Field-by-field comparison

Compare the evidence before choosing an MCP.

Each signal stays separate, missing facts remain visible, and the column order follows your selection.

MCPs in this comparison

Graphiti MCPio.github.blazickjp/arxiv-mcp-server

Uncheck an MCP to remove it. Comparing two or three keeps each signal in its own row.

Comparable alternatives

Context7 MCPMCP100 RecommendedCodebase Memory MCPMCP100 RecommendedHugging Face MCPMCP100 RecommendedExa MCPMCP100 RecommendedGitHub MCPMCP100 RecommendedPerplexity MCPMCP100 Recommended

Shown only when capability or industry context overlaps.

Side-by-side MCP evidence comparison
Evidence field	Graphiti MCPShortlist candidate	io.github.blazickjp/arxiv-mcp-serverMCP100 Recommended
Task fit
Best for	Self-hosted persistent memory and knowledge-graph workflows Teams willing to isolate the service behind network/auth controls	Researchers who want focused arXiv literature workflows with local storage and bounded reads Agents that need original LaTeX sections, citation graphs, BibTeX export, and topic watches without ingesting whole papers into context
Not ideal for	Internet-exposed deployments without a reverse proxy or other access control Production memory stores that require built-in strong authentication	Users who need a fully hosted zero-local-state service Workflows that cannot safely treat paper text and LaTeX as untrusted content
Avoid when	You would expose the default 0.0.0.0 HTTP endpoint on an untrusted network You cannot back up or recover graph data before enabling delete/clear tools	Your agent automatically acts on instructions embedded in retrieved papers without approval You expose the optional HTTP transport publicly without upstream authentication and explicit Host/Origin controls
Provenance
Provenance details	First-party MCP reviewed-detail:graphiti-mcp · Publisher source ↗	Community implementation reviewed-promotion:io-github-blazickjp-arxiv-mcp-server · Publisher source ↗
Maintenance
Maintenance details	Repo: Not documented Package: Not documented	Repo: Aug 26, 2026 Package: Not documented
Popularity evidence
GitHub stars	Not documented	3,173 GitHub stars · checked 2026-09-24T04:14:39.538000Z
Client coverage
Client coverage details	Not documented	Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio
Client coverage note	Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server.
Access and data
Authentication	Current MCP server docs do not establish built-in HTTP authentication as a default control; deployments should rely on local access or external network/reverse-proxy controls.	Default stdio operation requires no arXiv API key. citation_graph can optionally use SEMANTIC_SCHOLAR_API_KEY for higher reliability. If Streamable HTTP is enabled, the project recommends keeping it private or adding authentication upstream.
Cost	Open-source server; database and LLM/embedder provider costs apply.	The server is open source under Apache-2.0 and does not require an arXiv API key. External services may impose their own rate limits; an optional Semantic Scholar API key can improve citation reliability.
Permissions	Tools include add/search plus delete_episode, delete_entity_edge, and clear_graph. Database privileges are those of the configured Neo4j/FalkorDB credentials.	The server searches external research services, downloads papers/source archives, and reads/writes its own local paper cache, topic watches, and semantic index under the configured storage path. It does not require broad account-level permissions.
Data handling	Stores knowledge-graph episodes/entities/facts and uses configured LLM/embedder providers during ingestion/search. Anonymous telemetry can be disabled.	Downloaded papers, source archives, topic watches, and indexes are stored locally (default ~/.arxiv-mcp-server/papers). Search/source/citation/download requests go to external services. Paper text and LaTeX are explicitly treated as untrusted external input.
Limitations
Tradeoffs	Rich memory tools are valuable but include destructive operations Multiple LLM/database credentials increase the deployment's secret surface	Local storage and bounded reads improve privacy/context control, but downloaded papers, source archives, alerts, and indexes remain on the user's machine Citation graphs depend on Semantic Scholar and optional API credentials; semantic search/reindex require the pro extra
Risk context	High. Default network exposure plus destructive graph tools and backend/LLM credentials create material unauthorized-access and data-loss risk.	Low to medium. Main risks are prompt injection in paper content, hostile LaTeX archives, local disk writes, and optional HTTP exposure. The project mitigates archive traversal/decompression risks, bounds content, binds HTTP to loopback by default, and enables DNS-rebinding protections.
Evidence date
Editorial review	2026-09-11	2026-09-11
Candidate evidence	2026-09-11T00:00:00.000Z	2026-09-24T04:25:05.554391Z

Popularity, maintenance, fit, permissions, and client support are independent evidence fields.

Read the evidence method →