OSS libs in your stack, really used: source, tests, callers. C#, Java, TS, Python, Rust, PHP+.
[](#language-coverage) [](docs/benchmarks/WHITEPAPER.md) Real callers. Real source. Real hierarchy. In 3 tool calls. → Landing page · → Benchmark whitepaper · → Connect in 30 seconds Your AI coding agent is burning tokens grepping OSS libraries it will barely use. xmp4 is a hosted MCP server that pre-indexes 856 popular open-source libraries with SCIP — the semantic code format Sourcegraph uses —…
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.
[](#language-coverage) [](docs/benchmarks/WHITEPAPER.md) Real callers. Real source. Real hierarchy. In 3 tool calls. → Landing page · → Benchmark whitepaper · → Connect in 30 seconds Your AI coding agent is burning tokens grepping OSS libraries it will barely use. xmp4 is a hosted MCP server that pre-indexes 856 popular open-source libraries with SCIP — the semantic code format Sourcegraph uses — and serves them through 17 tools. No clone. No grep. No false positives. Same realistic question on…