
Lynx
io.github.lorenzo-cambiaghiPublished by GitHub account lorenzo-cambiaghiv1.9.0Updated Oct 25, 2026
LynxMCP: 100% local MCP server for the code questions grep can't answer: call graph, hybrid search
Overview
Lynx is a local MCP server that indexes your code, docs and PDFs so an assistant can answer structural and behavioural code questions grep cannot.
- What you can do
- Search code and indexed sources with hybrid keyword and embedding retrieval, optionally returning signatures only for cheap triage, or escalate with multiple query phrasings across one or all sources. Query the optional code knowledge graph for callers, callees, subclasses, superclasses, imports, neighbours and shortest paths. Locate definitions, usages and similar code, and describe a symbol with its definition, callers, callees and tests in one call. Assess impact: transitive callers with hop distance plus the tests to re-run, and search only files changed against a base branch for review. Summarise a repository or module, export a shareable offline graph view, and list sources, check RAG/
- When to use it
- Worth adding on large codebases where you need to know who calls something, what breaks if it changes, or where behaviour lives without a literal match, and on framework docs or PDFs newer than the model's training data. On small repositories that already fit the assistant's context, plain grep is often enough.
- Requirements
- A local Python install via pipx or uv tool install of the lynx-mcp package, then a config created with lynx manager init and a source added and indexed with lynx build. The first build downloads a 130 MB embedding model (about 460 MB on disk); the server is registered in the MCP client as a stdio command. No accounts, API keys or headers are declared.
Installation
In SourceWeft
- Open Lynx in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
Lynx
LynxMCP is a 100% local MCP server for the code questions grep can't answer: what calls this, what breaks if I change it, where is the code that does X, how does the library version I actually use behave. AST-aware chunking, hybrid BM25 + dense retrieval, an optional code knowledge graph, and your library docs and PDFs indexed next to your code. Works with any MCP client (Claude Code, Cursor, Windsurf, Antigravity, ...).
[Tests] [License: Apache 2.0] [Python 3.10+] [Glama score]
Grep is the right tool when you know the identifier, and your agent already has it. Lynx is for the questions grep cannot answer. Behaviour: "where do we clamp the camera zoom?" matches nothing literal. Structure: who calls this, what inherits from it, what breaks if it changes; polymorphic dispatch leaves no textual trace. Knowledge past the model's training cutoff: the docs of the framework version you run, indexed as a source. Nothing leaves your machine.
What grep can't answer
Each row is measured; the numbers come from the benchmarks below.
Where grep is better, this page says so. On Guava, whose class names document themselves (BloomFilter, RateLimiter), grep ranks higher: hit@1 73% against 60%. On a repository that fits in the agent's context, the built-in tools are fine. Lynx pays off on large codebases, on framework docs your model has gone stale on, and on repeated sessions where re-exploring from scratch is waste.
Quickstart
lynx manager init also offers to open the web UI, where the same source can be added through a guided form with a folder picker. Everything below works either way.
Every tool your AI gets is also a command, with the same name and the same output: lynx find-definition ApplyDamage, lynx impact ApplyDamage, lynx graph query --op callers --symbol ApplyDamage. Add --json to any of them for scripts.
Then register Lynx in your MCP client. Claude Code is shown; the full guide covers Cursor, Antigravity, and generic stdio clients, or let lynx manager ui generate the snippet for you:
The server answers the MCP handshake in about a second and opens the indexes in the background; a call that arrives earlier gets the loading state back and is retried. If you would rather skip the terminal, there are double-click installers for macOS and Windows.
The tools your AI gets
The tool set is fixed: it does not grow with the number of sources. It is also layered, because every tool definition rides in your client's context on every turn. Three profiles: core (5 tools, about 1,300 tokens of definitions), standard (10 tools, about 2,800 tokens, the default) and full (17 tools, about 4,150 tokens). Set tools.profile in config.json or pass lynx serve --profile full; tools.include adds a single tool to a profile. Tools take a source argument where relevant.
Retrieval tools carry MCP readOnlyHint annotations, so clients can auto-approve them. The only write is export_graph, which saves a graph view file. The server ships its usage playbook in the MCP handshake (instructions plus a lynx://guide resource), so your agent knows how to query well without any rules-file setup.
(graph) tools need the optional code knowledge graph enabled for the source. The tool set is per-capability, never per-source.
[Blast-radius graph view: callers above the symbol, callees below, exported as a single offline file]
Shareable graph views: lynx graph export --symbol GetVoxel writes one self-contained, offline file (no server, no CDN) with the symbol's blast radius, who calls it (above) and what it calls (below). Attach it to a PR or archive it for an audit.
How it works
- Tree-sitter parses 18+ languages (19 grammars, counting TSX) and indexes whole functions and classes, not arbitrary text windows.
- Retrieval is hybrid: dense embeddings plus code-tokenized BM25, fused with RRF, with an optional cross-encoder reranker.
- The code knowledge graph (opt-in) records who calls what, inheritance and imports, and answers "what breaks if I change this?" with the actual blast radius.
