npm install -g opensrc-mcp # or npx opensrc-mcp

{ "mcp": { "opensrc": { "type": "local", "command": "npx", "args": ["-y", "opensrc-mcp"] } } }

// Available in sandbox: declare const opensrc: { // Read operations list(): Source[]; has(name: string, version?: string): boolean; get(name: string): Source | undefined; files(sourceName: string, glob?: string): Promise<FileEntry[]>; tree(sourceName: string, options?: { depth?: number }): Promise<TreeNode>; grep(pattern: string, options?: { sources?: string[]; include?: string; maxResults?: number; }): Promise<GrepResult[]>; astGrep(sourceName: string, pattern: string, options?: { glob?: string; lang?: string | string[]; limit?: number; }): Promise<AstGrepMatch[]>; read(sourceName: string, filePath: string): Promise<string>; readMany(sourceName: string, paths: string[]): Promise<Record<string, string>>; resolve(spec: string): Promise<ParsedSpec>; // Mutation operations fetch(specs: string | string[], options?: { modify?: boolean }): Promise<FetchedSource[]>; remove(names: string[]): Promise<RemoveResult>; clean(options?: { packages?: boolean; repos?: boolean; npm?: boolean; pypi?: boolean; crates?: boolean; }): Promise<RemoveResult>; }; declare const sources: Source[]; // All fetched sources declare const cwd: string; // Project directory

// List all fetched sources async () => opensrc.list() // Fetch npm package (auto-detects version from lockfile) async () => opensrc.fetch("zod") // Fetch multiple packages async () => opensrc.fetch(["zod", "drizzle-orm", "hono"]) // Fetch GitHub repo at specific ref async () => opensrc.fetch("vercel/ai@v3.0.0") // Fetch from other registries async () => opensrc.fetch("pypi:requests") async () => opensrc.fetch("crates:serde") // Get directory tree async () => opensrc.tree("zod", { depth: 2 }) // Find TypeScript files async () => opensrc.files("zod", "**/*.ts") // Text search async () => opensrc.grep("parse", { sources: ["zod"], include: "*.ts" }) // AST search (structural pattern matching) async () => opensrc.astGrep("zod", "function $NAME($$$ARGS)", { glob: "**/*.ts" }) // Read a specific file async () => opensrc.read("zod", "src/index.ts") // Read multiple files (supports globs) async () => opensrc.readMany("zod", ["src/index.ts", "packages/*/package.json"]) // Remove a source async () => opensrc.remove(["zod"]) // Clean all npm packages async () => opensrc.clean({ npm: true })

~/.local/share/opensrc/ ├── sources.json # Index of fetched sources ├── packages/ # npm/pypi/crates packages │ └── zod/ │ ├── src/ │ ├── package.json │ └── ... └── repos/ # GitHub repos └── github.com/ └── vercel/ └── ai/

┌─────────────────────────────────────────────────────────────┐ │ Agent Context │ ├─────────────────────────────────────────────────────────────┤ │ Tool call: execute({ code: "async () => opensrc.fetch..." })│ │ ↓ │ │ Result: { success: true, source: { name: "zod", ... } } │ └─────────────────────────────────────────────────────────────┘ ↕ ┌─────────────────────────────────────────────────────────────┐ │ opensrc-mcp Server │ ├─────────────────────────────────────────────────────────────┤ │ Sandbox executes code with injected opensrc API │ │ Full source tree stays here, never sent to agent │ └─────────────────────────────────────────────────────────────┘