← Back to search

@provos/memory-mcp-server

GitHub Actions Scanned 8d ago

Persistent memory MCP server with semantic search, LLM summarization, and automatic compaction

npm ↗
? Not scanned yet

Versions

0.2.0latest
Jun 24, 2026
0.1.3
Mar 15, 2026
0.1.2
Mar 14, 2026
0.1.0
Mar 13, 2026

Tools 0

No tools indexed yet.

Permissions 5

env_vars low
Server uses env_vars capabilities via: os.environ, process.env
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync(), subprocess
database medium
Server uses database capabilities via: better-sqlite3
network medium
Server uses network capabilities via: fetch(), http, https, httpx, net
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), os, path, pathlib, shutil, tempfile

Scan Findings 91

high
Hardcoded OAuth client ID in provos-ironcurtain-6fbe508/test/oauth-credentials.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in provos-ironcurtain-6fbe508/test/auth/oauth-provider.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in provos-ironcurtain-6fbe508/test/auth/oauth-token-provider.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in provos-ironcurtain-6fbe508/test/auth/oauth-flow.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in provos-ironcurtain-6fbe508/test/auth/auth-command.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in provos-ironcurtain-6fbe508/src/docker/oauth-credentials.ts auth_checker · 85%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 57 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: minimatch@10.2.1 (GHSA-23c5-xmqv-rm74) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.2.1 (GHSA-7r86-cg39-jmmj) dependency_analyzer · 95%
medium
Vulnerable dependency: node-forge@1.3.3 (GHSA-2328-f5f3-gj25) dependency_analyzer · 95%
medium
Vulnerable dependency: node-forge@1.3.3 (GHSA-5m6q-g25r-mvwx) dependency_analyzer · 95%
medium
Vulnerable dependency: node-forge@1.3.3 (GHSA-ppp5-5v6c-4jwp) dependency_analyzer · 95%
medium
Vulnerable dependency: node-forge@1.3.3 (GHSA-q67f-28xg-22rw) dependency_analyzer · 95%
medium
Vulnerable dependency: shell-quote@1.8.3 (GHSA-395f-4hp3-45gv) dependency_analyzer · 95%
medium
Vulnerable dependency: shell-quote@1.8.3 (GHSA-w7jw-789q-3m8p) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.5.0 (GHSA-4cwx-7wf7-3272) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.5.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.5.0 (GHSA-jr45-8vmc-qm54) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.5.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.5.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.20.0 (GHSA-58qx-3vcg-4xpx) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.20.0 (GHSA-96hv-2xvq-fx4p) dependency_analyzer · 95%
medium
Vulnerable dependency: smol-toml@1.4.2 (GHSA-v3rj-xjv7-4jmq) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: datasets@3.0.0 (PYSEC-2026-3716) dependency_analyzer · 95%
medium
Vulnerable dependency: tqdm@4.66.0 (GHSA-g7vv-2v7x-gj9p) dependency_analyzer · 95%
medium
Vulnerable dependency: tqdm@4.66.0 (PYSEC-2026-1976) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-469j-vmhf-r6v7) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-68j8-pq59-fqgm) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-6hm5-jgcp-p838) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-7p94-766c-hgjp) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-848c-c2cx-j7qx) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-fg7f-2386-8897) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-gfwx-w7gr-fvh7) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-h8wq-7xc4-p3qx) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-jm6w-m3j8-898g) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-m42h-3232-vpv3) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-p4gq-832x-fm9v) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-qvv7-cg9c-w4x3) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-rf74-v2fm-23pw) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-xh95-f55m-82fw) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-2078) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-2085) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-2235) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-2236) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-2237) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3581) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3582) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3583) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3584) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3657) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-597) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-96) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-97) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-98) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-99) dependency_analyzer · 95%
medium
Buffer.from base64 in provos-ironcurtain-6fbe508/test/pty-web-escalation.integration.test.ts:254 entropy_analyzer · 75%
medium
Buffer.from base64 in provos-ironcurtain-6fbe508/test/pty-web-escalation.integration.test.ts:256 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in provos-ironcurtain-6fbe508/scripts/spikes/secure-nested-docker/phase0b-dd-p0.mjs:39 entropy_analyzer · 70%
medium
Buffer.from base64 in provos-ironcurtain-6fbe508/packages/web-ui/scripts/mock-ws-server.ts:1744 entropy_analyzer · 75%
medium
Buffer.from base64 in provos-ironcurtain-6fbe508/src/llm-metrics/attribution-registry.ts:150 entropy_analyzer · 75%
medium
Buffer.from base64 in provos-ironcurtain-6fbe508/src/web-ui/pty-session-manager.ts:102 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (78) manifest_parser · 80%
medium
Hardcoded OAuth client ID in provos-ironcurtain-6fbe508/test/oauth-credentials.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in provos-ironcurtain-6fbe508/src/docker/oauth-credentials.ts oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 826 components sbom_generator · 100%
high
Generic API Key Assignment found in provos-ironcurtain-6fbe508/docs/designs/policy-compilation-implementation-plan.md secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%