Koma Core MCP

Expose Koma Core's protected RAG storage as MCP tools for AI agents. Discovery ≠ Authorization. Agents can search the public index, but retrieve private content only with the correct access tier. It runs locally over stdio via the published package.

People connecting AI & ML tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-08-25 · ★ 11 · #27 OF 95 MAINTAINED AI & ML · VERIFIED 2026-08-25

MIT · TypeScript servers · how we verify → /methodology

01 · Install Koma Core MCP

before you install - you'll need

KOMA_MASTER_KEY

Environment variables documented in the project's README - it lists which are required and which have defaults.

Claude Code

claude mcp add swnotmetal-project-koma-packages-koma-co -- npx -y koma-core-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "swnotmetal-project-koma-packages-koma-co": {
      "command": "npx",
      "args": [
        "-y",
        "koma-core-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

repo age created 2026-07-24 - young repo, little track record yet

license MIT - declared in the repository

npm package koma-core-mcp - unscoped; check the name against the project README before installing

registry namespace io.github.swnotmetal is GitHub-verified and matches the repo owner

03 · What Koma Core MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

An agent gets 2 documented tools across read & search, retrieve, including search_docs, retrieve_doc.

The 2 tools it gives your agent

Extracted from the project's README - what Koma Core MCP lets an agent do.

search_docs
retrieve_doc
- Returns full content only if userTier ≥ the document's tier.

Latest releases

v0.2.1 · 2026-08-11

v0.2.0 · 2026-08-07

Koma Gate evaluated against deepset/prompt-injections with real providers (DeepSeek & Gemini), fail-closed mode. Zero false positives, full reproducibility.

v0.1.2 · 2026-08-05

Enriched npm keywords for search visibility (prompt-injection, llm-security, audio-validation) · Added .cursorrules for AI coding agents · Added llms.txt for LLM crawlers · OWASP Top 10 LLM references in README and…

04 · Who maintains Koma Core MCP

Koma Core MCP is maintained by swnotmetal. We track 2 MCP servers from swnotmetal - 2 actively maintained, 11 combined GitHub stars, oldest repo from Jul 2026.

  1. Koma Gate MCP Classifies prompt injection, jailbreaks, and out-of-scope user input before agents act on it. ★ 11

05 · Facts

category
AI & ML - ranked #27 of 95 actively-maintained AI & ML servers as of 2026-08-25.
release cadence
3 releases in the last 90 days (latest 2026-08-11)
registry
io.github.swnotmetal/koma-core-mcp (active, first published 2026-08-15)
packages
npm:koma-core-mcp

06 · Koma Core MCP FAQ

What is Koma Core MCP?

Expose Koma Core's protected RAG storage as MCP tools for AI agents. Discovery ≠ Authorization. Agents can search the public index, but retrieve private content only with the correct access tier. It runs locally over stdio via the published package.

Is Koma Core MCP still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-25 and it shipped 3 releases in the last 90 days. We re-verify nightly.

How do I install Koma Core MCP?

Run `npx -y koma-core-mcp`. The README documents one environment variable (KOMA_MASTER_KEY) to set first. You can also paste the ready-made client config above.

Does Koma Core MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Koma Core MCP

More AI & ML MCP servers · Koma Gate MCP · Glassbox Framework · Terradev · Lacuna Research MCP · Reftrixmcp

More TypeScript MCP servers · Image Reader MCP · PDF Reader MCP · Video Reader MCP · Code Inspectus · see all