← MCP servers · zilliztech

Claude Context

CAUTIONgrade C · trust 80/100

Code search MCP for Claude Code. Make entire codebase the context for any coding agent.

agentagentic ragai codingclaude codecode generationcode searchcursorembedding

Overview

From the repository's own README, as read at the audited commit.

![](assets/claude-context.png)> 🆕 **Looking for persistent memory for Claude Code?** Check out [memsearch Claude Code plugin](https://github.com/zilliztech/memsearch#for-claude-code-users) — a markdown-first memory system that gives your AI agent long-term memory across sessions.### Your entire codebase as Claude's context[![License](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)[![Node.js](https://img.shields.io/badge/Node.js-20%2B-green.svg)](https://nodejs.org/)[![Documentation](https://img.shields.io/badge/Documentation-📚-orange.svg)](docs/)[![VS Code Marketplace](https://img.shields.io/visual-studio-marketplace/v/zilliz.semanticcodesearch?label=VS%20Code%20Extension&logo=visual-studio-code)](https://marketplace.visualstudio.com/items?itemName=zilliz.semanticcodesearch)[![npm - core](https://img.shields.io/npm/v/@zilliz/claude-context-core?label=%40zilliz%2Fclaude-context-core&logo=npm)](https://www.npmjs.com/package/@zilliz/claude-context-core)[![npm - mcp](https://img.shields.io/npm/v/@zilliz/claude-context-mcp?label=%40zilliz%2Fclaude-context-mcp&logo=npm)](https://www.npmjs.com/package/@zilliz/claude-context-mcp)[![Twitter](https://img.shields.io/twitter/url/https/twitter.com/zilliz_universe.svg?style=social&label=Follow%20%40Zilliz)](https://twitter.com/zilliz_universe)[![DeepWiki](https://img.shields.io/badge/DeepWiki-AI%20Docs-purple.svg?logo=gitbook&logoColor=white)](https://deepwiki.com/zilliztech/claude-context)<a href="https://discord.gg/mKc3R95yE5"><img height="20" src="https://img.shields.io/badge/Discord-%235865F2.svg?style=for-the-badge&logo=discord&logoColor=white" alt="discord" /></a><a href="https://trendshift.io/repositories/15064"><img src="https://trendshift.io/api/badge/repositories/15064" alt="zilliztech/claude-context | Trendshift" width="250" height="55" /></a></div>**Claude Context** is an MCP plugin that adds semantic code search to Claude Code and other AI coding agents, giving them deep conte

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add semanticcodesearch --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env GITHUB_TOKEN=${GITHUB_TOKEN} --env MOONSHOT_API_KEY=${MOONSHOT_API_KEY} --env OPENAI_API_KEY=${OPENAI_API_KEY} -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "semanticcodesearch": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
        "GITHUB_TOKEN": "${GITHUB_TOKEN}",
        "MOONSHOT_API_KEY": "${MOONSHOT_API_KEY}",
        "OPENAI_API_KEY": "${OPENAI_API_KEY}"
      }
    }
  }
}

Exposed tools (17) 14 read · 2 write · 1 destructive

Blast radius: 1 tool can delete or overwrite. An agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
clear_indexdestructiveClear the search index. IMPORTANT: You MUST provide an absolute path.
contentreadDocument content
content_bm25_embreadcontent bm25 function
directory_treereadGenerates a tree structure of a directory.
editwriteEdits the specified file with the given modifications.
endLinereadEnd line number of the chunk
fileExtensionreadFile extension
get_indexing_statusreadGet the current indexing status of a codebase. Shows progress percentage for actively indexing codebases and completion status for indexed codebases.
idreadDocument ID
list_directoryreadLists the contents of a directory.
metadatareadAdditional document metadata as JSON string
read_filereadReads the content of a text file at the specified path.
relativePathreadRelative path to the codebase
search_textreadSearches for a regular expression pattern within the content of files in a specified directory (or current working directory). Can filter files by a glob pattern. Returns the lines containing matches, along with their file paths and line numbers.
sparse_vectorreadSparse vector embedding from BM25
startLinewriteStart line number of the chunk
vectorreadEmbedding vector

Details

Source
zilliztech/claude-context
npm
semanticcodesearch@0.1.11
PyPI
evaluation
Transports
stdio
Credentials it reads
ANTHROPIC_API_KEYGITHUB_TOKENMOONSHOT_API_KEYOPENAI_API_KEY
License
MIT
Stars
12,521 · pushed 60d ago