- Sources can be codebases, public docs sites (fetched once, on demand; JS-rendered SPAs via optional headless Chromium) and PDFs, searched side by side.
- A file watcher re-indexes a saved file in about 2 seconds. No manual rebuild ritual.
- Search and the graph are also served as rows over a local HTTP API, so SQL engines can join your code with tickets, PRs or logs (see Integrations).
lynx manager uigives you guided setup, a query playground, diagnostics and client config snippets in the browser.
Everything runs locally: HuggingFace models are downloaded once, then Lynx switches to offline mode. No telemetry, no cloud index, no code upload. The only network access is the model download and the explicit webdoc fetch step you trigger yourself.
The models run on ONNX Runtime, so there is no PyTorch in the install: about 460 MB on disk, and a 165 MB download on Linux where the torch wheel alone used to bring 4 GB of CUDA libraries. Same model, same vectors, so an index built by an earlier version keeps working.
Open as many sessions on one index as you like: two editor windows, an editor plus the web UI, a CLI query while the server runs. They all search the same index. Only indexing is exclusive, and the process doing it hands over automatically if you close it.
Behind a firewall or on an air-gapped machine? The model can come from a mirror, from this repo's GitHub Releases (the automatic fallback), or from an archive you carry over; see Restricted networks in the guide.
[LynxManager: guided setup, query playground, and diagnostics in the browser]
LynxManager: guided setup, query playground & diagnostics, all in the browser. Full walkthrough
Benchmarks (reproducible)
[Lynx vs agentic grep: fewer tokens to answer on Python, C# and Java; 4 vs 101 tool calls to map a class hierarchy]Three codebases, three languages, behavioural questions with known ground-truth files, and a grep baseline built to be strong (IDF-weighted multi-keyword ranking with ideal stopword removal, closer to BM25 than to an agent's first rg). Methodology and per-task results: Django, Json.NET, Guava.
Ranking swings with how self-documenting the code is: Lynx ahead on C#, where PascalCase identifiers and sparse comments starve a lexical baseline; mixed on Python, ahead at hit@1 and behind at hit@5 in Django's docstring-rich code; behind on Guava. The token cost does not swing. It drops 58% to 86% every time, because Lynx hands back the whole function with file:line, symbol and score in one call, where grep returns match lines and then needs a read.
The structural gap is of a different kind. "What inherits from Field?" over Django's 100-class hierarchy takes grep 101 rounds, one per discovered class, each a full model inference over the growing context; graph_query answers it in 4 calls from resolved inheritance edges, same recall, file:line on every edge.
What it costs, in tokens and in money
Per retrieval, the saving is the measured delta above: 2,400 to 5,100 fewer tokens to get the answer into context. Per session, the tool definitions cost 1,300 tokens (core), 2,800 (standard) or 4,150 (full), so a session has paid for its tool list after the first or second retrieval. outline triage cuts the search step by another 2.4x on broad queries (measured).
In money, for 25 engineers making 60 retrievals a day (31,500 a month), the yearly API bill Lynx removes, as a range across the three codebases:
The floor counts only the smaller tool output, no assumptions. The second column adds the one grep round trip Lynx removes, whose 20k-token context is re-read from the prompt cache at a tenth of the input price; that discount is the single modelled assumption, and it is a knob. Run it for your own team, prices and codebase: python benchmarks/savings_calculator.py --devs N, or the interactive savings calculator (presets in pricing.json and measured.json, yours to edit).
Read less: outline mode
Every search ranks the same way. search(query, outline=true) (or ?view=outline over HTTP) returns the same ranked hits without their bodies: a one-line signature plus the first line of the docstring, so the agent scans the candidates and reads the single body it needs, by its cited file:line. On a public repo (psf/requests) it cut the search step to 2.4x fewer tokens. When to use which, the measured data and the chart: docs/OUTLINE.md.
Integrations
Search and the code graph are served as NDJSON over a local HTTP API (/api/v1), and the MCP tools compose with any other MCP server your agent has. Everything below stays on your machine; only the other side of a join (GitHub, Jira, Sentry) touches an API.
- Coral: Lynx is a community source in Coral's registry,
lynx.searchplus six graph functions, so a behavioural question becomes a SQL table you join with live GitHub or Sentry data. - DuckDB:
read_ndjson_auto('http://127.0.0.1:8765/api/v1/search?...')is a table, no plugin and no daemon; join code relevance with git churn, error logs or ticket exports. - Steampipe: a plugin with
lynx_source,lynx_searchandlynx_graphtables that join per row, one search per row of another table; prebuilt macOS and Linux binaries on the releases page. - GitHub Action: on every PR, a comment with the downstream callers and the semantically related code, indexed locally on the runner.
- MCP recipes: agent patterns combining Lynx with GitHub, Sentry and Jira MCP servers (triage, PR impact, ticket to code).
Documentation
Status
Developed by one author; APIs may still move before 1.x stabilizes. Issues and PRs are welcome. The test suite runs with pytest and CI must stay green. See ROADMAP.md for what's under consideration (and what is explicitly not planned).
License
Source: README.md at commit 67c550c
Tools
0Version history
1- v1.9.0LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts