@mixedbread-ai/mgrep
AMCP server package @mixedbread/mgrep
Install
agr install @mixedbread-ai/mgrep --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "@mixedbread/mgrep", "version": "0.1.13", "type": "module", "author": "Mixedbread support@mixedbread.com", "homepage": "https://www.mixedbread.com/", "bugs": { "url": "https://github.com/mixedbread-ai/mgrep/issues" }, "repository": { "type": "git", "url": "github:mixedbread-ai/mgrep" }, "main": "index.js", "bin": { "mgrep": "dist/index.js" }, "scripts": { "build": "tsc", "postbuild": "chmod +x dist/index.js && cp -r plugins dist/", "dev": "npx tsc && node dist/index.js", "test": "bats test/test.bats --filter-tags !long-running", "format": "biome check --write .", "format:check": "biome check .", "lint": "biome lint --check .", "typecheck": "tsc --noEmit", "prepare": "npm run build" }, "keywords": [ "mixedbread", "search", "grep", "glob", "search", "search" ], "files": [ "dist", "README.md" ], "license": "Apache-2.0", "description": "", "dependencies": { "@clack/prompts": "^0.11.0", "@mixedbread/sdk": "^0.43.0", "@modelcontextprotocol/sdk": "^1.22.0", "@types/express": "^5.0.5", "better-auth": "^1.3.34", "chalk": "^5.6.2", "commander": "^14.0.2", "comment-json": "^4.5.0", "ignore": "^7.0.5", "istextorbinary": "^9.5.0", "open": "^10.2.0", "ora": "^5.4.1", "p-limit": "^3.1.0", "winston": "^3.18.3", "winston-daily-rotate-file": "^5.0.0", "xxhash-wasm": "^1.1.0", "yaml": "^2.8.2", "yocto-spinner": "^1.0.0", "zod": "^4.1.12" }, "devDependencies": { "@biomejs/biome": "2.3.4", "@types/node": "^24.10.0", "bats": "^1.13.0", "bats-assert": "github:ztombol/bats-assert", "bats-support": "github:ztombol/bats-support", "husky": "^9.1.7", "typescript": "^5.9.3" } }
Trustgrade A
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-433fced5eda22026-08-03