mxLore

mcp
Guvenlik Denetimi
Basarisiz
Health Uyari
  • License — License: NOASSERTION
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Basarisiz
  • network request — Outbound network request in admin/www/js/api.js
  • rm -rf — Recursive force deletion command in build-release.sh
  • fs module — File system access in claude-setup/hooks/orchestrate-reconcile.js
  • fs module — File system access in claude-setup/hooks/orchestrate-status.js
  • fs module — File system access in claude-setup/hooks/orchestrate-status.sh
  • fs module — File system access in claude-setup/hooks/orchestrate-step-check.js
Permissions Gecti
  • Permissions — No dangerous permissions requested
Purpose
This self-hosted server provides a persistent knowledge base and institutional memory for AI coding assistants. It tracks architectural decisions, project specifications, and lessons learned across multiple codebases via the Model Context Protocol (MCP).

Security Assessment
Overall Risk: Medium. The tool requires a MariaDB database, meaning it directly handles and stores your development data. The automated scan flagged several potential concerns. There is an outbound network request in the API JavaScript, and multiple scripts utilize file system access to orchestrate tasks. Most notably, the `build-release.sh` script contains a dangerous recursive force deletion (`rm -rf`) command. While this is likely just part of the build cleanup process, it is a standard hazard in open-source projects and warrants a quick manual code review before executing any local builds. The repository does not appear to contain hardcoded secrets or request inherently dangerous OS permissions.

Quality Assessment
The project is clearly documented and actively maintained, with its most recent push occurring today. However, community trust and visibility are currently very low. It only has 5 GitHub stars, indicating that few external developers have reviewed or vetted the code. Furthermore, the repository lacks a clearly defined open-source license (marked as NOASSERTION), which is a significant drawback for commercial or enterprise adoption as it leaves usage rights legally ambiguous.

Verdict
Use with caution — the low visibility and lack of a formal license mean you should review the codebase yourself before integrating it into sensitive workflows.
SUMMARY

Self-hosted MCP server for AI coding assistants. Persistent knowledge base with 39 tools, 11 skills, institutional memory.

README.md

mxLore

Self-hosted MCP server for AI-assisted software development. Stores architectural decisions, specs, plans, findings, and lessons learned — accessed via Model Context Protocol tools from AI coding assistants. Works with claude.ai, Claude Code, Cursor, Windsurf, and any MCP client.

New here? Check out the product overview at mxlore.dev first — see what mxLore does, how it compares, and why your AI assistant needs a memory.

Features

  • 39 MCP Tools — search, create, update, recall knowledge across projects
  • Multi-Project — one server, many codebases, cross-project search
  • Skill Evolution — tracks which AI checker rules actually help, auto-tunes
  • Institutional Memory — lessons learned with recall, gate levels, graph-based knowledge links
  • Multi-Agent — agents communicate across projects via message bus
  • Admin UI — web dashboard for developers, keys, projects, intelligence metrics
  • AI Batch — automatic summaries, tagging, stale detection at boot time
  • Works in claude.ai — CTOs and PMs use mxLore from a chat window, developers from Claude Code — same server, same knowledge

Quick Start (5 minutes)

Prerequisites

  • Windows x64
  • MariaDB 10.6+ (recommended: 11.x)
  • Claude Code CLI, claude.ai, or any MCP client

1. Install MariaDB

Download from mariadb.org and create an empty database:

CREATE DATABASE mxai_knowledge CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;

2. Configure

Copy and edit the config template:

copy mxLoreMCP.ini.example mxLoreMCP.ini

Set your database password in mxLoreMCP.ini:

[Database]
Password=your_db_password

That's the only required change. MariaDB is auto-detected from your installation.

3. Start

mxLoreMCP.exe

The server will:

  • Auto-detect your MariaDB installation (registry, common paths)
  • Create the database schema automatically on first boot
  • Start the MCP server on port 8080
  • Start the Admin UI on port 8081

4. First Setup

Open http://localhost:8081 in your browser. The Admin UI is open without login on first start (no developers yet). Create your first developer and API key.

5. Connect Claude Code

First, download the setup skill:

# Windows (PowerShell)
mkdir "$env:USERPROFILE\.claude\skills\mxSetup" -Force
Invoke-WebRequest -Uri "https://raw.githubusercontent.com/MicrotronX/mxLore-skills/main/mxSetup/SKILL.md" -OutFile "$env:USERPROFILE\.claude\skills\mxSetup\SKILL.md"

# Linux / macOS
mkdir -p ~/.claude/skills/mxSetup
curl -o ~/.claude/skills/mxSetup/SKILL.md https://raw.githubusercontent.com/MicrotronX/mxLore-skills/main/mxSetup/SKILL.md

Then in Claude Code, run:

/mxSetup

Enter your server URL (http://localhost:8080/mcp) and API key when prompted. mxSetup installs all remaining skills, hooks, proxy, and configures the MCP connection automatically.

