Kimi MCP Server
NPM · @TRISHCHUK/KIMI-MCP-SERVER · SCANNED AUG 3
MCP server bridging AI assistants to Moonshot AI Kimi Code CLI for code analysis and review
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security87
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 67 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability70
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2602 tokens (~185/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage92
- 93% of tools have a non-trivial description (not blank, and not just the tool's name).Partial
- 85% of tool parameters carry a description.Partial
- Structured output schemas are declared (29% of tools); any adoption earns full credit.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · @trishchuk/kimi-mcp-server
claude mcp add x51xxx-kimi-mcp-server -- npx -y @trishchuk/kimi-mcp-server
codex mcp add x51xxx-kimi-mcp-server -- npx -y @trishchuk/kimi-mcp-server
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"x51xxx-kimi-mcp-server": {
"type": "local",
"command": [
"npx",
"-y",
"@trishchuk/kimi-mcp-server"
],
"enabled": true
}
}
} openclaw mcp add x51xxx-kimi-mcp-server --command npx --arg -y --arg @trishchuk/kimi-mcp-server
mcp_servers:
x51xxx-kimi-mcp-server:
command: "npx"
args: ["-y", "@trishchuk/kimi-mcp-server"] {
"mcpServers": {
"x51xxx-kimi-mcp-server": {
"command": "npx",
"args": [
"-y",
"@trishchuk/kimi-mcp-server"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Aug 26 +16
- Known CVEs: partial → unverified ▼ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Tool coverage: 93 → unverified ▼ functional
- Dependency health: partial → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Security disclosure: fail → unverified ▼ functional
- Schema quality: unverified → good ▲ functional
- 1 Aug 26 +15
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 31 Jul 26 −18
- Malware scan: pass → unverified ▼ security
- 29 Jul 26 +24
- Dependency health: partial → unverified ▼ functional
- Tool coverage: unverified → 93 ▲ functional
- Schema quality: unverified → 100 ▲ functional
- 28 Jul 26 −24
- Schema quality: 100 → unverified ▼ functional
- Tool coverage: 93 → unverified ▼ functional
- Dependency health: unverified → partial ▲ functional
- 27 Jul 26 50
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/@trishchuk/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Dependencies 95 packages
95 packages in the resolved dependency tree · 95 deprecated · 29 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
ask-kimi ~657
Execute Kimi Code CLI with file analysis (@syntax), session resume, MCP passthrough, and safety controls.
| Name | Type | Req | Description |
|---|---|---|---|
| addDirs | array | — | Additional writable directories (--add-dir, repeatable). |
| afk | boolean | — | --afk: auto-approve in away-from-keyboard mode (print mode implies this). |
| agent | string | — | Builtin agent spec to use (--agent). "default" or "okabe". |
| agentFile | string | — | Custom agent spec file (--agent-file). |
| cd | string | — | Working directory |
| config | — | — | Configuration overrides — string (JSON/TOML) or object passed via --config. |
| configFile | string | — | Path to a config file (TOML or JSON). |
| continueLatest | boolean | — | Use --continue to resume the most recent Kimi session in cwd. |
| dryRun | boolean | — | Return the resolved CLI argv as JSON without spawning Kimi. |
| finalOnly | boolean | — | Add --final-message-only — skip intermediate tool-call output. Default: true. |
| includeMetadata | boolean | — | Include tool-call metadata in response (only meaningful with stream-json). |
| maxRalphIterations | integer | — | Extra autonomous iterations after the first turn (--max-ralph-iterations, -1 = unlimited). |
| maxStepsPerTurn | integer | — | Cap steps in one turn (--max-steps-per-turn). |
| mcpConfigFile | string | — | Path to an MCP config file with `mcpServers` (passed via --mcp-config-file). |
| model | string | — | Optional model override. Known: kimi-for-coding, kimi-k2-6, kimi-k2-6-turbo, kimi-k2-thinking-turbo, kimi-k2-5, kimi-latest. If omitted, uses your Kimi CLI default (~/.kimi/config.toml). |
| outputFormat | string | — | Kimi --output-format. "text" (default for clean responses) or "stream-json" (JSONL with assistant + tool messages). |
| plan | boolean | — | Start in plan mode (--plan). For richer planning, prefer the plan-kimi tool. |
| prompt | string | yes | Task or question. Use @ to include files (e.g., '@largefile.ts explain'). |
| quiet | boolean | — | Use --quiet (= --print --output-format text --final-message-only). |
| resetSession | boolean | — | Clear session context before execution. Starts fresh conversation. |
| responseMode | string | — | Response verbosity: "clean" returns only the final answer (default), "full" includes tool calls and stderr execution log. |
| sessionId | string | — | Internal session ID for conversation continuity (workspace-isolated). |
| skillsDirs | array | — | Custom skills directories (--skills-dir, repeatable). Overrides default discovery. |
| thinking | boolean | — | Toggle thinking mode (overrides default_thinking from config). |
| timeout | number | — | Maximum execution time in milliseconds (optional) |
| workingDir | string | — | Working directory for execution (alias of cd) |
| yolo | boolean | — | ⚠️ --yolo: auto-approve everything (dangerous, full file access). |
No output schema declared.
