mxLore
Health Warn
- License — License: NOASSERTION
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Low visibility — Only 5 GitHub stars
Code Fail
- network request — Outbound network request in admin/www/js/api.js
- rm -rf — Recursive force deletion command in build-release.sh
- fs module — File system access in claude-setup/hooks/orchestrate-reconcile.js
- fs module — File system access in claude-setup/hooks/orchestrate-status.js
- fs module — File system access in claude-setup/hooks/orchestrate-status.sh
- fs module — File system access in claude-setup/hooks/orchestrate-step-check.js
Permissions Pass
- Permissions — No dangerous permissions requested
This self-hosted server provides a persistent knowledge base and institutional memory for AI coding assistants. It tracks architectural decisions, project specifications, and lessons learned across multiple codebases via the Model Context Protocol (MCP).
Security Assessment
Overall Risk: Medium. The tool requires a MariaDB database, meaning it directly handles and stores your development data. The automated scan flagged several potential concerns. There is an outbound network request in the API JavaScript, and multiple scripts utilize file system access to orchestrate tasks. Most notably, the `build-release.sh` script contains a dangerous recursive force deletion (`rm -rf`) command. While this is likely just part of the build cleanup process, it is a standard hazard in open-source projects and warrants a quick manual code review before executing any local builds. The repository does not appear to contain hardcoded secrets or request inherently dangerous OS permissions.
Quality Assessment
The project is clearly documented and actively maintained, with its most recent push occurring today. However, community trust and visibility are currently very low. It only has 5 GitHub stars, indicating that few external developers have reviewed or vetted the code. Furthermore, the repository lacks a clearly defined open-source license (marked as NOASSERTION), which is a significant drawback for commercial or enterprise adoption as it leaves usage rights legally ambiguous.
Verdict
Use with caution — the low visibility and lack of a formal license mean you should review the codebase yourself before integrating it into sensitive workflows.
Self-hosted MCP server for AI coding assistants. Persistent knowledge base with 39 tools, 11 skills, institutional memory.
mxLore
Self-hosted MCP server for AI-assisted software development. Stores architectural decisions, specs, plans, findings, and lessons learned — accessed via Model Context Protocol tools from AI coding assistants. Works with claude.ai, Claude Code, Cursor, Windsurf, and any MCP client.
New here? Check out the product overview at mxlore.dev first — see what mxLore does, how it compares, and why your AI assistant needs a memory.
Features
- 39 MCP Tools — search, create, update, recall knowledge across projects
- Multi-Project — one server, many codebases, cross-project search
- Skill Evolution — tracks which AI checker rules actually help, auto-tunes
- Institutional Memory — lessons learned with recall, gate levels, graph-based knowledge links
- Multi-Agent — agents communicate across projects via message bus
- Admin UI — web dashboard for developers, keys, projects, intelligence metrics
- AI Batch — automatic summaries, tagging, stale detection at boot time
- Works in claude.ai — CTOs and PMs use mxLore from a chat window, developers from Claude Code — same server, same knowledge
Quick Start (5 minutes)
Prerequisites
- Windows x64
- MariaDB 10.6+ (recommended: 11.x)
- Claude Code CLI, claude.ai, or any MCP client
1. Install MariaDB
Download from mariadb.org and create an empty database:
CREATE DATABASE mxai_knowledge CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
2. Configure
Copy and edit the config template:
copy mxLoreMCP.ini.example mxLoreMCP.ini
Set your database password in mxLoreMCP.ini:
[Database]
Password=your_db_password
That's the only required change. MariaDB is auto-detected from your installation.
3. Start
mxLoreMCP.exe
The server will:
- Auto-detect your MariaDB installation (registry, common paths)
- Create the database schema automatically on first boot
- Start the MCP server on port 8080
- Start the Admin UI on port 8081
4. First Setup
Open http://localhost:8081 in your browser. The Admin UI is open without login on first start (no developers yet). Create your first developer and API key.
5. Connect Claude Code
First, download the setup skill:
# Windows (PowerShell)
mkdir "$env:USERPROFILE\.claude\skills\mxSetup" -Force
Invoke-WebRequest -Uri "https://raw.githubusercontent.com/MicrotronX/mxLore-skills/main/mxSetup/SKILL.md" -OutFile "$env:USERPROFILE\.claude\skills\mxSetup\SKILL.md"
# Linux / macOS
mkdir -p ~/.claude/skills/mxSetup
curl -o ~/.claude/skills/mxSetup/SKILL.md https://raw.githubusercontent.com/MicrotronX/mxLore-skills/main/mxSetup/SKILL.md
Then in Claude Code, run:
/mxSetup
Enter your server URL (http://localhost:8080/mcp) and API key when prompted. mxSetup installs all remaining skills, hooks, proxy, and configures the MCP connection automatically.
