Local FAISS MCP Server
mcpopen · packageio.github.nonatofabio/local-faiss-mcp · v0.2.0-rc.3
Local FAISS vector database for RAG with document ingestion, semantic search, and MCP prompts.
run it
on your own machines, one way per deploy methodgenerated from the record, not tested yet
# once, as root:
# as_mcp DIR COMMAND...: runs COMMAND as the mcp user in DIR, its home, sandboxed as the
# units are: a package's install scripts can write to DIR only, as the server later can
as_mcp() {
local dir="$1"; shift
systemd-run --quiet --wait --pipe --collect --uid=mcp --gid=mcp \
-p WorkingDirectory="$dir" -p Environment=HOME="$dir" -p ReadWritePaths="$dir" \
-p NoNewPrivileges=true -p ProtectSystem=strict -p ProtectHome=true -p PrivateTmp=true \
-- "$@" </dev/null
}
install -d -m 0750 -o mcp -g mcp /var/lib/mcp/local-faiss
# local-faiss: its packages, installed whole before its unit starts (no session installs)
systemctl stop mcp-my-agent-local-faiss.service 2>/dev/null || true
as_mcp /var/lib/mcp/local-faiss uv tool install local-faiss-mcp==0.2.0-rc.3
as_mcp /var/lib/mcp/local-faiss uv tool install mcp-proxy
#!/usr/bin/env bash
# local-faiss (io.github.nonatofabio/local-faiss-mcp), recipe baremetal (generated).
# Generated by Hub for toolset "my-agent"; started by mcp-my-agent-local-faiss.service.
set -euo pipefail
export HOST=127.0.0.1 PORT=8101
exec uvx mcp-proxy --host 127.0.0.1 --port 8101 --pass-environment -- uvx local-faiss-mcp==0.2.0-rc.3
[Unit]
Description=MCP server local-faiss (toolset my-agent), generated by Hub
After=network-online.target
Wants=network-online.target
[Service]
Type=simple
User=mcp
Group=mcp
EnvironmentFile=/etc/mcp/my-agent.env
Environment=HOME=/var/lib/mcp/local-faiss
WorkingDirectory=/var/lib/mcp/local-faiss
ExecStart=/opt/mcp/my-agent/bin/local-faiss.sh
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/mcp/local-faiss
[Install]
WantedBy=multi-user.target
generated from the record, not tested yet
docker run --rm -p 127.0.0.1:8101:8000 ghcr.io/astral-sh/uv:python3.12-bookworm-slim sh -c 'uvx mcp-proxy --host 0.0.0.0 --port 8000 --pass-environment -- uvx local-faiss-mcp==0.2.0-rc.3'
generated from the record, not tested yet
# Generated by Hub for toolset "my-agent" (2026-10-18T19:18:04+00:00).
# Each package server runs behind a stdio->HTTP bridge and listens on localhost only.
# cp .env.example .env # fill the ${VAR}s
# docker compose up -d && bash smoke.sh
# Remote servers are not here: clients reach them directly (see clients/).
name: mcp-my-agent
services:
local-faiss:
image: ghcr.io/astral-sh/uv:python3.12-bookworm-slim
command:
- sh
- -c
- uvx mcp-proxy --host 0.0.0.0 --port 8000 --pass-environment -- uvx local-faiss-mcp==0.2.0-rc.3
ports:
- 127.0.0.1:8101:8000
volumes:
- uv-cache:/root/.cache/uv
healthcheck:
test:
- CMD
- python3
- -c
- import urllib.request; urllib.request.urlopen('http://127.0.0.1:8000/status')
interval: 30s
timeout: 5s
retries: 5
start_period: 2m
restart: unless-stopped
volumes:
