
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@sensegrep/mcp
Advanced tools
MCP server exposing sensegrep's semantic + structural code search to AI agents, delivering smaller, more relevant context.
MCP server exposing sensegrep capabilities to AI coding assistants.
npm install -g @sensegrep/mcp
{
"mcpServers": {
"sensegrep": {
"command": "npx",
"args": ["-y", "@sensegrep/mcp"]
}
}
}
Or with global install first:
npm install -g @sensegrep/mcp
{
"mcpServers": {
"sensegrep": {
"command": "sensegrep-mcp"
}
}
}
For local MCP 2026-07-28 experiments, run sensegrep-mcp-http with
SENSEGREP_ROOT pointing at an already indexed checkout. It binds to
127.0.0.1:7337/mcp, creates a fresh server per request, disables the watcher,
and exposes query tools without sensegrep_index or caller-controlled
rootDir. This entrypoint is not production-ready: remote deployment still
requires authentication, authorized workspace IDs, persistent index storage,
and a separate indexing worker. The existing sensegrep-mcp stdio entrypoint
remains the supported local/indexing path.
Canonical tool names:
sensegrep_searchsensegrep_showsensegrep_literalsensegrep_contextsensegrep_surveysensegrep_clustersensegrep_graphsensegrep_indexsensegrep_detect_duplicatesSearch returns schema v2 compact cards by default. Call sensegrep_show with a selected
card id, or set resultDetail to content/full, to expand only the evidence an agent
needs. MCP publishes an output schema and returns the complete payload once in
structuredContent; textual content is only a short transport summary. Results report
retrieval sufficiency, compact index state, applicable budgets, and structured warnings.
Legacy aliases are still accepted for compatibility:
sensegrep.searchsensegrep.indexsensegrep.detect_duplicatesCommon MCP/runtime variables:
SENSEGREP_ROOT - root directory to index/searchSENSEGREP_WATCH - watcher toggle (0, false, off, no disables)SENSEGREP_PROVIDER - ollama, gemini, openai, or bedrockSENSEGREP_EMBED_MODEL, SENSEGREP_EMBED_DIMGEMINI_API_KEY / GOOGLE_API_KEYSENSEGREP_OPENAI_API_KEY / FIREWORKS_API_KEY / OPENAI_API_KEYFor the complete and official list, see docs/mcp-setup.md in the repository.
FAQs
MCP server exposing sensegrep's semantic + structural code search to AI agents, delivering smaller, more relevant context.
The npm package @sensegrep/mcp receives a total of 168 weekly downloads. As such, @sensegrep/mcp popularity was classified as not popular.
We found that @sensegrep/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.