← Back to search

io.github.michael-denyer/hot-memory-mcp

michael-denyer Scanned 29d ago

Two-tier memory: hot cache (0ms) + semantic search. Self-organizing.

C
65.9 / 100

Versions

0.4.1latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 16

hot_cache_status
annotations: none low

Show current hot cache contents, stats, and observability metrics. Returns items sorted by hot_score (highest first), along with: - metrics.hits: Times hot cache resource was read with content - metrics.misses: Times hot cache resource was empty - metrics.evictions: Items removed to make space for new ones - metrics.promotions: Items added to hot cache - effectiveness: Value metrics (hit rate, tool calls saved, most/least used) - avg_hot_score: Average hot score of items (for LRU ranking)

promote
annotations: none low

Manually promote a memory to hot cache for instant recall.

memory_id string
demote
annotations: none low

Remove a memory from hot cache (keeps in cold storage).

memory_id string
pin
annotations: none low

Pin a hot cache memory to prevent auto-eviction. Pinned memories stay in hot cache even when space is needed for new items. Only works on memories already in hot cache.

memory_id string
unpin
annotations: none low

Unpin a memory, making it eligible for auto-eviction from hot cache.

memory_id string
db_maintenance
annotations: none low

Run database maintenance (vacuum, analyze, auto-demote stale). Compacts the database to reclaim unused space, updates query planner statistics, and demotes stale hot memories (if auto_demote is enabled).

mark_memory_used
annotations: none low

Mark a memory as actually used/helpful after recall. Call this when a recalled memory was useful in your response. Helps improve ranking by tracking which memories are valuable. Args: memory_id: ID of the memory that was useful feedback: Optional feedback (e.g., "helpful", "partially_helpful") Returns: Success response with update count

feedback string memory_id int
link_memories
annotations: none low

Create a typed relationship between two memories. Use this to build a knowledge graph connecting related concepts. Relationships are directional: from_memory -[relation_type]-> to_memory. Examples: - "Python 3.12 features" -[supersedes]-> "Python 3.11 features" - "Auth implementation" -[depends_on]-> "Database schema" - "API endpoint details" -[elaborates]-> "API overview" - "Project notes" -[mentions]-> "PostgreSQL" (entity extraction)

to_memory_id string relation_type string from_memory_id string
get_related_memories
annotations: none low

Get memories related to a given memory. Returns related memories along with their relationship information. Use this to explore the knowledge graph around a specific concept.

direction string memory_id string relation_type string
bootstrap_project
annotations: none low

Bootstrap hot cache from project documentation files. Scans for common project documentation files (README.md, CLAUDE.md, etc.), parses them into memories, and optionally promotes to hot cache. This is ideal for quickly populating the hot cache when starting work on a new codebase. Edge cases handled gracefully: - Empty repo: Returns success with files_found=0 and helpful message - No markdown files: Returns success with message - File read errors: Logged in errors list, continues with other files - Empty files: Skipped silently - Binary files: Skipped with warning - All content already exists: Returns memories_skipped count

tags string root_path string memory_type string file_patterns string promote_to_hot string
end_session
annotations: none low

End a session and consolidate episodic memories. Mirrors human memory consolidation: short-term (episodic) memories that prove valuable get promoted to long-term (semantic) storage. Top episodic memories are selected by salience score (combining importance, trust, access count, and recency). Only memories above the threshold are promoted. Use this at the end of a conversation to preserve valuable learnings.

session_id string promote_top string promote_type string
remember
annotations: none low

Store a new memory. Returns the memory ID.

tags string content string category string session_id string memory_type string
recall
annotations: none low

Semantic search with confidence gating and composite ranking. Modes: - 'precision': High threshold (0.8), few results (3), prioritizes similarity - 'balanced': Default settings, good for general use - 'exploratory': Low threshold (0.5), more results (10), diverse ranking Returns memories with confidence level and hallucination-prevention guidance.

mode string limit string query string threshold string memory_type string include_related string expand_relations string
forget
annotations: none low

Delete a memory permanently.

memory_id string
list_memories
annotations: none low

List stored memories with pagination.

limit string offset string memory_type string
memory_stats
annotations: none low

Get memory statistics.

Permissions 4

filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, tempfile
shell high
Server uses shell capabilities via: subprocess
database medium
Server uses database capabilities via: sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 137

