hister
Your own search engine
No outside reports on file
Hister exposes whatever content is indexed to Claude and any user with access, so only index trusted, non-sensitive documents and control who can run searches.
Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachConnects to outside service APINOTED
- CredentialsNo API token requiredLOW
- Package sourceGitHub (asciimoo/hister)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
No npm or PyPI package is listed. Install from source: github.com/asciimoo/hister ↗
Everything known
We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.
0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30
Popularity grade: B (from public signals such as stars and downloads, not a code review). Graded 2026-10-21.
Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.
About Hister
Hister is a search engine tool that lets you search through indexed content. When used as an MCP connector, it likely allows Claude to perform searches across a local or configured index of web pages or documents.
Who it’s for
Developers and AI system builders who want to add custom search capabilities to Claude or other applications. Teams that need to search through private or offline document collections.
Alternatives
- Elasticsearch: A popular distributed search engine for indexing and querying large datasets.
- MeiliSearch: A lightweight, easy-to-use search engine with built-in ranking and filtering.
- Typesense: Fast open-source search engine optimized for instant, typo-tolerant results.
- Whoosh: Python-based search library for indexing and searching text documents locally.
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README. The GitHub repository should contain installation and configuration instructions for using hister as an MCP server with Claude Desktop or other compatible applications.
Why this grade
Signal-based grade (4/7 points): very widely starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 6.2k
- Listing last refreshed
- 2026-10-30
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Risks to watch for
- Search index access: The tool can search whatever content is indexed, which might include sensitive documents or private web pages if misconfigured.
- Data leakage through results: Search results sent back to Claude could expose confidential information from indexed sources.
- Malicious content in indexed pages: If the index includes untrusted web pages, hidden malware or misleading markup could manipulate how Claude interprets search results.
- No built-in authentication: Hister may not verify who is running searches, so any process with access could query sensitive indexed content.
- Index poisoning: If the indexing process trusts external sources, attackers could inject false or harmful content into the search index.
How to lower the risk
Least-privilege permissions
- Run hister with minimal file system access to only the documents meant to be searchable.
- Do not index system files, credentials, or private user data.
Network isolation
- Keep hister's network interface local (localhost only) unless you specifically need remote access.
- Do not expose the search engine to untrusted networks without authentication.
Monitoring
- Log all search queries and results to track what information is being accessed.
- Review indexed content regularly to ensure no sensitive files were added.
Red flags to watch for
- Searches returning unexpected or sensitive documents; may indicate misconfigured paths.
- Performance spikes during searches; could signal an attack attempting to extract data through repeated queries.
- Index size growing unexpectedly; may mean unintended files are being included.
Questions
How do I install Hister?
Hister does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/asciimoo/hister.
Are there security reports about Hister?
No reports found for this package in our research (last checked 2026-10-30). Hister currently holds Grade B (Some risk signals) based on public adoption and transparency signals. Key risk areas to watch include search index access, data leakage through results, malicious content in indexed pages.
Is Hister actively maintained?
Hister has 6.2k GitHub stars. Our directory data was last refreshed on 2026-10-30. Check recent commit activity, release tags, and open issues at github.com/asciimoo/hister before pinning it in production.
What are alternatives to Hister?
Notable alternatives to Hister include Elasticsearch (A popular distributed search engine for indexing and querying large datasets), MeiliSearch (A lightweight, easy-to-use search engine with built-in ranking and filtering), Typesense (Fast open-source search engine optimized for instant, typo-tolerant results), Whoosh (Python-based search library for indexing and searching text documents locally). You can also compare Hister side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use Hister? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/asciimoo-hister)HTML embed:
<a href="https://agentarmorhq.com/skills/asciimoo-hister"><img src="https://agentarmorhq.com/api/badge/asciimoo-hister" alt="AgentArmorHQ Risk Grade for Hister" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "asciimoo-hister"Share with your security lead
Need sign-off to use hister? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: hister
- **Listing URL:** https://agentarmorhq.com/skills/asciimoo-hister
- **Type:** App connector
- **Risk Grade:** Grade B (Some risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 6.2k GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** No API token required
- **Package source:** GitHub (asciimoo/hister)
#### Recommended Hardened Setup
- **Source Repo:** https://github.com/asciimoo/hister
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Publisher
- asciimoo
- Source code
- github.com/asciimoo/hister
- Est. context load
- ~650 tokens / turn (~4 tool schemas, 0.33% of 200k context)
- Popularity
- 6.2k GitHub stars
- Last updated
- 2026-10-30
- Last graded
- 2026-10-21
Community
Discussions for Hister
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude