"A local-only document search tool" matching MCP servers:

Encoding-aware, indentation-smart file tools for AI coding agents. 20+ tools including read/edit with automatic encoding detection, smart indentation conversion, SSH, SFTP, process management, and system utilities.

Local-first Microsoft Outlook MCP server: a single Go binary that manages calendar events and mail through the Microsoft Graph API over stdio, with tokens stored in the OS keychain and no Entra ID app registration required. Exposes four aggregate tools (calendar, mail, account, system) dispatched by an operation verb, with multi-account support and read-only and mail-gating modes.

Provides fully local, privacy-preserving semantic search over file names and paths via MCP, using BGE embeddings for fuzzy matching and supporting incremental updates, watch mode, and a loopback-only HTTP server.

Lets a human review what an AI agent is about to post to a chat tool (Slack first) before it is sent. Renders the draft, destination and warnings (@here/@channel, unresolved mentions, format issues) in a neutral local HTML preview; never sends anything.

Use Tavily Search to search for news pages or images.

MCP server that provides web search via LLM API gateways with server-side search, returning cited answers and multi-provider fallback.

Connects AI tools to GitHub and local git repositories, enabling natural language management of issues, PRs, code analysis, and workflows.

An MCP front-end for AnB. The tool surface is "use-don't-reveal": no tool returns a plaintext secret. Reveal paths require a TTY the server doesn't have, so the no-reveal guarantee is structural, not prompt-based — it holds even against a prompt-injected agent. Runs as a dedicated, narrowly-scoped AnB identity; exec is default-deny (only allowlist rules tagged scope=mcp run); command output

Hybrid search over your local documents, with file and page citations. One binary, fully local.

Operations toolchain for SQLite, Cloudflare D1, and Turso. Every command is available as both a CLI and an MCP tool: inspect, diff, migrate, monitor, back up, and repair databases. 22 stdio tools, read-only by default.

Local-first MCP proxy with BM25 tool discovery, quarantine security, Docker isolation, OAuth support, activity logging, and web UI. Routes multiple upstream MCP servers through a single endpoint.

MCP gateway/proxy: multiplexes tool calls across upstream MCP servers into one aggregated, namespaced catalog and logs every call. Local, single-user, $0/month by default.

MCP server that indexes Markdown, Word, HTML, and PDF documents into a SQLite knowledge graph with CJK+Latin full-text search and cross-document reference tracking. Runs drift audits to surface stale policies, conflicting research claims, superseded ADRs, and undocumented code exports.

Go MCP server for multi-format document access — PDF, TXT, MD, DOCX, CSV, images. 12 tools including OCR, search, table extraction, and URL fetch. Single binary, no runtime.

A Zotero MCP server built for agent safety: a capability-tagged tool registry (every command carries operation/requires/destructive annotations), preview-first writes behind a mutation journal, and read-only defaults. Single Go binary with an MCPB one-click manifest for Claude Desktop.

Enables read-only search and retrieval of your email across multiple IMAP accounts through a local notmuch index, served over authenticated HTTP for MCP clients like Claude or Codex.

An MCP orchestration layer that aggregates multiple MCP servers while exposing only 8 meta-tools, dramatically reducing context window usage, and provides SLOP scripting, event monitoring, and tool customization.

Serves offline document validation and evaluation operations of the Judgment Pack Specification to MCP clients over stdio, enabling agents to validate and evaluate JPS documents as tool calls. Supports conformance validation, experimental evaluation with disposition and error classes, and corpus testing.

Provides MCP clients typed tools for Apple Ads Platform research, reporting, auditing, and receipt-gated campaign management with a local-first, read-only-by-default safety model.

Enables agents to reduce tool noise by exposing only two meta-tools for searching downstream MCP servers and calling their tools on demand. Connections are lazy and tool lists are cached, so configured servers can be used without loading every tool upfront.