← Back to search

@mycobrain/mcp-server

thegoodguysla Scanned 1d ago

Self-hosted memory layer for AI agents — MCP server backed by Postgres + pgvector + knowledge graph

npm
D
40 / 100

Versions

1.2.9latest
Jun 25, 2026
1.2.8
Jun 18, 2026
1.2.7
Jun 18, 2026
1.2.6
Jun 17, 2026
1.2.5
Jun 17, 2026
+ show 8 moreshow less
1.2.4
Jun 16, 2026
1.2.3
Jun 16, 2026
1.2.2
Jun 16, 2026
1.2.1
Jun 16, 2026
1.2.0
Jun 12, 2026
1.1.0
Jun 12, 2026
1.0.1
Jun 4, 2026
1.0.0
Jun 3, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 1

brain
annotations: none low

Permissions 5

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), os, path, pathlib
shell high
Server uses shell capabilities via: child_process, spawnSync()
database medium
Server uses database capabilities via: pg, psycopg
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 31

info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Tool 'brain' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.1.9 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: tqdm@4.66 (GHSA-g7vv-2v7x-gj9p) dependency_analyzer · 95%
medium
Vulnerable dependency: tqdm@4.66 (PYSEC-2026-1976) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@8.0 (GHSA-6w46-j5rx-g56g) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@8.0 (PYSEC-2026-1845) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: brain manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (55) manifest_parser · 80%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 325 components sbom_generator · 100%
critical
Database URL with Password found in thegoodguysla-myco-brain-d55c4f2/examples/agency/README.md secret_scanner · 85%
critical
Database URL with Password found in thegoodguysla-myco-brain-d55c4f2/examples/agency/sql/01_least_privilege_role.sql secret_scanner · 85%
high
Generic API Key Assignment found in thegoodguysla-myco-brain-d55c4f2/mcp-server/src/doctor.ts secret_scanner · 75%
high
Generic API Key Assignment found in thegoodguysla-myco-brain-d55c4f2/mcp-server/src/review.ts secret_scanner · 75%
high
Generic API Key Assignment found in thegoodguysla-myco-brain-d55c4f2/mcp-server/src/install.ts secret_scanner · 75%
high
Generic API Key Assignment found in thegoodguysla-myco-brain-d55c4f2/mcp-server/src/onboard.ts secret_scanner · 75%
high
Generic API Key Assignment found in thegoodguysla-myco-brain-d55c4f2/mcp-server/src/ingest-cli.ts secret_scanner · 75%
critical
Database URL with Password found in thegoodguysla-myco-brain-d55c4f2/mcp-server/eval/agent-contract/scenarios.json secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%