shinpr/mcp-local-rag

v0.14.0 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 18d MCP Search & Web

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-skills developer-tools hybrid-search local-first local-rag mcp

+6 more

mcp-server privacy-first llm semantic-search skills vector-db

ReleasePort's take

Moderate signal

editorial:auto 9d

MCP server configuration now mandates environment variables exclusively; CLI flags trigger immediate failure.

Why it matters: Deployments using CLI flags for MCP configuration will fail fast on v0.14.0, requiring migration to env‑var settings before upgrade.

Summary

AI summary

MCP server configuration now requires environment variables exclusively, rejecting all CLI flags.

Changes in this release

Type	Severity	Summary	CVE
Feature	Medium	Visual ingest for PDFs (opt-in) adds short caption from local VLM to text chunks with figures, tables, or diagrams. Visual ingest for PDFs (opt-in) adds short caption from local VLM to text chunks with figures, tables, or diagrams. Source: llm_adapter@2026-05-21 Confidence: high	—
Performance	Medium	Embedding runs on WebGPU when available, with CPU fallback. Embedding runs on WebGPU when available, with CPU fallback. Source: llm_adapter@2026-05-21 Confidence: high	—
Deprecation	Medium	MCP server configuration limited to environment variables; CLI flags cause fast failure. MCP server configuration limited to environment variables; CLI flags cause fast failure. Source: llm_adapter@2026-05-21 Confidence: high	—
Bugfix	Medium	File metadata fields now correctly extract from backslash-style Windows paths. File metadata fields now correctly extract from backslash-style Windows paths. Source: llm_adapter@2026-05-21 Confidence: high	—

Full changelog

Changes

Visual ingest for PDFs (opt-in). visual: true (MCP) or --visual (CLI) inlines a short caption from a local VLM (HuggingFaceTB/SmolVLM-256M-Instruct) into the text chunks for each page with figures, tables, or diagrams. Captions are auxiliary text — not image search, not OCR, and not a faithful transcription of the figure. Default ingest is unchanged. See the README's Ingesting PDFs with figures section for usage and the security note.
GPU acceleration. Embedding runs on WebGPU when available, with a CPU fallback. Override with RAG_DEVICE=cpu.
Bug fix (Windows paths). File metadata fields (file name, extension) now extract correctly from backslash-style paths. Previously these fields could be empty or contain the full path when ingesting from a Windows path.
MCP server is env-only. Configuration comes from environment variables only; passing CLI flags to npx mcp-local-rag now fails fast with a clear error instead of being silently ignored.

Contributors

Thanks to @mickey-mikey for GPU support (#128), the env-only MCP server fix (#123), and the Windows path-handling fix (#118).

Breaking Changes

MCP server configuration must be provided solely through environment variables; CLI flags are now rejected with an error.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track shinpr/mcp-local-rag

Get notified when new releases ship.

About shinpr/mcp-local-rag

Privacy-first document search server running entirely locally. Supports semantic search over PDFs, DOCX, TXT, and Markdown files with LanceDB vector storage and local embeddings - no API keys or cloud services required.

All releases →