Network Security

Scenario Setup
Localhost (single developer) HTTP is fine. Default: BindAddress=127.0.0.1
LAN (team, internal network) Change BindAddress=0.0.0.0 in INI. HTTP acceptable if network is trusted.
WAN / Cloud (public internet) HTTPS required. Use a reverse proxy (IIS, nginx, Apache) with TLS certificates.

Password Security

The INI file supports two formats for database and API passwords:

  • Plain text (default, simplest): Password=mypassword
  • XOR obfuscation (optional): PasswordEnc=<hex> — generate with mxLoreMCP.exe --encrypt "mypassword"

Note: XOR obfuscation prevents casual reading of passwords in the INI file. It is NOT encryption. For real security, restrict file system access to mxLoreMCP.ini.

Architecture

  • Stack: Delphi (RAD Studio) + TMS Sparkle + FireDAC + MariaDB
  • Protocol: MCP 2024-11-05 (JSON-RPC 2.0 over HTTP+SSE)
  • Auth: PBKDF2-HMAC-SHA256 API keys, per-project ACL
  • Units: 43 Delphi units, dot-notation (mx.*.pas), 5 layers

Directory Structure

mxLoreMCP.exe          — Server (console)
mxLoreMCPGui.exe       — Server (GUI with tray icon)
mxLoreMCP.ini          — Configuration (create from .example)
mxLoreMCP.ini.example  — Config template with documentation
sql/
  setup.sql            — Database schema (auto-run on first boot)
admin/
  www/                 — Admin UI (HTML/CSS/JS, served by the server)
lib/
  libmariadb.dll     — MariaDB client (or auto-detected from your MariaDB installation)
logs/                  — Auto-created, log rotation at 5 MB
backups/               — Auto-created, mysqldump backups

Skills (separate repo: mxLore-skills)

11 Claude Code skills for AI-assisted workflows:

Skill Purpose
/mxOrchestrate Session orchestrator — workflows, ad-hoc tasks, team agents
/mxSave Persist session state to DB
/mxPlan Create implementation plans
/mxSpec Write specifications
/mxDecision Document architectural decisions (ADRs)
/mxDesignChecker Review code/design against specs
/mxBugChecker Find bugs with verification
/mxHealth Knowledge DB consistency checks
/mxSetup Developer onboarding (installs skills + proxy)
/mxInitProject Bootstrap new project in DB
/mxMigrateToDb Migrate local docs to MCP

Install all via: /mxSetup in Claude Code.

Using claude.ai (web/desktop)

mxLore also works with claude.ai — no terminal needed:

  1. Open claude.ai → Settings → Integrations → Add MCP Server
  2. Name: mxLore
  3. URL: http://your-server:8080/mcp
  4. Auth Header: Authorization: Bearer mxk_your_api_key

All 39 MCP tools are available in claude.ai conversations. Available on Claude Pro, Team, and Enterprise plans. Note: Skills (/mxOrchestrate etc.) are Claude Code only.

License

Server: BSL 1.1 (Business Source License) — see LICENSE.txt

  • Source available: read, review, modify
  • Pre-built binaries: no Delphi or TMS license needed
  • Non-commercial use (personal projects, open source, students, evaluation): free
  • Commercial use: €149 one-time — any size team, unlimited everything. Contact [email protected]
  • After the change date (4 years), converts to Apache 2.0

Skills: MIT — fully open source, no restrictions. See mxLore-skills.

Important: To compile the server from source, you need RAD Studio (Delphi) and TMS Sparkle — both are commercial products. Most users should use the pre-built binaries from GitHub Releases, which have no such requirement.

Third-Party

  • libmariadb.dll — MariaDB Connector/C, LGPL 2.1. Source. Not bundled — auto-detected from your MariaDB installation.

Why mxLore?

AI coding assistants forget everything between sessions. Your specs, decisions, lessons learned — gone. mxLore gives your AI a persistent knowledge base it can search, recall, and learn from. Self-hosted, your data stays yours.

See how it works at mxlore.dev — features, comparison, quick start guide.

Links

Yorumlar (0)

Sonuc bulunamadi