No examples provided.
batch-kimi ~196
Delegate multiple atomic tasks to Kimi for batch processing. Ideal for repetitive operations, mass refactoring, and automated transformations.
| Name | Type | Req | Description |
|---|---|---|---|
| concurrency | integer | — | Maximum parallel Kimi processes when parallel=true. Default: min(task count, 4) |
| model | string | — | Optional model override applied to every task. Known: kimi-for-coding, kimi-k2-6, kimi-k2-6-turbo, kimi-k2-thinking-turbo, kimi-k2-5, kimi-latest. |
| parallel | boolean | — | Execute independent tasks in parallel |
| stopOnError | boolean | — | Stop execution if any task fails |
| tasks | array | yes | Array of atomic tasks to delegate to Kimi |
| timeout | number | — | Maximum execution time per task in milliseconds |
| workingDir | string | — | Working directory for execution |
| yolo | boolean | — | Auto-approve everything (typical for batch jobs) |
| Name | Type | Req | Description |
|---|---|---|---|
| failed | number | yes | — |
| results | array | yes | — |
| skipped | number | yes | — |
| successful | number | yes | — |
| total | number | yes | — |
No examples provided.
bg-kimi ~318
Run Kimi CLI as a detached background task. Subactions: start (returns taskId), status, tail (log output), stop, remove, list. Use for long-running autonomous work — the MCP call returns immediately and you poll status later.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Background task action. |
| addDirs | array | — | — |
| agent | string | — | — |
| agentFile | string | — | — |
| cd | string | — | — |
| label | string | — | Human-readable label to identify this task later. |
| lines | integer | — | Lines to return from log tail. |
| maxRalphIterations | integer | — | Extra autonomous iterations after the first turn. -1 = unlimited. |
| maxStepsPerTurn | integer | — | — |
| mcpConfigFile | — | — | — |
| model | string | — | Optional model override. Known: kimi-for-coding, kimi-k2-6, kimi-k2-6-turbo, kimi-k2-thinking-turbo, kimi-k2-5, kimi-latest. |
| plan | boolean | — | Start in plan mode. |
| prompt | string | — | Prompt (required for action=start). |
| signal | string | — | Signal for stop action. |
| skillsDirs | array | — | — |
| taskId | string | — | Task ID returned by action=start. |
| thinking | boolean | — | — |
| workingDir | string | — | — |
| yolo | boolean | — | --yolo: auto-approve everything (default for bg tasks: afk; pass yolo for full power). |
No output schema declared.
No examples provided.
brainstorm ~261
Generate creative ideas using structured frameworks with domain context and feasibility analysis.
| Name | Type | Req | Description |
|---|---|---|---|
| afk | boolean | — | Auto-approve in AFK mode |
| cd | string | — | Working directory |
| constraints | string | — | Limitations: budget, time, technical, legal, etc. |
| domain | string | — | Domain: software, business, creative, research, product, marketing, etc. |
| existingContext | string | — | Background info or previous attempts |
| ideaCount | integer | — | Number of ideas (default: 12, range: 5-30) |
| includeAnalysis | boolean | — | Include feasibility/impact analysis |
| methodology | string | — | Framework: divergent, convergent, scamper, design-thinking, lateral, auto (default) |
| model | string | — | Optional model override. Known: kimi-for-coding, kimi-k2-6, kimi-k2-6-turbo, kimi-k2-thinking-turbo, kimi-k2-5, kimi-latest. If omitted, uses your Kimi CLI default. |
| prompt | string | yes | Brainstorming challenge or question |
| thinking | boolean | — | Enable thinking mode for deeper reasoning during ideation. |
| yolo | boolean | — | ⚠️ Bypass all approvals |
No output schema declared.
No examples provided.
delegate-kimi ~294
Delegate an implementation task to Kimi in an isolated git worktree. Kimi runs autonomously (--yolo) on a fresh branch, optionally looping against a test command. Returns a taskId; later 'collect' to grab the diff. Safe: changes are sandboxed, caller reviews & applies.
| Name | Type | Req | Description |
|---|---|---|---|
| acceptanceCriteria | array | — | Bullet list of criteria the implementation must satisfy. |
| action | string | — | start: spawn delegated task; status: check progress; collect: stop + return diff + cleanup option. |
| autoTest | string | — | Shell command Kimi should run after editing to validate (e.g., "npm test"). If passed, Kimi is told to loop until it passes. |
| baseBranch | string | — | Branch/commit to base the worktree on (default: current HEAD of repo). |
| branchName | string | — | Name for the new branch in the worktree. Default: kimi/<random>. |
| cleanup | boolean | — | On collect: also run `git worktree remove` after grabbing the diff. |
| maxRalphIterations | integer | — | Extra autonomous iterations (Ralph mode). Default 5 (use -1 for unlimited). |
| model | string | — | — |
| task | string | — | What Kimi should accomplish (required for action=start). |
| taskId | string | — | — |
| workingDir | string | — | Repo root (default: resolved automatically). |
No output schema declared.
