MCP Local RAG
Local RAG-like web search across 9+ backends with no API keys, running entirely on your machine for fresh web context.
Delv Safety Grade: C
Score 58/100 · assessed 2026-04-28
MCP Local RAG is a community-maintained search server by solo developer Nikhil Kapila that queries nine web search backends without API keys. It runs locally, scrapes web results, and returns chunked context for LLM consumption. The maintainer appears to be an individual contributor with moderate GitHub activity but limited organisational backing, creating bus factor concerns. The install method bypasses standard package registries, using git+https directly through uvx, which reduces supply chain verification. Permissions are moderately scoped: it makes outbound network requests to multiple search engines and scrapes web content, but doesn't touch filesystem writes or shell execution. The repository is open source with reasonable documentation, though the project is relatively young. No security incidents are known. The privacy-focused pitch is genuine, but the solo maintainer and non-standard install path warrant caution for production use.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREELocal document index.
Green flags
- No API keys or cloud dependencies required, genuine privacy benefit
- Open source with visible code and reasonable documentation
- Read-only search operations, no filesystem or shell access
- No known security incidents or malicious activity
- Supports multiple search backends for redundancy
Red flags
- Solo maintainer with limited organisational backing, bus factor risk
- Install via git+https bypasses package registry verification
- Web scraping across 9 backends increases attack surface
- Young project with limited community review and adoption
Permissions requested
Install
uvx --python=3.10 --from git+https://github.com/nkapila6/mcp-local-rag mcp-local-rag
Review
Install this if you need fresh web context for Claude without API costs or privacy leaks, and you're comfortable with the brittleness of web scraping. Skip it if you need production reliability or semantic search—this is a pragmatic developer tool, not a polished product.
Good at
- No API keys or cloud dependencies—runs entirely on your machine with no recurring costs.
- Nine different search backends with automatic fallback, so if one fails you still get results.
- Genuinely private—queries never leave your network, which matters for sensitive research.
- Straightforward install via uvx and works out of the box with Claude Desktop.
Watch out
- Web scraping is inherently fragile—backends time out, HTML changes, and results can be inconsistent.
- Chunking logic is basic, so you won't get semantic splitting or intelligent context windowing.
- Python 3.10-only requirement is restrictive if you're on a different version.
- Light documentation means you'll need to read the source to understand backend behaviour.
- Not suitable for production use—this is a prototype tool, not a reliable service.
Use cases
- offline-friendly web search
- private RAG
- multi-engine fallback
- cost-free research
Getting started
Works with
Similar MCPs
- Brave SearchGive Claude real-time web search via the Brave Search API. The fastest way to add up-to-date knowledge without paying for Perplexity.
- DuckDuckGo MCPWeb search through DuckDuckGo with built-in rate limiting, SafeSearch, and content fetching, no API key required.
- Kagi SearchPrivacy-focused search via Kagi. Great if your team already pays for Kagi and wants Claude to use the same backend.
- DelvSearch the Delv AI tools, MCP, and Skills directory directly from inside your agent. Ask 'what's a good MCP for databases?' in Claude Desktop and get editorial picks, not a random link dump.