# Kimi MCP Server (npm · @trishchuk/kimi-mcp-server)

MCP server bridging AI assistants to Moonshot AI Kimi Code CLI for code analysis and review

- Trust score: 63/100 (medium)
- Change this week: +13
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@trishchuk/kimi-mcp-server`: 63/100 (this document), [markdown](https://verifymcp.io/servers/x51xxx-kimi-mcp-server/trishchuk-kimi-mcp-server.md), [page](https://verifymcp.io/servers/x51xxx-kimi-mcp-server/trishchuk-kimi-mcp-server)

## Channel facts

- Registry: `npm`
- Package: `@trishchuk/kimi-mcp-server`
- Version: `0.2.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 67 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 70/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 2602 tokens (~185/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 92/100
  - 93% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 85% of tool parameters carry a description.
  - Structured output schemas are declared (29% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add x51xxx-kimi-mcp-server -- npx -y @trishchuk/kimi-mcp-server
```

### Codex

```bash
codex mcp add x51xxx-kimi-mcp-server -- npx -y @trishchuk/kimi-mcp-server
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "x51xxx-kimi-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@trishchuk/kimi-mcp-server"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add x51xxx-kimi-mcp-server --command npx --arg -y --arg @trishchuk/kimi-mcp-server
```

### Hermes

```yaml
mcp_servers:
  x51xxx-kimi-mcp-server:
    command: "npx"
    args: ["-y", "@trishchuk/kimi-mcp-server"]
```

### Other

```json
{
  "mcpServers": {
    "x51xxx-kimi-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@trishchuk/kimi-mcp-server"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 63, +16)

- [security regression] Known CVEs: partial → unverified
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Tool coverage: 93 → unverified
- [functional regression] Dependency health: partial → unverified
- [functional regression] Schema quality: 100 → unverified
- [functional regression] Capabilities: pass → unverified
- [functional regression] Security disclosure: fail → unverified
- [functional improvement] Schema quality: unverified → good

### 2026-08-01 (score 47, +15)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-31 (score 32, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-29 (score 50, +24)

- [functional regression] Dependency health: partial → unverified
- [functional improvement] Tool coverage: unverified → 93
- [functional improvement] Schema quality: unverified → 100

### 2026-07-28 (score 26, −24)

- [functional regression] Schema quality: 100 → unverified
- [functional regression] Tool coverage: 93 → unverified
- [functional improvement] Dependency health: unverified → partial

### 2026-07-27 (score 50)

First indexed and scored.

## MCP tools (14)

### `ask-kimi` (~657 tokens)

Execute Kimi Code CLI with file analysis (@syntax), session resume, MCP passthrough, and safety controls.

Input parameters:

- `addDirs` (array): Additional writable directories (--add-dir, repeatable).
- `afk` (boolean): --afk: auto-approve in away-from-keyboard mode (print mode implies this).
- `agent` (string): Builtin agent spec to use (--agent). "default" or "okabe".
- `agentFile` (string): Custom agent spec file (--agent-file).
- `cd` (string): Working directory
- `config`: Configuration overrides — string (JSON/TOML) or object passed via --config.
- `configFile` (string): Path to a config file (TOML or JSON).
- `continueLatest` (boolean): Use --continue to resume the most recent Kimi session in cwd.
- `dryRun` (boolean): Return the resolved CLI argv as JSON without spawning Kimi.
- `finalOnly` (boolean): Add --final-message-only — skip intermediate tool-call output. Default: true.
- `includeMetadata` (boolean): Include tool-call metadata in response (only meaningful with stream-json).
- `maxRalphIterations` (integer): Extra autonomous iterations after the first turn (--max-ralph-iterations, -1 = unlimited).
- `maxStepsPerTurn` (integer): Cap steps in one turn (--max-steps-per-turn).
- `mcpConfigFile` (string): Path to an MCP config file with `mcpServers` (passed via --mcp-config-file).
- `model` (string): Optional model override. Known: kimi-for-coding, kimi-k2-6, kimi-k2-6-turbo, kimi-k2-thinking-turbo, kimi-k2-5, kimi-latest. If omitted, uses your Kimi CLI default (~/.kimi/config.toml).
- `outputFormat` (string): Kimi --output-format. "text" (default for clean responses) or "stream-json" (JSONL with assistant + tool messages).
- `plan` (boolean): Start in plan mode (--plan). For richer planning, prefer the plan-kimi tool.
- `prompt` (string, required): Task or question. Use @ to include files (e.g., '@largefile.ts explain').
- `quiet` (boolean): Use --quiet (= --print --output-format text --final-message-only).
- `resetSession` (boolean): Clear session context before execution. Starts fresh conversation.
- `responseMode` (string): Response verbosity: "clean" returns only the final answer (default), "full" includes tool calls and stderr execution log.
- `sessionId` (string): Internal session ID for conversation continuity (workspace-isolated).
- `skillsDirs` (array): Custom skills directories (--skills-dir, repeatable). Overrides default discovery.
- `thinking` (boolean): Toggle thinking mode (overrides default_thinking from config).
- `timeout` (number): Maximum execution time in milliseconds (optional)
- `workingDir` (string): Working directory for execution (alias of cd)
- `yolo` (boolean): ⚠️ --yolo: auto-approve everything (dangerous, full file access).

