/ 100

11 days ago

glama

Cachly — AI Cognitive Brain

Persistent AI memory for Claude Code, Cursor, GitHub Copilot & Windsurf — sessions, lessons learned, semantic search, and team brain. 38 MCP tools. Free tier, EU servers.

→ cachly-dev/cachly-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

1 flow detected: GEMINI_API_KEY. We can’t prove the destination matches the brand the credential belongs to.

🚨

Known vulnerabilities in dependencies: 1 critical, 3 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 6 credentials: COHERE_API_KEY, E2E_API_KEY, GEMINI_API_KEY, MISTRAL_API_KEY, OPENAI_API_KEY, TELEGRAM_BOT_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configCACHLY_API_TIMEOUT_MS

configCACHLY_API_URL— setup/init bake into the editor config only when it differs

configCACHLY_AUTO_INDEX

configCACHLY_BRAIN_INSTANCE_ID— Default instance UUID (optional — auto-resolved)

configCACHLY_CONFIDENCE_STALE_DAYS

configCACHLY_CONFIDENCE_WARN_DAYS

configCACHLY_EMBED_MODEL

configCACHLY_EMBED_PROVIDER— Force a specific one with =openai. Run

configCACHLY_EMBED_TIMEOUT_MS

configCACHLY_JWT— setup from VSCode task / CI (non-TTY) Auto-detects non-interactive, opens browser with step-by-step guide, prints =... setup instruction

configCACHLY_NO_TELEMETRY— unset Set to 1 to disable anonymous usage pings

configCACHLY_NO_UPDATE_CHECK

configCACHLY_PROVISION_TIMEOUT_MS

configCACHLY_VECTOR_URL

configCLAUDE_CODE_ENTRYPOINT

🔐 secretCOHERE_API_KEY— Cohere embed-english-v3.0

configCURSOR_TRACE_ID

🔐 secretE2E_API_KEY

configE2E_API_URL

configE2E_INSTANCE_ID

configE2E_JWT

configE2E_REDIS_HOST

configE2E_REDIS_PORT

configE2E_REDIS_TLS

configE2E_SKIP_SLOW

🔐 secretGEMINI_API_KEY— Google Gemini text-embedding-004

configGITHUB_COPILOT_WORKSPACE

configMCP_HTTP_PORT

🔐 secretMISTRAL_API_KEY— Mistral mistral-embed

configOLLAMA_BASE_URL— Ollama (local, free) nomic-embed-text

🔐 secretOPENAI_API_KEY— OpenAI text-embedding-3-small

configPORT

configTCO_API_URL

🔐 secretTELEGRAM_BOT_TOKEN

configTELEGRAM_CHAT_ID

configWINDSURF_SESSION_ID

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/cachly-dev-cachly-mcp-1m6dr3)](https://m8ven.ai/mcp/cachly-dev-cachly-mcp-1m6dr3)

commit: 3a1f18d1ffcd5eea3edf41dce8ce858cbe94f32c

code hash: 0d794d6394e39b8d6674a00c275720998d351f48b59c6f8beedfdb1160be7323

verified: 6/10/2026, 10:53:45 AM

view raw JSON →