← Back to directory
R

Repomix

Official
Pack codebases into AI-friendly formats.
Category
Dev Tools #26 of 438
Stars
★ 28.9k Very popular
Transport
stdio (local process)
Runtime
Node.js · Docker
Credentials
No credential needed
License
MIT
Last commit
Tools
7
67FMRS · C

The supplied material identifies Repomix as an MCP server provided by its upstream project. It runs through stdio and offers local and remote repository packaging, output reading and search, and security-checked filesystem reads. Authentication, write access, and private-repository support are not documented.

Strongest · Documentation 16/20 Weakest · Reliability 10/20

Reliability
10/20
Security and permissions
13/20
Maintenance
14/20
Documentation
16/20
Setup experience
14/20
Why each score
Reliability 10/20
The README declares seven MCP tools with parameters, startup commands, and clear primary workflows, making the happy path plausible. However, the server manifest is unavailable, there is no verifiable MCP initialization/tool-list handshake evidence, and no committed tests or evidence covering key MCP paths and failure behavior. This warrants a conservative static deduction.
Security and permissions 13/20
The evidence describes Secretlint scanning, remote configuration disabled by default, interactive confirmation for trusted remote configuration, path validation, ignore rules, and repository-packing behavior. However, the MCP surface can read absolute local paths, list directories, clone remote repositories, and execute arbitrary external commands through configured file processors; complete permission boundaries, sandboxing, network scope, and confirmation coverage are not shown. No stated security red line is evidenced.
Maintenance 14/20
The repository is not archived, uses the MIT license, and exposes substantial public usage signals plus sponsorship, Discord, and GitHub maintenance channels. The supplied material does not verify release cadence, commit activity, dependency-update practice, vulnerability response, or a clear supported-version policy. Stars and issue counts are discovery signals only, so the score is moderate rather than maximal.
Documentation 16/20
The README covers CLI installation, MCP client configuration, tool names and parameters, output formats, filtering, compression, remote repositories, constraints, and security-related options with many examples. Deductions apply because the manifest is missing and there is no documented authentication/credential model, complete permission boundary, troubleshooting guide, compatibility policy, or independently verifiable tool behavior; some security claims are documentation-only.
Setup experience 14/20
The project provides npx, global package-manager, Homebrew, and Docker paths, along with configuration examples for VS Code, Cline, Cursor, Claude Desktop, and Claude Code. Setup still requires Node/npm or Docker and manual client configuration; runtime versions, platform differences, connection troubleshooting, and handshake verification are not documented. Therefore it is usable but not full-mark setup.

Static review · not runListed 2026-07-29

Read the FMRS scoring method →

Fit and risk

What it can accessReads local filesUses the network

Best for

  • Developers who need AI assistants to understand local or remote codebases.
  • Code-analysis workflows that need control over token counts and file scope.
  • Users of Claude Desktop, VS Code, Cline, Cursor, or Claude Code.

Not for

  • Users needing database, cloud-storage, or browser-automation capabilities.
  • Workflows requiring direct codebase modification or general write operations.
  • Users needing authentication, private-repository access, or capabilities not documented in the supplied material.

Required permissions

  • Read the specified local directories and files.
  • Fetch, clone, and process the specified GitHub repositories.
  • Access existing Repomix output files.
  • Run Secretlint-sensitive-data checks; remote configuration is not loaded unless explicitly trusted.

Risks and side effects

  • Packed content may contain sensitive information; despite Secretlint checks, review outputs before sending them to AI tools.
  • Remote repository configuration is untrusted by default; enabling trust may run external processing commands defined in configuration.
  • Large repositories may exceed AI-tool file-size or context limits and require filtering, compression, or output splitting.

Setup

Before you start

Runtime:Node.js · Docker

Other optional settings (1)
REPOMIX_REMOTE_TRUST_CONFIG optional Set to true to trust and load repomix config files from remote repositories (off by default to prevent untrusted repos from executing code); nothing to obtain externally.

Add the configuration below to an MCP-compatible client, then start the Repomix MCP server with npx -y repomix --mcp. Docker can also be used with ghcr.io/yamadashy/repomix.

claude_desktop_config.json
{"mcpServers":{"repomix":{"command":"npx","args":["-y","repomix","--mcp"]}}}

Shown for Claude Desktop. Other clients may use a different file or key (VS Code uses "servers") — the configurator below converts it.

.vscode/mcp.json
{
  "servers": {
    "repomix": {
      "command": "npx",
      "args": [
        "-y",
        "repomix",
        "--mcp"
      ]
    }
  }
}

Goes in your project's .vscode/mcp.json (VS Code uses a "servers" key).

Terminal
claude mcp add repomix -- npx -y repomix --mcp

Run it in a terminal; replace any <…> placeholders with your own values first.

Check that it works

After adding {"mcpServers":{"repomix":{"command":"npx","args":["-y","repomix","--mcp"]}}} to your client's MCP settings and restarting, tools like pack_codebase, pack_remote_repository, and grep_repomix_output should appear in the tool list; calling pack_remote_repository with "yamadashy/repomix" and getting a packed summary confirms the connection.

Troubleshooting

  1. Confirm the client uses npx -y repomix --mcp, or verify that the Docker command is available.
  2. Ensure local paths are absolute and that the target directory or output file exists.
  3. Check .gitignore, .ignore, .repomixignore, and include/ignore patterns for unintended exclusions.
  4. For remote repositories, verify the repository URL, branch or commit identifier, and remote-config trust settings.

Things to try

Once connected, you can ask your AI assistant things like:

  • Pack this local project into a single XML file and show me the largest files summary
  • Use pack_remote_repository on https://github.com/facebook/react and describe the main component architecture
  • Grep the packed output for 'authentication' with a few context lines
  • Read lines 1 to 200 of the previously generated repomix output

Tools 7

pack_codebase read-only
Package a local code directory into a consolidated XML file.
attach_packed_output read-only
Attach an existing Repomix packed output file.
pack_remote_repository read-only
Fetch, clone, and package a GitHub repository.
read_repomix_output read-only
Read a Repomix output file, optionally by line range.
grep_repomix_output read-only
Search a Repomix output with JavaScript regular expressions.
file_system_read_file read-only
Read a local file with sensitive-information security checks.
file_system_read_directory read-only
List the contents of a local directory.

Use cases

Prepare repository context for AI code reviews, refactoring, documentation, and test generation.
Filter, compress, or search large codebases by pattern.
Analyze remote GitHub repositories directly.
Read existing packed outputs and retrieve content incrementally.

Supported clients

Claude Desktop
VS Code
Cline
Cursor
Claude Code

Listed from the project's documentation, not tested by this site.

Overview

Repomix is a CLI tool and MCP server that packages local or remote GitHub repositories into consolidated outputs for AI-assisted code analysis. It supports XML, Markdown, JSON, and plain text, plus compression, token counting, file filtering, Git logs, and diffs.

Similar servers

Context7 80 · B

Upstash's official server providing up-to-date third-party library docs for AI coding assistants

★ 63.3k · Tools 2 Compare with this →

Source revision e696384d062f Data synced 2026-10-19 Read the FMRS scoring method