mcpField
M
my-pi

my-pi

Local
github.com/BoxBoxmariDeveloper Tools3Updated 3w ago
Repository

About my-pi

my-pi is a local-first MCP runtime for coding agents, providing codebase access through bounded file operations, AST/LSP navigation, and Git tools. It defaults to read-only; writes and language-server processes require explicit enablement.

Key features

  1. 01Restrict workspace file access
  2. 02Guard writes with content fingerprints
  3. 03Navigate code with AST search and LSP
  4. 04Inspect Git status and diffs
  5. 05Use a read-only default security profile

Use cases

  1. 01Browse a codebase with controlled permissions
  2. 02Find definitions and references by symbol
  3. 03Review diagnostics and code changes
  4. 04Enable writes for a trusted workspace

MCP support

It runs as a stdio MCP server and provides coding clients with filesystem, search, AST/LSP, and Git tools. File modifications and language-server process startup require explicit authorization; the default profile is read-only.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "boxboxmari-my-pi": {
      "command": "npx",
      "args": [
        "-y",
        "@koonwang03/my-pi"
      ]
    }
  }
}
Run commandnpx -y @koonwang03/my-pi

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npm@koonwang03/my-pi0.1.0-alpha.2

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

From the project README

my-pi

npm version npm downloads Listed on mcpservers.org my-pi MCP server – quality and maintenance score on Glama CI status License

my-pi is a local-first Model Context Protocol (MCP) runtime for coding agents that need controlled access to a real codebase without handing the agent an unrestricted shell.

It combines bounded filesystem operations, content-preconditioned writes, structural AST search, language-server navigation, Git status/diff tooling, and an explicit read-only-by-default security model behind one stdio MCP server.

Why my-pi

  • Local-first: source code and detailed workspace state stay on the host.
  • Read-only by default: mutation and language-server process startup require explicit elevation.
  • Safer writes: updates can be guarded by content fingerprints instead of blind overwrites.
  • Code-aware navigation: Tree-Sitter AST search plus LSP symbols, definitions, references, hover, and diagnostics.
  • Git-aware context: bounded status and diff capabilities without exposing an unrestricted command runner.
  • Host-neutral: designed for MCP-capable coding environments including Claude Code, Cursor, and OpenCode.

Install and run

Requires Node.js >=24.0.0.

npm install -g @koonwang03/my-pi
my-pi-mcp --workspace /path/to/project

Or inspect a generated host configuration without a global install:

npx --yes --package @koonwang03/my-pi my-pi-mcp host-config cursor-local

The server starts in the read-only security profile. Enable writes and language-server processes only for a trusted workspace:

my-pi-mcp --workspace /path/to/project --security-profile trusted

Starting without --workspace or MY_PI_WORKSPACE_ROOT fails closed. Use --allow-cwd only as an intentional opt-in to the current directory.

Core MCP capabilities

The stable alpha surface exposes 13 tools across four groups:

  • Filesystem: fs_read, fs_write, fs_patch, fs_stat
  • Search/workspace: search, workspace_info
  • AST/LSP: ast_search, lsp_status, lsp_symbols, lsp_navigate, lsp_diagnostics
  • Git: vcs_status, vcs_diff

Structural AST search supports TypeScript, JavaScript, Python, Rust, and Go. LSP integrations support TypeScript, Python, Rust, and Go when compatible language-server executables are available on the host.

Generate host configuration

my-pi-mcp host-config claude-code-local
my-pi-mcp host-config cursor-local
my-pi-mcp host-config opencode-current-local

Security model

my-pi uses explicit workspace authority and pre-read sensitive-path policy. The default profile is intentionally restrictive; trusted mode is an explicit opt-in for mutation and language-server processes.

Review the full security model before enabling trusted mode:

https://github.com/BoxBoxmari/my-pi/blob/main/docs/SECURITY_MODEL.md

Project status

Current release channel: alpha. The package is intended for evaluation and controlled local development while coordination/evaluation features under the repository's "Production Next" work remain experimental.

Repository, architecture, benchmarks, release evidence, and contribution details:

https://github.com/BoxBoxmari/my-pi

The primary executable is my-pi-mcp; ccr-mcp is retained as a compatibility alias.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.