. It's specs, PRs, architecture decisions, research papers, PDFs, regulations, vault notes — the context your agent needs to stop guessing.

Why I built this

I was writing a French tax article (~50 pages of regulatory text, cross-references between code articles, case law, administrative doctrine). Claude Code kept grep-ing the same directories in loops, running out of

Read from source at commit 9a0042857546OBSERVED · 2026-10-10
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code (pypi)
claude mcp add rtfm-ai -- None rtfm-ai==0.52.0
03

Exposed tools (8)

8 read · 0 write · 0 destructive.

ToolRiskDescription
rtfm_booksreadList indexed books with per-corpus summary and pagination.
rtfm_contextreadGet sources relevant to a subject. Returns paths + line ranges,
rtfm_coveragereadHow much of a project this index actually holds.
rtfm_discoverreadScan a project directory and return a structural map (file types,
rtfm_expandreadRead content of an indexed file with line numbers.
rtfm_graphreadShow graph neighbors of a file (imports, links, includes, citations).
rtfm_historyreadShow version history of an indexed file, or retrieve a specific version.
rtfm_searchreadSearch the indexed knowledge base. Returns ranked source paths
04

Trust audit

CAUTIONgrade B · trust 84/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (1 observation(s))
Network
none-observed
Shell
declared (2 observation(s))
Dependencies
pinned
Secrets in source
none-found

Findings (9)

MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
rtfm/cli.py:1593
__import__(mod)
MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
rtfm/mcp.py:747
__import__(mod)
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
rtfm/core/handlers.py:117
h = hashlib.md5()
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
rtfm/core/sync.py:511
h = hashlib.md5()
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
rtfm/parsers/_chunking.py:29
return hashlib.md5(text.encode()).hexdigest()[:12]
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
rtfm/parsers/csv_parser.py:36
return hashlib.md5(text.encode()).hexdigest()[:12]
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
rtfm/parsers/html_bofip.py:41
return hashlib.md5(text.encode()).hexdigest()[:12]
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
rtfm/tests/test_agent_worktrees.py:78
_write(tmp_path, "vendor/lib/.git", "gitdir: ../../.git/modules/lib\n")
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
docs/CHANGELOG.md:2111
`bin/rtfm-serve` already injected the plugin's extras venv (`~/.claude/plugins/data/rtfm/extras/venv`) into `sys.path` so the MCP server could import `pdftext`, `ebooklib`, `openpyxl`, `fastembed`, et
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine

Gates applied: no_behavioural_pass.

Audited 2026-10-10 · audit v0.4.1 · source sha 9a0042857546full audit observations/trust-audit/mcp-server/roomi-fields__rtfm.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-109a0042857546CAUTIONB84first audit
06

Questions

What is the RTFM MCP server?

The open retrieval layer for AI coding agents. Indexes code, docs, legal, research, data — 22 parsers (incl. EPUB, DOCX, ODT), FTS5 + semantic search, knowledge graph. Serves surgical context via MCP. Open source, local, free.

What tools does RTFM expose?

8 in total: 8 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is RTFM safe to connect to an agent?

With care. The audit graded it B (84/100) and found 9 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does RTFM need?

No credential environment variables were found in its source, so it appears to need none.

How does RTFM run?

It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as rtfm-ai.

How current is this page?

The grade is for one exact copy of the source (9a0042857546), read on 2026-10-10. The repository is watched and re-audited when it changes.

Advertisement