low
Tool 'hot_cache_status' has no annotations annotation_checker · 100%
low
Tool 'promote' has no annotations annotation_checker · 100%
low
Tool 'demote' has no annotations annotation_checker · 100%
low
Tool 'pin' has no annotations annotation_checker · 100%
low
Tool 'unpin' has no annotations annotation_checker · 100%
low
Tool 'db_maintenance' has no annotations annotation_checker · 100%
low
Tool 'mark_memory_used' has no annotations annotation_checker · 100%
low
Tool 'link_memories' has no annotations annotation_checker · 100%
low
Tool 'get_related_memories' has no annotations annotation_checker · 100%
low
Tool 'bootstrap_project' has no annotations annotation_checker · 100%
low
Tool 'end_session' has no annotations annotation_checker · 100%
low
Tool 'remember' has no annotations annotation_checker · 100%
low
Tool 'recall' has no annotations annotation_checker · 100%
low
Tool 'forget' has no annotations annotation_checker · 100%
low
Tool 'list_memories' has no annotations annotation_checker · 100%
low
Tool 'memory_stats' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastmcp@3.2,<4 (GHSA-5h2m-4q8j-pqpj) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2,<4 (GHSA-c2jp-c369-7pvx) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2,<4 (GHSA-m8x7-r2rg-vh5g) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2,<4 (GHSA-mxxr-jv3v-6pgc) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2,<4 (GHSA-rcfx-77hg-w2wv) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2,<4 (GHSA-rj5c-58rq-j5g5) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2,<4 (GHSA-rww4-4w9c-7733) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2,<4 (GHSA-vv7q-7jx5-f767) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2,<4 (PYSEC-2026-1364) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2,<4 (PYSEC-2026-1365) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2,<4 (PYSEC-2026-2474) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2,<4 (PYSEC-2026-2475) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2,<4 (PYSEC-2026-2476) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.2,<4 (PYSEC-2026-338) dependency_analyzer · 95%
medium
Vulnerable dependency: sqlite-vec@0.1,<1 (GHSA-vrcx-gx3g-j3h8) dependency_analyzer · 95%
medium
Vulnerable dependency: sqlite-vec@0.1,<1 (PYSEC-2026-1938) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0,<3 (GHSA-5jqp-qgf6-3pvh) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0,<3 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0,<3 (PYSEC-2021-47) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0,<3 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: loguru@0.7,<1 (GHSA-39ph-wr67-j4xq) dependency_analyzer · 95%
medium
Vulnerable dependency: loguru@0.7,<1 (PYSEC-2022-14) dependency_analyzer · 95%
medium
Vulnerable dependency: click@8.0,<9 (PYSEC-2026-2132) dependency_analyzer · 95%
medium
Vulnerable dependency: fastapi@0.100,<1 (GHSA-8h2j-cgx8-6xv7) dependency_analyzer · 95%
medium
Vulnerable dependency: fastapi@0.100,<1 (PYSEC-2021-100) dependency_analyzer · 95%
medium
Vulnerable dependency: fastapi@0.100,<1 (PYSEC-2024-38) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (GHSA-462w-v97r-4m45) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (GHSA-8r7q-cvjq-x353) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (GHSA-cpwx-vrp4-4pq7) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (GHSA-fqh9-2qgg-h84h) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (GHSA-g3rq-g295-4j3m) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (GHSA-h5c8-rqwp-cp95) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (GHSA-h75v-3vvj-5mfj) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (GHSA-hj2j-77xm-mc5v) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (GHSA-q2x7-8rv6-6q7h) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (PYSEC-2014-8) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (PYSEC-2014-82) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (PYSEC-2019-217) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (PYSEC-2019-220) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (PYSEC-2021-66) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (PYSEC-2026-1471) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (PYSEC-2026-1473) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (PYSEC-2026-1474) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0,<4 (PYSEC-2026-1475) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-282v-666c-3fvg) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-29pf-2h5f-8g72) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-37mw-44qp-f5jm) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-37q5-v5qm-c9v8) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-3863-2447-669p) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-4w7r-h757-3r74) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-59p9-h35m-wg4g) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-69w3-r845-3855) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-6rvg-6v2m-4j46) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-9356-575x-2w9m) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-fgcw-684q-jj6r) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-fpwr-67px-3qhx) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-hxxf-235m-72v3) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-jjph-296x-mrcr) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-phhr-52qp-3mj4) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-q2wp-rjmx-x6x9) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-qq3j-4f4f-9583) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-qxrp-vhvm-j765) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-rcv9-qm8p-9p6j) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-v68g-wm8c-6x7j) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-wrfc-pvp9-mr9g) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (GHSA-xrqw-3rrv-vx5w) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2023-299) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2023-300) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2023-301) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2024-227) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2024-228) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2024-229) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2025-211) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2025-212) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2025-213) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2025-214) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2025-215) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2025-216) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2025-217) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2025-218) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2025-40) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-1977) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-1978) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-1980) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-1981) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-1982) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-1983) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-1984) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-1985) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-1986) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-1987) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-1988) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-2288) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-2289) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-2290) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.0,<6 (PYSEC-2026-3929) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: hot_cache_status manifest_parser · 90%
info
Tool: promote manifest_parser · 90%
info
Tool: demote manifest_parser · 90%
info
Tool: pin manifest_parser · 90%
info
Tool: unpin manifest_parser · 90%
info
Tool: db_maintenance manifest_parser · 90%
info
Tool: mark_memory_used manifest_parser · 90%
info
Tool: link_memories manifest_parser · 90%
info
Tool: get_related_memories manifest_parser · 90%
info
Tool: bootstrap_project manifest_parser · 90%
info
Tool: end_session manifest_parser · 90%
info
Tool: remember manifest_parser · 90%
info
Tool: recall manifest_parser · 90%
info
Tool: forget manifest_parser · 90%
info
Tool: list_memories manifest_parser · 90%
info
Tool: memory_stats manifest_parser · 90%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 80%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%