### `batch-kimi` (~196 tokens)

Delegate multiple atomic tasks to Kimi for batch processing. Ideal for repetitive operations, mass refactoring, and automated transformations.

Input parameters:

- `concurrency` (integer): Maximum parallel Kimi processes when parallel=true. Default: min(task count, 4)
- `model` (string): Optional model override applied to every task. Known: kimi-for-coding, kimi-k2-6, kimi-k2-6-turbo, kimi-k2-thinking-turbo, kimi-k2-5, kimi-latest.
- `parallel` (boolean): Execute independent tasks in parallel
- `stopOnError` (boolean): Stop execution if any task fails
- `tasks` (array, required): Array of atomic tasks to delegate to Kimi
- `timeout` (number): Maximum execution time per task in milliseconds
- `workingDir` (string): Working directory for execution
- `yolo` (boolean): Auto-approve everything (typical for batch jobs)

Output parameters:

- `failed` (number)
- `results` (array)
- `skipped` (number)
- `successful` (number)
- `total` (number)

### `review-changes` (~217 tokens)

Run a code review against the current repository using Kimi (collects git diff + structured review prompt).

Input parameters:

- `base` (string): Review changes against a specific base branch (e.g., "main", "develop")
- `commit` (string): Review changes introduced by a specific commit SHA
- `model` (string): Optional model override. Known: kimi-for-coding, kimi-k2-6, kimi-k2-6-turbo, kimi-k2-thinking-turbo, kimi-k2-5, kimi-latest. If omitted, uses your Kimi CLI default.
- `prompt` (string): Custom review instructions or focus areas (optional)
- `thinking` (boolean): Enable thinking mode for deeper review (recommended).
- `timeout` (number): Maximum execution time in milliseconds
- `title` (string): Optional title for the review summary
- `uncommitted` (boolean): Review staged + unstaged + untracked changes (working tree)
- `workingDir` (string): Working directory to run the review in

### `brainstorm` (~261 tokens)

Generate creative ideas using structured frameworks with domain context and feasibility analysis.

Input parameters:

- `afk` (boolean): Auto-approve in AFK mode
- `cd` (string): Working directory
- `constraints` (string): Limitations: budget, time, technical, legal, etc.
- `domain` (string): Domain: software, business, creative, research, product, marketing, etc.
- `existingContext` (string): Background info or previous attempts
- `ideaCount` (integer): Number of ideas (default: 12, range: 5-30)
- `includeAnalysis` (boolean): Include feasibility/impact analysis
- `methodology` (string): Framework: divergent, convergent, scamper, design-thinking, lateral, auto (default)
- `model` (string): Optional model override. Known: kimi-for-coding, kimi-k2-6, kimi-k2-6-turbo, kimi-k2-thinking-turbo, kimi-k2-5, kimi-latest. If omitted, uses your Kimi CLI default.
- `prompt` (string, required): Brainstorming challenge or question
- `thinking` (boolean): Enable thinking mode for deeper reasoning during ideation.
- `yolo` (boolean): ⚠️ Bypass all approvals

### `bg-kimi` (~318 tokens)

Run Kimi CLI as a detached background task. Subactions: start (returns taskId), status, tail (log output), stop, remove, list. Use for long-running autonomous work — the MCP call returns immediately and you poll status later.

Input parameters:

- `action` (string, required): Background task action.
- `addDirs` (array)
- `agent` (string)
- `agentFile` (string)
- `cd` (string)
- `label` (string): Human-readable label to identify this task later.
- `lines` (integer): Lines to return from log tail.
- `maxRalphIterations` (integer): Extra autonomous iterations after the first turn. -1 = unlimited.
- `maxStepsPerTurn` (integer)
- `mcpConfigFile`
- `model` (string): Optional model override. Known: kimi-for-coding, kimi-k2-6, kimi-k2-6-turbo, kimi-k2-thinking-turbo, kimi-k2-5, kimi-latest.
- `plan` (boolean): Start in plan mode.
- `prompt` (string): Prompt (required for action=start).
- `signal` (string): Signal for stop action.
- `skillsDirs` (array)
- `taskId` (string): Task ID returned by action=start.
- `thinking` (boolean)
- `workingDir` (string)
- `yolo` (boolean): --yolo: auto-approve everything (default for bg tasks: afk; pass yolo for full power).

### `plan-kimi` (~178 tokens)

Generate a structured implementation plan using Kimi's --plan mode. Use BEFORE coding to get steps, files-to-touch, risks, and open questions. Distinct from ask-kimi: uses --plan flag (different system prompt) and parses structured output.

