C
Emerging
74/100
2 days ago

exomem

Durable memory with sources, proof, history, and review for MCP-capable agents. It turns a Markdown/Obsidian vault into a local knowledge substrate, enabling agents to store, search, and retrieve governed knowledge.

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

Artexis10

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 11 credentials: EXOMEM_REST_API_KEY, EXOMEM_IDEMPOTENCY_KEY, EXOMEM_JWT_SIGNING_KEY, EXOMEM_OAUTH_STORAGE_TOKEN, GITHUB_CLIENT_SECRET, EXOMEM_UPLOAD_TOKEN, EXOMEM_HOSTED_PROMOTION_SECRET, EXOMEM_LIVE_ACCEPTANCE_TOKEN, SUPERMEMORY_API_KEY, HUGGINGFACE_TOKEN, HF_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configEXOMEM_DISABLE_TIER21 if you want a smaller tool surface.
configEXOMEM_MCP_LEGACY_COMPAT
configEXOMEM_BASE_URLIf cwd .env or the process contains , setup registers its
🔐 secretEXOMEM_REST_API_KEYREST for personal HTTP integrations when is set.
configEXOMEM_HOST
configEXOMEM_VAULT_PATHcodex mcp add exomem --env ="/path/to/vault" -- exomem --transport stdio
configEXOMEM_INDEX_SCOPE
configEXOMEM_DISABLE_EMBEDDINGS1 forces keyword/BM25-only search.
configEXOMEM_EMBED_DEVICE
configEXOMEM_MODEidle; opt into GPU residency with =performance when you want it.
configEXOMEM_QUIET_MODELegacy truthy alias for quiet when EXOMEM_MODE is unset.
🔐 secretEXOMEM_IDEMPOTENCY_KEY
configEXOMEM_DISABLE_RELEVANCE_CHECK
configEXOMEM_DISABLE_MEDIA_EXTRACTION1 skips server-side OCR/ASR/PDF/Office extraction.
configEXOMEM_DISABLE_CLIP1 disables CLIP image search.
configEXOMEM_LEXICAL_BACKEND
configEXOMEM_DISABLE_FILE_WATCHER
configEXOMEM_WRITER_LEASE_STATE_DIR
🔐 secretEXOMEM_JWT_SIGNING_KEY
configEXOMEM_OAUTH_STORAGE_URL
configEXOMEM_WRITER_LEASE_URL
configEXOMEM_OAUTH_STORAGE_NAMESPACE
configEXOMEM_WRITER_LEASE_VAULT_ID
🔐 secretEXOMEM_OAUTH_STORAGE_TOKEN
configEXOMEM_OAUTH_STORAGE_TIMEOUT
configEXOMEM_WRITER_LEASE_REPLICA_ID
configEXOMEM_SESSION_STALE_GRACE_SECONDS
configEXOMEM_OAUTH_STORAGE_CACHE_TTL
configGITHUB_CLIENT_ID
🔐 secretGITHUB_CLIENT_SECRET
configEXOMEM_GITHUB_USERNAME
configEXOMEM_GITHUB_USER_ID
configEXOMEM_EAGER_BOOT
🔐 secretEXOMEM_UPLOAD_TOKEN
configEXOMEM_UPLOAD_MAX_BYTES
configEXOMEM_LARGE_UPLOAD_BASE_URL
configEXOMEM_CF_ACCESS_TEAM_DOMAIN
configEXOMEM_CF_ACCESS_AUD
configCODEX_HOME
configSYSTEMROOT
configEXOMEM_HOSTED_PROMOTION_KEY_ID
🔐 secretEXOMEM_HOSTED_PROMOTION_SECRET
configEXOMEM_HOSTED_DEPLOYMENT_SHA256
configEXOMEM_VEC_BACKEND
configEXOMEM_VEC_QUANT
🔐 secretEXOMEM_LIVE_ACCEPTANCE_TOKEN
configPROTOCOL_BUDGET_CAP_USD
🔐 secretSUPERMEMORY_API_KEY
configSOPS_BIN
configSOPS_AGE_RECIPIENTS
configTERRAFORM_BIN
configTF_CLOUD_ORGANIZATION
configTF_TOKEN_app_terraform_io
configEXOMEM_DIARIZE_DEVICE
configKB_MCP_DIARIZE_DEVICE
configKB_MCP_DIARIZE_MODEL
🔐 secretHUGGINGFACE_TOKEN
🔐 secretHF_TOKEN
configKB_MCP_DIARIZE_CLUSTERING_THRESHOLD
// quality suggestions

Shell command execution

6 child_process/subprocess calls in production code — runs shell commands (benchmarks/memorybench/providers/_guest_transport.ts:828, benchmarks/memorybench/providers/_guest_transport.ts:891, benchmarks/memorybench/providers/_guest_transport.ts:929)

Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.

Secrets not logged

4 secret values sent to console.log

Redact or omit secret values from log output.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/artexis10-exomem-10yv80)](https://m8ven.ai/mcp/artexis10-exomem-10yv80)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: 1d14e826426bb9af5ecfc2ebc7bdeb0d13739f41
code hash: e2bd3249d1dcad13b3c686222408fb1c1173c35d30fb3e548f97c6a94367997e
verified: 8/17/2026, 3:34:47 AM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client