npm-cache: {}
uv-cache: {}
generated from the record, not tested yet
# Generated by Hub for toolset "my-agent" (2026-10-18T19:18:04+00:00).
# kubectl create namespace mcp
# kubectl -n mcp create secret generic mcp-credentials --from-env-file=.env
# kubectl apply -f kubernetes.yaml
# Services are cluster-internal: <name>.mcp.svc.cluster.local:8000/mcp. Put an ingress
# with auth in front before exposing any of them.
apiVersion: v1
kind: Namespace
metadata:
name: mcp
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: local-faiss
namespace: mcp
labels: &id001
app: local-faiss
spec:
replicas: 1
selector:
matchLabels: *id001
template:
metadata:
labels: *id001
spec:
containers:
- name: local-faiss
image: ghcr.io/astral-sh/uv:python3.12-bookworm-slim
ports:
- containerPort: 8000
name: http
env: []
args:
- sh
- -c
- uvx mcp-proxy --host 0.0.0.0 --port 8000 --pass-environment -- uvx local-faiss-mcp==0.2.0-rc.3
readinessProbe:
httpGet:
path: /status
port: http
initialDelaySeconds: 10
---
apiVersion: v1
kind: Service
metadata:
name: local-faiss
namespace: mcp
spec:
selector:
app: local-faiss
ports:
- port: 8000
targetPort: http
name: http
generated from the record, not tested yet
# Generated by Hub for toolset "my-agent" (2026-10-18T19:18:04+00:00).
# Credentials come from the Secret 'mcp-credentials' (kubectl create secret generic ... --from-env-file=.env).
# Each server under `servers` is one Deployment + Service; the keys after it configure
# upstream charts a worker verified.
servers:
local-faiss:
enabled: true
replicas: 1
port: 8000
path: /mcp
container:
name: local-faiss
image: ghcr.io/astral-sh/uv:python3.12-bookworm-slim
ports:
- containerPort: 8000
name: http
env: []
args:
- sh
- -c
- uvx mcp-proxy --host 0.0.0.0 --port 8000 --pass-environment -- uvx local-faiss-mcp==0.2.0-rc.3
readinessProbe:
httpGet:
path: /status
port: http
initialDelaySeconds: 10
# helm install my-agent helm/my-agent -n mcp
in the cloud
one click: the provider's deploy form opens filled in, in your own account- koyeb
-
Clients connect to the service's https://…koyeb.app address plus /mcp.
- azure
-
A Container Apps environment with one app per server, each with HTTPS ingress and one replica. The deployment's outputs list the endpoints.
connect to it
copy what your client needsuvx local-faiss-mcp==0.2.0-rc.3
{
"mcpServers": {
"local-faiss": {
"command": "uvx",
"args": [
"local-faiss-mcp==0.2.0-rc.3"
]
}
}
}
#!/usr/bin/env bash # Registers every server with Claude Code (run once; `claude mcp list` to check). set -euo pipefail set -a; [ -f .env ] && source .env; set +a claude mcp add local-faiss -- uvx local-faiss-mcp==0.2.0-rc.3
{
"mcpServers": {
"local-faiss": {
"command": "uvx",
"args": [
"local-faiss-mcp==0.2.0-rc.3"
]
}
}
}
{
"servers": {
"local-faiss": {
"type": "stdio",
"command": "uvx",
"args": [
"local-faiss-mcp==0.2.0-rc.3"
]
}
}
}
name: my-agent target: local servers: - hub: io.github.nonatofabio/local-faiss-mcp
- not probed yet: tools unpinned, ingest lists them
tools
Probe result: faileddocker: the container exited: | Exception Group Traceback (most recent call last): | …aexit__(exc_type, exc_val, exc_tb) | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ | File "<path>", line 847, in __aexit__ | raise BaseExceptionGroup( | ExceptionGroup: unhandled errors in a TaskGroup (1 sub-exception) +-+---------------- 1 ---------------- | Traceback (most recent call last): | File "<path>", line 194, in run_mcp_server | proxy = await create_proxy_server(session) | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ | File "<path>", line 19, in create_proxy_server | response = await remote_app.initialize() | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ | File "<path>", line 183, in initialize | result = await self.send_request( | ^^^^^^^^^^^^^^^^^^^^^^^^ | File "<path>", line 306, in send_request | raise McpError(response_or_error.error) | mcp.shared.exceptions.McpError: Connection closed +------------------------------------; baremetal: same crash as docker
runs · 1
the latest tests of this entry by the hub and its workers, newest first| date | worker | method | status | sandbox | reason |
|---|---|---|---|---|---|
| 2026-10-18 15:40 | local-mac-vm | docker | failed | gvisor | docker: the container exited: | Exception Group Traceback (most recent call last): | …aexit__(exc_type, exc_val, exc_tb) | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^… |