Input parameters:

- `acceptance` (array): Acceptance criteria the plan must satisfy.
- `constraints` (string): Hard constraints (must-not-touch areas, style rules, deadlines).
- `contextFiles` (array): Paths/globs to include as @-references in the prompt.
- `format` (string): Output shape. json (default) returns structured steps/risks; markdown returns a checklist.
- `goal` (string, required): What you want planned (a feature, refactor, investigation).
- `model` (string)
- `timeout` (number)
- `workingDir` (string)

### `digest-kimi` (~310 tokens)

Ingest many files at once and answer a focused question. Uses Kimi's 262K context to swallow whole modules / docs that don't fit in the caller's context. Walks directories, filters by extension, truncates oversized files, caps total payload. Returns a concentrated brief.

Input parameters:

- `exclude` (array): Substrings to exclude from paths (matched against relative path). Default: node_modules, .git, dist, build.
- `extensions` (array): Filter by extensions when walking dirs (e.g., [".ts", ".tsx"]). Default: all text-like files.
- `maxBytesPerFile` (integer): Truncate any single file above this size. Default: 200 KB.
- `maxTotalBytes` (integer): Stop adding files once the total payload exceeds this (Kimi context is ~262K tokens / ~1MB safe). Default: 8 MB.
- `model` (string)
- `paths` (array, required): Files or directories to ingest. Directories are walked. Globs are NOT expanded — pass concrete paths.
- `question` (string, required): Focused question to answer using the provided files (e.g., "explain auth flow", "find dead code").
- `recursive` (boolean): Walk into subdirectories. Default: true.
- `shape` (string): summary: 1-paragraph; detailed: structured deep-dive; qa: focused answer to the question.
- `timeout` (number)
- `workingDir` (string)

### `delegate-kimi` (~294 tokens)

Delegate an implementation task to Kimi in an isolated git worktree. Kimi runs autonomously (--yolo) on a fresh branch, optionally looping against a test command. Returns a taskId; later 'collect' to grab the diff. Safe: changes are sandboxed, caller reviews & applies.

Input parameters:

- `acceptanceCriteria` (array): Bullet list of criteria the implementation must satisfy.
- `action` (string): start: spawn delegated task; status: check progress; collect: stop + return diff + cleanup option.
- `autoTest` (string): Shell command Kimi should run after editing to validate (e.g., "npm test"). If passed, Kimi is told to loop until it passes.
- `baseBranch` (string): Branch/commit to base the worktree on (default: current HEAD of repo).
- `branchName` (string): Name for the new branch in the worktree. Default: kimi/<random>.
- `cleanup` (boolean): On collect: also run `git worktree remove` after grabbing the diff.
- `maxRalphIterations` (integer): Extra autonomous iterations (Ralph mode). Default 5 (use -1 for unlimited).
- `model` (string)
- `task` (string): What Kimi should accomplish (required for action=start).
- `taskId` (string)
- `workingDir` (string): Repo root (default: resolved automatically).

### `list-sessions` (~59 tokens)

List active conversation sessions with metadata, or manage them (delete/clear)

Input parameters:

- `action` (string): Action: list (default), delete (single session), clear (all sessions)
- `sessionId` (string): Session ID for delete action

Output parameters:

- `action` (string)
- `sessions` (array)
- `stats` (object)

### `health` (~46 tokens)

Check Kimi CLI installation, authentication, and session health

Input parameters:

- `sessionId` (string): Optional session ID to check specific session health
- `verbose` (boolean): Include detailed diagnostic information

Output parameters:

- `issues` (array)
- `kimiCli` (object)
- `sessions` (object)
- `status` (string)

### `ping` (~19 tokens)

Echo

Input parameters:

- `prompt` (string): Message to echo

### `Help` (~14 tokens)

Show Kimi CLI help output

### `version` (~13 tokens)

Display version and system information

Output parameters:

- `kimiCli` (string)
- `mcpServer` (string)
- `nodeJs` (string)
- `platform` (string)

### `metrics` (~20 tokens)

Expose Prometheus-formatted metrics for Kimi MCP server

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/x51xxx-kimi-mcp-server/trishchuk-kimi-mcp-server#diagnostics

## Score history

- 2026-08-03: 63
- 2026-08-02: 63
- 2026-08-01: 47
- 2026-07-31: 32
- 2026-07-29: 50
- 2026-07-28: 26
- 2026-07-27: 50

## Links

- npm package: https://www.npmjs.com/package/@trishchuk/kimi-mcp-server
- Socket report: https://socket.dev/npm/package/@trishchuk/kimi-mcp-server
- Repository: https://github.com/x51xxx/kimi-mcp-server
- Changelog RSS feed: https://verifymcp.io/servers/x51xxx-kimi-mcp-server/trishchuk-kimi-mcp-server/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/x51xxx-kimi-mcp-server/trishchuk-kimi-mcp-server/changelog.json
- HTML version of this page: https://verifymcp.io/servers/x51xxx-kimi-mcp-server/trishchuk-kimi-mcp-server