# Distil (pypi · distil-llm)

Reversibly compress tool outputs to recoverable handles; expand to exact original bytes on demand.

- Trust score: 70/100 (medium)
- Change this week: −7
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- pypi · `distil-llm`: 70/100 (this document), [markdown](https://verifymcp.io/servers/dshakes-distil/distil-llm.md), [page](https://verifymcp.io/servers/dshakes-distil/distil-llm)

## Channel facts

- Registry: `pypi`
- Package: `distil-llm`
- Version: `1.30.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 100/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - Runs hatchling.build at install time, a recognised native-build step with no shell scripting around it.
  - No production dependencies, so there is no dependency health to assess.
- **Provenance & Transparency**: 32/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - License check failed: no license is declared.
  - Actively maintained (last published 2 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 72/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 479 tokens (~159/item across 3 items; 3 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add dshakes-distil -- uvx distil-llm
```

### Codex

```bash
codex mcp add dshakes-distil -- uvx distil-llm
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dshakes-distil": {
      "type": "local",
      "command": [
        "uvx",
        "distil-llm"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add dshakes-distil --command uvx --arg distil-llm
```

### Hermes

```yaml
mcp_servers:
  dshakes-distil:
    command: "uvx"
    args: ["distil-llm"]
```

### Other

```json
{
  "mcpServers": {
    "dshakes-distil": {
      "command": "uvx",
      "args": [
        "distil-llm"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 70, +19)

- [security improvement] Malware scan: unverified → pass
- [functional improvement] Stability: unverified → 0.27

### 2026-07-31 (score 51, −8)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 59, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-26 (score 77)

First indexed and scored.

## MCP tools (3)

### `distil_compress` (~179 tokens)

Reversibly compress a text blob — typically a large tool output you want to keep in context cheaply. Returns JSON {"compressed": str, "handle": str|null, "tokens_saved": int}: a compact digest to keep in the conversation, plus an 8-hex handle that recovers the exact original bytes via distil_expand. The original is stored locally (encrypted, owner-only) and never sent anywhere. Use when a tool result is large enough that carrying it verbatim is wasteful; skip it for short text, which comes back unchanged with handle=null and tokens_saved=0. Errors return "error: ..." with isError set; nothing is stored.

Input parameters:

- `text` (string, required): Raw text to compress, passed verbatim — do not pre-summarize or truncate it, or the recovered original will be lossy.

### `distil_expand` (~212 tokens)

Recover the exact original text for an 8-hex handle returned by distil_compress. Returns the original bytes as plain text — not JSON, not a summary. Use when the digest in context lacks a detail you now need (an exact line, value, or stack frame); prefer reading the digest first, since expanding spends the tokens compression saved. Reads a local, encrypted store, so it works across sessions and processes but not across machines. An unknown, expired, or evicted handle returns "error: no original found for handle ..." with isError set — re-run the original tool rather than retrying; the answer will not change. Handles age out after DISTIL_RESTORE_TTL_DAYS (default 14).

Input parameters:

- `handle` (string, required): The 8-hex handle from a prior distil_compress result or a digest stub in context, e.g. '3f9a1c07'. Content-addressed, so it is stable across runs; any other shape is rejected.

### `distil_savings` (~88 tokens)

Report cumulative savings from the local distil ledger as JSON {"runs": int, "tokens_saved": int, "dollars_saved": float}. Covers every request distil has compressed on this machine, not just this session. Use to answer 'how much has distil saved me'; it says nothing about whether any one compression was correct. Takes no arguments; an empty ledger reports zeros.

## Diagnostics

Captured diagnostic sections: Provenance, Install scripts, Dependencies. The full working is on the page: https://verifymcp.io/servers/dshakes-distil/distil-llm#diagnostics

## Score history

- 2026-08-03: 70
- 2026-08-02: 51
- 2026-08-01: 51
- 2026-07-31: 51
- 2026-07-30: 59
- 2026-07-28: 77
- 2026-07-27: 77
- 2026-07-26: 77

## Links

- PyPI project: https://pypi.org/project/distil-llm/
- Socket report: https://socket.dev/pypi/package/distil-llm
- Repository: https://github.com/dshakes/distil
- Changelog RSS feed: https://verifymcp.io/servers/dshakes-distil/distil-llm/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/dshakes-distil/distil-llm/changelog.json
- HTML version of this page: https://verifymcp.io/servers/dshakes-distil/distil-llm
