Marrow

Marrow is a persistent multi-project memory backend that provides AI agents with MCP tools for semantic code navigation, task backlog management, and versioned artifact storage. It enables seamless, token-optimized context sharing and asynchronous handoffs between different AI models working on the same codebase.

→ desikai-lab/Marrow · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: GITHUB_TOKEN, SECRET_TOKEN, MCP_SECRET_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretGITHUB_TOKEN

🔐 secretSECRET_TOKEN— your-strong-random-secret

configEMBEDDING_MODEL_CODE— Sentence-transformer model for code skeleton embeddings BAAI/bge-small-en-v1.5

configEMBEDDING_MODEL_NAME

configEMBEDDING_DIMENSIONS— Embedding vector dimensions — must match the chosen model 384

configMAX_EMBED_CHARS— Maximum characters to embed per chunk 2000

configAGENT_PROFILE_ENGINE_ENABLED

configVECT_DEBOUNCE_SECONDS— Debounce delay before vectorizing a changed file 0.5

configTASKS_DIR— /data # leave as-is for Docker; data persists in a named volume

configLOG_LEVEL

configHOST

configPORT— HTTP server port 8000

configMAINTENANCE_INTERVAL_SECONDS

configMCP_DEBUG_TRANSPORT

configBASE_URL

configWORKER_OUTBOX_PATH

configWORKER_FLUSH_INTERVAL_SECONDS

configWORKER_FLUSH_CONCURRENCY

🔐 secretMCP_SECRET_TOKEN

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/desikai-lab-marrow-6yv107)](https://m8ven.ai/mcp/desikai-lab-marrow-6yv107)

commit: e0610a8671f09c54574f6b8e6db9e1e5a72d192c

code hash: 302c1c6b0f7d1465f435c9236c0c1e13b7a0a8aa9bfcea918dd5df7d2bfd0e7a

verified: 6/25/2026, 9:48:56 AM

view raw JSON →