RaccoonNinja MCP Toolset

A collection of simple, cross-platform Model Context Protocol (MCP) servers that run locally on your machine.

Each server is a small, self-contained .NET console app that speaks MCP over stdio. They're built to do one job well, hand structured (typed JSON) results back to the assistant, and keep your data on your machine: no cloud calls, no network round-trips beyond the local process the assistant already talks to.

Goals

• Local-first. Servers run as a local subprocess of your MCP client. Nothing is sent anywhere by these tools.
• Cross-platform. Targets .NET 10, so the same server runs on Windows, macOS, and Linux.
• Simple and focused. Each server wraps a single domain in a small set of typed tools rather than one do-everything endpoint.
• Safe by default. Untrusted input is validated, scope is confined, and servers expose only what they advertise.

Servers

• git-ops: Local, read-only Git inspection; status, history, diffs, blame, and search exposed as typed tools that return JSON. The assistant never drives git through a shell, and no writing subcommands are wired up.
• file-vault: A personal, cross-conversation file vault: versioned notes in a local SQLite + snapshot store, with optimistic concurrency, tags, full-text search, hierarchy, and structure-aware markdown/JSON/YAML edits. Drop-in port of the Rust vault-mcp server, same on-disk store.
• text-search: Local, read-only, root-confined text search and inspection; describe_scope, find_files, inspect_files, search_text, and read_lines as typed tools that replace the find/grep/cat habit. Every path is resolved through all symlinks and confined to its configured roots, a non-overridable denylist keeps secret files unread, and results stay root-relative so no absolute path from your machine reaches the model. Supports multiple named roots plus opt-in package roots for grepping cached dependency sources.
• text-edit: The mutating counterpart to text-search: root-confined text edits (normalize_files, replace_text) with hash-gated undo (list_recent_batches, undo_batch/undo_last_batch). It points at one repository, keeps its write tools on prompt, refuses secret files via the same non-overridable denylist, round-trips encodings and line endings faithfully, and journals every change to an append-only store sited outside the root so a batch can be rolled back even after a mid-batch crash.

Repository layout

RaccoonNinja.McpToolset/
├─ src/
│  ├─ RaccoonNinja.McpToolset.Server.GitOps/       # MCP server
│  ├─ RaccoonNinja.McpToolset.Server.FileVault/    # MCP server
│  ├─ RaccoonNinja.McpToolset.Server.TextSearch/   # MCP server
│  ├─ RaccoonNinja.McpToolset.Server.TextEdit/     # MCP server
│  └─ RaccoonNinja.McpToolset.Files/               # shared library: confinement, denylist, selection, encoding
├─ tests/                     # matching test project per src project
│  ├─ RaccoonNinja.McpToolset.Server.GitOps.Tests/
│  ├─ RaccoonNinja.McpToolset.Server.FileVault.Tests/
│  ├─ RaccoonNinja.McpToolset.Server.TextSearch.Tests/
│  ├─ RaccoonNinja.McpToolset.Server.TextEdit.Tests/
│  └─ RaccoonNinja.McpToolset.Files.Tests/
├─ eng/                       # publish settings (ServerPublish.props) + local publish.ps1
├─ Directory.Build.props      # shared build settings (net10.0, analyzers, etc.)
├─ Directory.Packages.props   # central package version management
└─ RaccoonNinja.McpToolset.slnx

Requirements

• .NET 10 SDK to build, or the .NET 10 runtime to run a published server.
• Any individual server may have its own prerequisites (for example, git-ops needs `git