Network Security
| Scenario | Setup |
|---|---|
| Localhost (single developer) | HTTP is fine. Default: BindAddress=127.0.0.1 |
| LAN (team, internal network) | Change BindAddress=0.0.0.0 in INI. HTTP acceptable if network is trusted. |
| WAN / Cloud (public internet) | HTTPS required. Use a reverse proxy (IIS, nginx, Apache) with TLS certificates. |
Password Security
The INI file supports two formats for database and API passwords:
- Plain text (default, simplest):
Password=mypassword - XOR obfuscation (optional):
PasswordEnc=<hex>— generate withmxLoreMCP.exe --encrypt "mypassword"
Note: XOR obfuscation prevents casual reading of passwords in the INI file. It is NOT encryption. For real security, restrict file system access to
mxLoreMCP.ini.
Architecture
- Stack: Delphi (RAD Studio) + TMS Sparkle + FireDAC + MariaDB
- Protocol: MCP 2024-11-05 (JSON-RPC 2.0 over HTTP+SSE)
- Auth: PBKDF2-HMAC-SHA256 API keys, per-project ACL
- Units: 43 Delphi units, dot-notation (
mx.*.pas), 5 layers
Directory Structure
mxLoreMCP.exe — Server (console)
mxLoreMCPGui.exe — Server (GUI with tray icon)
mxLoreMCP.ini — Configuration (create from .example)
mxLoreMCP.ini.example — Config template with documentation
sql/
setup.sql — Database schema (auto-run on first boot)
admin/
www/ — Admin UI (HTML/CSS/JS, served by the server)
lib/
libmariadb.dll — MariaDB client (or auto-detected from your MariaDB installation)
logs/ — Auto-created, log rotation at 5 MB
backups/ — Auto-created, mysqldump backups
Skills (separate repo: mxLore-skills)
11 Claude Code skills for AI-assisted workflows:
| Skill | Purpose |
|---|---|
/mxOrchestrate |
Session orchestrator — workflows, ad-hoc tasks, team agents |
/mxSave |
Persist session state to DB |
/mxPlan |
Create implementation plans |
/mxSpec |
Write specifications |
/mxDecision |
Document architectural decisions (ADRs) |
/mxDesignChecker |
Review code/design against specs |
/mxBugChecker |
Find bugs with verification |
/mxHealth |
Knowledge DB consistency checks |
/mxSetup |
Developer onboarding (installs skills + proxy) |
/mxInitProject |
Bootstrap new project in DB |
/mxMigrateToDb |
Migrate local docs to MCP |
Install all via: /mxSetup in Claude Code.
Using claude.ai (web/desktop)
mxLore also works with claude.ai — no terminal needed:
- Open claude.ai → Settings → Integrations → Add MCP Server
- Name:
mxLore - URL:
http://your-server:8080/mcp - Auth Header:
Authorization: Bearer mxk_your_api_key
All 39 MCP tools are available in claude.ai conversations. Available on Claude Pro, Team, and Enterprise plans. Note: Skills (/mxOrchestrate etc.) are Claude Code only.
License
Server: BSL 1.1 (Business Source License) — see LICENSE.txt
- Source available: read, review, modify
- Pre-built binaries: no Delphi or TMS license needed
- Non-commercial use (personal projects, open source, students, evaluation): free
- Commercial use: €149 one-time — any size team, unlimited everything. Contact [email protected]
- After the change date (4 years), converts to Apache 2.0
Skills: MIT — fully open source, no restrictions. See mxLore-skills.
Important: To compile the server from source, you need RAD Studio (Delphi) and TMS Sparkle — both are commercial products. Most users should use the pre-built binaries from GitHub Releases, which have no such requirement.
Third-Party
libmariadb.dll— MariaDB Connector/C, LGPL 2.1. Source. Not bundled — auto-detected from your MariaDB installation.
Why mxLore?
AI coding assistants forget everything between sessions. Your specs, decisions, lessons learned — gone. mxLore gives your AI a persistent knowledge base it can search, recall, and learn from. Self-hosted, your data stays yours.
See how it works at mxlore.dev — features, comparison, quick start guide.
Links
- mxlore.dev — Features, demo, documentation
- MicrotronX/mxLore — Server source code
- MicrotronX/mxLore-skills — Claude Code skills
- MicrotronX — More tools by MicrotronX
Reviews (0)
Sign in to leave a review.
Leave a reviewNo results found