No examples provided.
digest-kimi ~310
Ingest many files at once and answer a focused question. Uses Kimi's 262K context to swallow whole modules / docs that don't fit in the caller's context. Walks directories, filters by extension, truncates oversized files, caps total payload. Returns a concentrated brief.
| Name | Type | Req | Description |
|---|---|---|---|
| exclude | array | — | Substrings to exclude from paths (matched against relative path). Default: node_modules, .git, dist, build. |
| extensions | array | — | Filter by extensions when walking dirs (e.g., [".ts", ".tsx"]). Default: all text-like files. |
| maxBytesPerFile | integer | — | Truncate any single file above this size. Default: 200 KB. |
| maxTotalBytes | integer | — | Stop adding files once the total payload exceeds this (Kimi context is ~262K tokens / ~1MB safe). Default: 8 MB. |
| model | string | — | — |
| paths | array | yes | Files or directories to ingest. Directories are walked. Globs are NOT expanded — pass concrete paths. |
| question | string | yes | Focused question to answer using the provided files (e.g., "explain auth flow", "find dead code"). |
| recursive | boolean | — | Walk into subdirectories. Default: true. |
| shape | string | — | summary: 1-paragraph; detailed: structured deep-dive; qa: focused answer to the question. |
| timeout | number | — | — |
| workingDir | string | — | — |
No output schema declared.
No examples provided.
health ~46
Check Kimi CLI installation, authentication, and session health
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | — | Optional session ID to check specific session health |
| verbose | boolean | — | Include detailed diagnostic information |
| Name | Type | Req | Description |
|---|---|---|---|
| issues | array | yes | — |
| kimiCli | object | yes | — |
| sessions | object | yes | — |
| status | string | yes | — |
No examples provided.
Help ~14
Show Kimi CLI help output
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list-sessions ~59
List active conversation sessions with metadata, or manage them (delete/clear)
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | — | Action: list (default), delete (single session), clear (all sessions) |
| sessionId | string | — | Session ID for delete action |
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | — |
| sessions | array | — | — |
| stats | object | — | — |
No examples provided.
metrics ~20
Expose Prometheus-formatted metrics for Kimi MCP server
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
ping ~19
Echo
| Name | Type | Req | Description |
|---|---|---|---|
| prompt | string | — | Message to echo |
No output schema declared.
No examples provided.
plan-kimi ~178
Generate a structured implementation plan using Kimi's --plan mode. Use BEFORE coding to get steps, files-to-touch, risks, and open questions. Distinct from ask-kimi: uses --plan flag (different system prompt) and parses structured output.
| Name | Type | Req | Description |
|---|---|---|---|
| acceptance | array | — | Acceptance criteria the plan must satisfy. |
| constraints | string | — | Hard constraints (must-not-touch areas, style rules, deadlines). |
| contextFiles | array | — | Paths/globs to include as @-references in the prompt. |
| format | string | — | Output shape. json (default) returns structured steps/risks; markdown returns a checklist. |
| goal | string | yes | What you want planned (a feature, refactor, investigation). |
| model | string | — | — |
| timeout | number | — | — |
| workingDir | string | — | — |
No output schema declared.
No examples provided.
review-changes ~217
Run a code review against the current repository using Kimi (collects git diff + structured review prompt).
| Name | Type | Req | Description |
|---|---|---|---|
| base | string | — | Review changes against a specific base branch (e.g., "main", "develop") |
| commit | string | — | Review changes introduced by a specific commit SHA |
| model | string | — | Optional model override. Known: kimi-for-coding, kimi-k2-6, kimi-k2-6-turbo, kimi-k2-thinking-turbo, kimi-k2-5, kimi-latest. If omitted, uses your Kimi CLI default. |
| prompt | string | — | Custom review instructions or focus areas (optional) |
| thinking | boolean | — | Enable thinking mode for deeper review (recommended). |
| timeout | number | — | Maximum execution time in milliseconds |
| title | string | — | Optional title for the review summary |
| uncommitted | boolean | — | Review staged + unstaged + untracked changes (working tree) |
| workingDir | string | — | Working directory to run the review in |
No output schema declared.
No examples provided.
version ~13
Display version and system information
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| kimiCli | string | — | — |
| mcpServer | string | yes | — |
| nodeJs | string | yes | — |
| platform | string | yes | — |
No examples provided.