Trust audit

Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (3 observation(s))
Network
declared (6 observation(s))
Shell
declared (1 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (25)

MEDIUMInventory / provenance · inv.binary · CWE-1104
packages/vscode-extension/wasm/tree-sitter-go.wasm
tree-sitter-go.wasm
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
packages/vscode-extension/wasm/tree-sitter-java.wasm
tree-sitter-java.wasm
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
packages/vscode-extension/wasm/tree-sitter-javascript.wasm
tree-sitter-javascript.wasm
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
packages/vscode-extension/wasm/tree-sitter-python.wasm
tree-sitter-python.wasm
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
packages/core/src/embedding/ollama-embedding.ts:25
host: config.host || 'http://127.0.0.1:11434',
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
clear_index
Why it matters. 1 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
LOWInventory / provenance · inv.hidden_file · CWE-1104
.eslintrc.js
.eslintrc.js
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.symlink · CWE-1104
AGENTS.md
AGENTS.md
Why it matters. link not followed
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
packages/core/src/context.ts:293
const pathHash = crypto.createHash('md5').update(normalizedPath).digest('hex').substring(0, 8);
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
packages/core/src/sync/synchronizer.ts:30
const hash = crypto.createHash('md5').update(normalizedPath).digest('hex');
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
packages/core/src/sync/synchronizer.ts:247
const hash = crypto.createHash('md5').update(normalizedPath).digest('hex');
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
packages/mcp/scripts/path-resolution-e2e.mjs:10
const repoRoot = path.resolve(path.dirname(__filename), "../../..");
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
packages/mcp/scripts/sync-lock-e2e.mjs:11
const repoRoot = path.resolve(path.dirname(__filename), "../../..");
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/getting-started/environment-variables.md:55
| `OLLAMA_HOST` | Ollama server URL | `http://127.0.0.1:11434` |
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/getting-started/quick-start.md:190
"OLLAMA_HOST": "http://127.0.0.1:11434",
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/troubleshooting/faq.md:29
- `OLLAMA_HOST=http://127.0.0.1:11434` (or your Ollama server URL)
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
packages/mcp/README.md:131
# Optional: Specify Ollama host (default: http://127.0.0.1:11434)
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
packages/chrome-extension/src/background.ts:374
return atob(data.content.replace(/\n/g, ''));
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
examples/basic-usage/package.json
tsx, typescript, @types/node, dotenv
Why it matters. 4 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, assert, browserify-zlib, eslint, https-browserify, os-browserify
Why it matters. 14 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
packages/chrome-extension/package.json
@types/chrome, @types/node, assert, browserify-zlib, buffer, copy-webpack-plugin, crypto-browserify, https-browserify
Why it matters. 21 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
packages/core/package.json
@google/genai, @zilliz/milvus2-sdk-node, faiss-node, fs-extra, glob, ignore, langchain, ollama
Why it matters. 27 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
packages/mcp/package.json
@modelcontextprotocol/sdk, zod, @types/node, tsx, typescript
Why it matters. 5 dependency range(s) float
Fix. pin exact versions or ship a lockfile
INFOInventory / provenance · inv.oversize · CWE-1104
assets/signup_and_create_cluster.jpeg
assets/signup_and_create_cluster.jpeg
Why it matters. 1375267 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
packages/chrome-extension/src/icons/icon128.png
packages/chrome-extension/src/icons/icon128.png
Why it matters. 1125350 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha 4a35db911c86 · full audit: observations/trust-audit/mcp-server/zilliztech__claude-context.json · Report an issue or request a re-scan

Audit history

DateSourceVerdictGradeScoreChange
2026-09-134a35db911c86CAUTIONC80first audit

Alternatives

Other servers in the same categories, safer ones first.

Questions

What is the Claude Context MCP server?

Code search MCP for Claude Code. Make entire codebase the context for any coding agent.

What tools does Claude Context expose?

17 in total: 14 read-only, 2 that write, and 1 that can delete or overwrite (clear_index). Every one is listed on this page with its risk.

Is Claude Context safe to connect to an agent?

With care. The audit graded it C (80/100) and found 25 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does Claude Context need?

It reads ANTHROPIC_API_KEY, GITHUB_TOKEN, MOONSHOT_API_KEY and OPENAI_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does Claude Context run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as semanticcodesearch at 0.1.11.

How current is this page?

The grade is for one exact copy of the source (4a35db911c86), read on 2026-09-13. The repository is watched and re-audited when it changes.

Provenance: OBSERVED · read 2026-09-13 · job trust-audit-2026-09-13