Loki Mode runs on your own machine — the client starts it, so there is no endpoint to ping. 39 006 installs a week from npm. Last commit 2 Nov 2026.
Autonomous spec-to-product coding-agent CLI with an MCP server exposing 39 tools over stdio.
What the code does
We read the source, 23 h ago · rules 995398eba69f
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
proc = subprocess.run(
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
log_error " Linux: curl -fsSL https://get.docker.com | sh"
return [`: ${HITS_TOKEN}`, 'B=$(mktemp -d "${TMPDIR:-/tmp}/loki-vpr.XXXXXX") || exit 125', 'trap \'rm -rf "$B"\' EXIT', f("loki_vpr_boot.py", "loki_vpr_boot.py"), f("loki_vpr_plugin.py", "loki_vpr_plugin.py"), f("loki_vpr_site.py", "sitecustomize.py"),
… xargs: ["-n", "-L", "-P", "-I", "-s", "-d", "-E", "-a"], sudo: ["-u", "-g", "-h", "-p", "-C", "-D", "-R", "-T", "-U"], doas: ["-u", "-C"], stdbuf: ["-i", "-o", "-e"], ionice: ["-c", "-n", "-p"], npx: ["-p", "--package"], bunx: [], pnpx: [], arch: [], taskset: ["-c"], chrt: [], t…
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
postinstall: node bin/loki-postinstall.js || exit 0
if [ -f "/.dockerenv" ] 2>/dev/null; then printf 'docker'; return; fi
subprocess.run(
const filePath = path.join(signalsDir, entry.name);
const child = spawn(RUN_SH, args, {
be_cmd_str, shell=True,
env = dict(os.environ)
card.innerHTML = rows;
import { existsSync, readdirSync, realpathSync, statSync, readFileSync, mkdtempSync, copyFileSync, rmSync } from "node:fs";
"/.ssh/",
&& curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" \
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
A tool parameter here reaches a dangerous call
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add loki-mode -- npx -y loki-mode{
"mcpServers": {
"loki-mode": {
"command": "npx",
"args": [
"-y",
"loki-mode"
]
}
}
}[mcp_servers.loki-mode]
command = "npx"
args = ["-y", "loki-mode"]{
"mcpServers": {
"loki-mode": {
"command": "npx",
"args": [
"-y",
"loki-mode"
]
}
}
}{
"servers": {
"loki-mode": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"loki-mode"
]
}
}
}Alternatives to Loki Mode
same job, measured the same wayA DynamoDB emulator with an MCP server exposing 35 DynamoDB tools to coding agents.
MCP server exposing 104+ modern CLI tools for AI agents with JSON output.
Discourse MCP CLI server (stdio) exposing Discourse tools via MCP
briefroom stdio MCP server — expose the briefroom CLI to Claude Code, Codex, and other agents.
GRU953 Crew's autonomous multi-agent coding method, exposed as callable MCP tools.
MCP server exposing 8004Swap (no-KYC agent-to-agent RFQ swap) as tools any MCP agent can call.
MCP server exposing Signet cryptographic signing, verification, and content hash tools over stdio.
Self-hosted MCP server exposing Claude Code as an agentic AI tool over streamable HTTP.
Loki Mode — questions
Answers built from our own checks of this server.