← Back to search

@provos/memory-mcp-server

GitHub Actions Scanned 25d ago

Persistent memory MCP server with semantic search, LLM summarization, and automatic compaction

npm ↗
? Not scanned yet

Versions

0.2.0latest
Jun 24, 2026
0.1.3
Mar 15, 2026
0.1.2
Mar 14, 2026
0.1.0
Mar 13, 2026

Tools 0

No tools indexed yet.

Permissions 5

network medium
Server uses network capabilities via: fetch(), http, https, httpx, net, socket, urllib
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), os, path, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync(), subprocess
database medium
Server uses database capabilities via: better-sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 145

high
Hardcoded OAuth client ID in provos-ironcurtain-1b5546b/test/oauth-credentials.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in provos-ironcurtain-1b5546b/test/auth/auth-command.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in provos-ironcurtain-1b5546b/test/auth/oauth-token-provider.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in provos-ironcurtain-1b5546b/test/auth/oauth-flow.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in provos-ironcurtain-1b5546b/test/auth/oauth-provider.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in provos-ironcurtain-1b5546b/src/docker/oauth-credentials.ts auth_checker · 85%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 60 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: minimatch@10.2.1 (GHSA-23c5-xmqv-rm74) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.2.1 (GHSA-7r86-cg39-jmmj) dependency_analyzer · 95%
medium
Vulnerable dependency: node-forge@1.3.3 (GHSA-2328-f5f3-gj25) dependency_analyzer · 95%
medium
Vulnerable dependency: node-forge@1.3.3 (GHSA-5m6q-g25r-mvwx) dependency_analyzer · 95%
medium
Vulnerable dependency: node-forge@1.3.3 (GHSA-ppp5-5v6c-4jwp) dependency_analyzer · 95%
medium
Vulnerable dependency: node-forge@1.3.3 (GHSA-q67f-28xg-22rw) dependency_analyzer · 95%
medium
Vulnerable dependency: shell-quote@1.8.3 (GHSA-395f-4hp3-45gv) dependency_analyzer · 95%
medium
Vulnerable dependency: shell-quote@1.8.3 (GHSA-w7jw-789q-3m8p) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.5.0 (GHSA-4cwx-7wf7-3272) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.5.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.5.0 (GHSA-jr45-8vmc-qm54) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.5.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.5.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.20.0 (GHSA-58qx-3vcg-4xpx) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.20.0 (GHSA-96hv-2xvq-fx4p) dependency_analyzer · 95%
medium
Vulnerable dependency: smol-toml@1.4.2 (GHSA-7w5x-hrqm-74c2) dependency_analyzer · 95%
medium
Vulnerable dependency: smol-toml@1.4.2 (GHSA-v3rj-xjv7-4jmq) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: datasets@3.0.0 (PYSEC-2026-3716) dependency_analyzer · 95%
medium
Vulnerable dependency: tqdm@4.66.0 (GHSA-g7vv-2v7x-gj9p) dependency_analyzer · 95%
medium
Vulnerable dependency: tqdm@4.66.0 (PYSEC-2026-1976) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-3gq4-3j92-5w49) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-3gqm-fcw5-w839) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-469j-vmhf-r6v7) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-568f-pv23-39p4) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-5wp5-5229-5g6q) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-68j8-pq59-fqgm) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-6hm5-jgcp-p838) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-6hwm-xvph-95vm) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-6ww7-3frv-cqxh) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-72r2-7mfr-5xr9) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-7p94-766c-hgjp) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-848c-c2cx-j7qx) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-8mgp-746c-j5xp) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-8mpw-7fpc-4gqj) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-97qj-x29f-37w7) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-cw6x-m8jw-qmrh) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-f794-5jv7-7672) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-ff5c-cp5c-9wjf) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-fg7f-2386-8897) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-gfwx-w7gr-fvh7) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-h8wq-7xc4-p3qx) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-jm6w-m3j8-898g) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-m42h-3232-vpv3) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-m4rf-3fr8-xwx3) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-p3m8-78j2-g5p3) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-p4gq-832x-fm9v) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-p4rw-rvv2-7xwr) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-qvv7-cg9c-w4x3) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-qx2g-xrx7-vfh8) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-r6gq-whwq-mvg9) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-rf74-v2fm-23pw) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-rhp5-r9x4-f5g2) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-rrv8-h7p8-rx55) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-vp2x-qp44-57v7) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-w3v8-gmh9-3wv7) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-ww6m-cw3f-q94g) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-x5ph-mj9p-rfr8) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-x99w-6fgc-pmfw) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (GHSA-xh95-f55m-82fw) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-2078) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-2085) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-2235) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-2236) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-2237) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3581) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3582) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3583) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3584) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3657) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3722) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3723) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3724) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3728) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3729) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3730) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3731) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3732) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3733) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3734) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3735) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3736) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3737) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3738) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3739) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3740) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3741) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3748) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3749) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3750) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3751) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3752) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3868) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3869) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3870) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3871) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3954) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-3955) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-597) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-96) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-97) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-98) dependency_analyzer · 95%
medium
Vulnerable dependency: nltk@3.9.0 (PYSEC-2026-99) dependency_analyzer · 95%
medium
Buffer.from base64 in provos-ironcurtain-1b5546b/test/pty-web-escalation.integration.test.ts:274 entropy_analyzer · 75%
medium
Buffer.from base64 in provos-ironcurtain-1b5546b/test/pty-web-escalation.integration.test.ts:276 entropy_analyzer · 75%
medium
Buffer.from base64 in provos-ironcurtain-1b5546b/test/docker/proxy-authorization.test.ts:8 entropy_analyzer · 75%
medium
Buffer.from base64 in provos-ironcurtain-1b5546b/packages/web-ui/scripts/mock-ws-server.ts:1813 entropy_analyzer · 75%
medium
Buffer.from base64 in provos-ironcurtain-1b5546b/src/web-ui/pty-session-manager.ts:102 entropy_analyzer · 75%
medium
Buffer.from base64 in provos-ironcurtain-1b5546b/src/llm-metrics/attribution-registry.ts:150 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (92) manifest_parser · 80%
medium
Hardcoded OAuth client ID in provos-ironcurtain-1b5546b/test/oauth-credentials.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in provos-ironcurtain-1b5546b/src/docker/oauth-credentials.ts oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 821 components sbom_generator · 100%
high
Generic API Key Assignment found in provos-ironcurtain-1b5546b/docs/designs/policy-compilation-implementation-plan.md secret_scanner · 75%
critical
RSA Private Key found in provos-ironcurtain-1b5546b/src/workflow/workflows/nested-docker-live-smoke/scripts/nested_docker_probe.py secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%