Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | Codebase Memory MCPMCP100 Recommended | io.github.blazickjp/arxiv-mcp-serverMCP100 Recommended |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | First-party MCP DeusData · Publisher source ↗ | Community implementation reviewed-promotion:io-github-blazickjp-arxiv-mcp-server · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Aug 14, 2026 Package: Aug 14, 2026 | Repo: Aug 26, 2026 Package: Not documented |
| Popularity evidence | ||
| GitHub stars | 44,904 GitHub stars · checked 2026-09-25T18:35:00Z | 3,173 GitHub stars · checked 2026-09-24T04:14:39.538000Z |
| Package downloads / 30 days | 28,000 package downloads / 30 days · checked 2026-08-14T00:00:00.000Z | No reliable download data |
| External adoption evidence |
| Not documented |
| Client coverage | ||
| Client coverage details | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | local stdio; no remote auth needed | Default stdio operation requires no arXiv API key. citation_graph can optionally use SEMANTIC_SCHOLAR_API_KEY for higher reliability. If Streamable HTTP is enabled, the project recommends keeping it private or adding authentication upstream. |
| Cost | none beyond local resources | The server is open source under Apache-2.0 and does not require an arXiv API key. External services may impose their own rate limits; an optional Semantic Scholar API key can improve citation reliability. |
| Permissions | reads indexed source/project data; installer writes supported agent/editor configs/hooks | The server searches external research services, downloads papers/source archives, and reads/writes its own local paper cache, topic watches, and semantic index under the configured storage path. It does not require broad account-level permissions. |
| Data handling | local processing; current docs state no source/index/query/env/telemetry upload | Downloaded papers, source archives, topic watches, and indexes are stored locally (default ~/.arxiv-mcp-server/papers). Search/source/citation/download requests go to external services. Paper text and LaTeX are explicitly treated as untrusted external input. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | latest 0.10.x supported; SLSA/Sigstore/checksums/VirusTotal/security policy | Low to medium. Main risks are prompt injection in paper content, hostile LaTeX archives, local disk writes, and optional HTTP exposure. The project mitigates archive traversal/decompression risks, bounds content, binds HTTP to loopback by default, and enables DNS-rebinding protections. |
| Evidence date | ||
| Editorial review | 2026-09-23 | 2026-09-11 |
| Candidate evidence | 2026-09-25T18:35:00Z | 2026-09-24T04:25:05.554391Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →