ModelsAtlas
Explore
Atlas / MCP servers / sterlingjf / knowledge-mcp

knowledge-mcpCAUTION

mcp/sterlingjf/knowledge-mcp
MCP server by sterlingjf · foss · knowledge management · knowledge work · Audited 2026-10-12
⚑ Report / re-scanSource ↗

Plain, structured thinking while you work. It's free, open, and local-first.

Verdict
CAUTION
Grade
B
Trust score
82 /100
Exposed tools
1 1r · 0w · 0d
Transport
—
License
MIT
Stars
1
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Plain, structured thinking while you work. It's free, open, and local-first.

knowledge-mcp brings the defined questions, conditions and connections from your knowledge base into your work with AI agents. Your agent applies the guidance based on your document and situation as you ask, write or review.

Under the hood, Knowledge Bus is used to codify domain knowledge as specs.

How it works

Features

  • Structured Document context. You and your agent share each document's purpose, reader and questions.
  • Guided writing. See each section's questions and catch missing answers while you write.
  • Structure by folder. Set guidance for your whole knowledge base or for individual folders.
  • Knowledge import. Turn notes and conversations into proposed updates to your documents.
  • Document memory. Reuse saved document types and reader choices across sessions.
  • Edit history. Compare original and revised text, and undo recorded edits.
  • Custom guidance. Set and refine the questions and requirements for your documents.

Get started

On macOS, install with Homebrew:

brew install sterlingjf/tap/knowledge-mcp

Then register it with the apps you use:

Read from source at commit c4fa283b7fe1OBSERVED · 2026-10-12
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add knowledge-mcp -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "knowledge-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (1)

1 read · 0 write · 0 destructive.

ToolRiskDescription
kb_editsreadarguments = respond.sent(location=location)
04

Trust audit

CAUTIONgrade B · trust 82/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (3 observation(s))
Network
declared (1 observation(s))
Shell
declared (1 observation(s))
Dependencies
pinned
Secrets in source
none-found

Findings (16)

MEDIUMInventory / provenance · inv.binary · CWE-1104
runtime/skills/kb-check/runtime/knowledge_bus-0.10.0-py3-none-any.whl
knowledge_bus-0.10.0-py3-none-any.whl
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
runtime/skills/kb-evolve/runtime/knowledge_bus-0.10.0-py3-none-any.whl
knowledge_bus-0.10.0-py3-none-any.whl
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
runtime/skills/kb-explore/runtime/knowledge_bus-0.10.0-py3-none-any.whl
knowledge_bus-0.10.0-py3-none-any.whl
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
runtime/skills/kb-ingest/runtime/knowledge_bus-0.10.0-py3-none-any.whl
knowledge_bus-0.10.0-py3-none-any.whl
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
runtime/skills/kb-uncover-question/runtime/knowledge_bus-0.10.0-py3-none-any.whl
knowledge_bus-0.10.0-py3-none-any.whl
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMObfuscation / stealth · obf.zero_width · CWE-506, CWE-94
runtime/knowledge_mcp/configedit.py:50
if char in " \t\r\n":
LOWInventory / provenance · inv.hidden_file · CWE-1104
.markdownlint-cli2.jsonc
.markdownlint-cli2.jsonc
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.node-version
.node-version
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.oxlintrc.json
.oxlintrc.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.pre-commit-config.yaml
.pre-commit-config.yaml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.prettierignore
.prettierignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
tools/formula/release-workflow.test.ts:38
new URL("../../.github/workflows/release.yml", import.meta.url),
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
tools/formula/release-workflow.test.ts:52
const root = fileURLToPath(new URL("../../", import.meta.url));
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
tools/knowledge-model/refresh-knowledge-model.test.ts:271
"../../runtime/skills/km-write/SKILL.md",
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
tools/modules/check-quality.test.ts:19
const root = fileURLToPath(new URL("../../", import.meta.url));
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
CHANGELOG.md:71
Quit the old desktop app and remove each agent app's `knowledge-mcp` entry for `http://127.0.0.1:17952/mcp` before running `kb setup`. Setup refuses to overwrite a `knowledge-mcp` entry configured for

Gates applied: no_behavioural_pass.

Audited 2026-10-12 · audit v0.4.1 · source sha c4fa283b7fe1full audit observations/trust-audit/mcp-server/sterlingjf__knowledge-mcp.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-12c4fa283b7fe1CAUTIONB82first audit
06

Questions

What is the knowledge-mcp MCP server?

Plain, structured thinking while you work. It's free, open, and local-first.

What tools does knowledge-mcp expose?

1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is knowledge-mcp safe to connect to an agent?

With care. The audit graded it B (82/100) and found 16 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does knowledge-mcp need?

No credential environment variables were found in its source, so it appears to need none.

How current is this page?

The grade is for one exact copy of the source (c4fa283b7fe1), read on 2026-10-12. The repository is watched and re-audited when it changes.

Advertisement