{
"canonical_url": "xerj.org",
"capabilities": [],
"category": "Open-source project",
"classification": {
"matched": {
"data": [
"rag",
"search",
"vector"
],
"technology": [
"api",
"cli",
"code",
"mcp"
]
},
"taxonomy_version": "sar-taxonomy-1.0"
},
"commercial": false,
"compliance": [
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://xerj.org/security/",
"framework": "fedramp",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "41d241519e888c5e0593db8abace55ba4936ba1e35c77ceb97225bbf63f19cf5",
"period_end": null,
"retrieved_at": "2026-10-26T12:31:17Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://xerj.org/security/",
"framework": "gdpr",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "41d241519e888c5e0593db8abace55ba4936ba1e35c77ceb97225bbf63f19cf5",
"period_end": null,
"retrieved_at": "2026-10-26T12:31:17Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "HIPAA: BAA available (vendor-claimed, 2026-10-26)",
"evidence_url": "https://xerj.org/security/",
"framework": "hipaa",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "41d241519e888c5e0593db8abace55ba4936ba1e35c77ceb97225bbf63f19cf5",
"period_end": null,
"retrieved_at": "2026-10-26T12:31:17Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "BAA_AVAILABLE"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "ISO 27001: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://xerj.org/security/",
"framework": "iso27001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "41d241519e888c5e0593db8abace55ba4936ba1e35c77ceb97225bbf63f19cf5",
"period_end": null,
"retrieved_at": "2026-10-26T12:31:17Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27001"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://xerj.org/security/",
"framework": "pci_dss",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "41d241519e888c5e0593db8abace55ba4936ba1e35c77ceb97225bbf63f19cf5",
"period_end": null,
"retrieved_at": "2026-10-26T12:31:17Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "SOC 2 Type I: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://xerj.org/security/",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "41d241519e888c5e0593db8abace55ba4936ba1e35c77ceb97225bbf63f19cf5",
"period_end": null,
"retrieved_at": "2026-10-26T12:31:17Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "SOC2_TYPE_I"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "SOC 2 Type II: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://xerj.org/security/",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "41d241519e888c5e0593db8abace55ba4936ba1e35c77ceb97225bbf63f19cf5",
"period_end": null,
"retrieved_at": "2026-10-26T12:31:17Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "SOC2_TYPE_II"
}
],
"deployment": "self-hosted",
"description": "Local-first search engine and MCP server for AI agents. One Rust binary indexes code, docs, logs, JSONL/CSV and PDFs for BM25 full-text, vector and hybrid search, code search without grep, agent memory and RAG. Elasticsearch-compatible API; Corpus Hub serves hundreds of reference memory corpora.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"data": {
"components": {
"adoption": 24.32,
"docs": 7.0,
"domain_fit": 71.3,
"ecosystem": 6.6,
"governance": 6.0,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.713,
"evidence_coverage": 1.0,
"governance_credited": {
"iso27001": 0.15,
"soc2": 0.15
},
"profile": "data",
"rank": null,
"score": 77.1,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": []
},
"technology": {
"components": {
"adoption": 24.32,
"docs": 7.0,
"domain_fit": 81.0,
"ecosystem": 6.6,
"governance": 6.0,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.81,
"evidence_coverage": 1.0,
"governance_credited": {
"iso27001": 0.15,
"soc2": 0.15
},
"profile": "technology",
"rank": null,
"score": 78.5,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": []
}
},
"external_ids": {
"github": "xerj-org/xerj"
},
"first_seen": "2026-10-26T12:12:50Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_d80551ffdb6f0d49",
"identity": {
"evidence": [
"vendor_domain_product_page"
],
"rules_version": "identity-1.1",
"tier": 2
},
"issues": {
"advisories": 0,
"cves": 0,
"incidents": 0,
"links": [],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:17:57Z",
"license": "Apache-2.0",
"merged_ids": [
"res_d80551ffdb6f0d49"
],
"name": "xerj",
"news": [
{
"cluster_size": 2,
"date": "2026-10-26T04:53:12Z",
"headline": "xerj: hub pack: rust-vulns @ b71a98bc",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "Pre-indexed, signed Corpus Hub v2 pack for the `rust-vulns` record corpus.\n\n- content pin: `b71a98bca7f0e33ab7a86becc4f37f03704b18fb` (records of 2026-10-26)\n- licence: CC0-1.0 (adapt-with-attribution)\n- definitions: 2781, files: 2\n- built",
"tag": "product_update",
"url": "https://github.com/xerj-org/xerj/releases/tag/pack-rust-vulns-b71a98bc-r2"
},
{
"cluster_size": 1,
"date": "2026-10-26T04:56:09Z",
"headline": "xerj: rust-vulns corpus pack (pack-rust-vulns-2026-10-26)",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "The `rust-vulns` corpus pack, built and signed by the scheduled\n`pack publish` workflow from `tools/packs/rust-vulns/recipe.toml`.\n\nOne release per build; under immutable releases a same-day\nrebuild publishes under `-r2`, `-r3`, … instead o",
"tag": "product_update",
"url": "https://github.com/xerj-org/xerj/releases/tag/pack-rust-vulns-2026-10-26"
}
],
"news_checked": true,
"protocols": {
"a2a": {
"checked_at": "2026-10-26T12:24:17Z",
"parser_version": "a2a-0.3+1.0",
"status": "not_found"
},
"ard": {
"checked_at": "2026-10-26T12:24:16Z",
"parser_version": "ard-0.91",
"status": "not_found"
},
"mcp": {
"evidence_url": "https://xerj.org",
"note": "named in the resource's own tags",
"probe": {
"checked_at": "2026-10-26T12:24:17Z",
"status": "not_found"
},
"source": "self_description",
"status": "claimed"
}
},
"publisher_domain": "xerj.org",
"resource_type": "mcp_server",
"scope": "public",
"signals": {
"github_archived": false,
"github_created_at": "2026-06-30T04:32:45Z",
"github_forks": 1160,
"github_language": "Rust",
"github_open_issues": 72,
"github_pushed_at": "2026-10-26T11:47:21Z",
"github_stars": 15726,
"github_topic": "mcp-server",
"homepage": "https://xerj.org"
},
"slug": "xerj-org-xerj",
"sources": [
{
"payload_hash": "d76eaa058aa288670383231a55e62e110c4f50ce7a03b7a667b6108f224db189",
"retrieved_at": "2026-10-26T12:17:57Z",
"system": "github",
"url": "https://github.com/xerj-org/xerj"
}
],
"tags": [
"agent-memory",
"ai-agents",
"bm25",
"claude-code",
"cli",
"code-search",
"cursor",
"elasticsearch",
"elasticsearch-alternative",
"full-text-search",
"hybrid-search",
"jsonl",
"local-first",
"mcp",
"mcp-server",
"model-context-protocol",
"rag",
"rust",
"search-engine",
"vector-search"
],
"tenant": null,
"traces": [],
"trust": {
"compliance": 5,
"identity": 2,
"issues": 1,
"protocols": 3,
"security": null,
"traces": 5,
"vendor_compliance": 4
},
"url": "https://xerj.org",
"vendor": "xerj-org"
}