grade F

10 days ago

glama

Brain MCP

Enables inter-session communication and coordination for multiple Claude Code instances through a shared SQLite database. Supports real-time messaging, shared state management, and resource locking to facilitate parallel development workflows between AI agents.

→ DevvGwardo/brain-mcp · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tool descriptions don’t match what handlers do

2 tools describe read intent but their handlers mutate — project_activity (line 468: execSync(logCmd, {); git_log (line 533: execSync(cmd, {)

⚠️

Known vulnerabilities in dependencies: 3 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 11 credentials: ANTHROPIC_API_KEY, COPILOT_GITHUB_TOKEN, GEMINI_API_KEY, GH_TOKEN, GROQ_API_KEY, KIMI_API_KEY, MINIMAX_API_KEY, NVIDIA_API_KEY, OPENAI_API_KEY, OPENROUTER_API_KEY, XAI_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretANTHROPIC_API_KEY

configBRAIN_COMPACT

configBRAIN_DB_PATH— ~/.claude/brain/brain.db Custom database path

configBRAIN_DEFAULT_CLI— claude Default CLI for brain_wake (hermes/claude)

configBRAIN_EMBEDDING_MODEL

configBRAIN_HTTP_HOST

configBRAIN_HTTP_PORT

configBRAIN_LEGACY_ALIASES

configBRAIN_LOG_PATH

configBRAIN_ROOM— Room scoping — Working directory is the default room. Override with .

configBRAIN_SESSION_ID— uuid Pre-set session id (used by orchestrator)

configBRAIN_SESSION_NAME— session-{pid} Pre-set session name

configBRAIN_STDERR_LOGS

configBRAIN_WORKFLOW_TIMEOUT

🔐 secretCOPILOT_GITHUB_TOKEN

🔐 secretGEMINI_API_KEY

🔐 secretGH_TOKEN

🔐 secretGROQ_API_KEY

configHERMES_HOME

configHERMES_INFERENCE_PROVIDER

configHERMES_MODEL— Model passed to spawned hermes agents

🔐 secretKIMI_API_KEY

configLLM_PROXY_HOST

configLLM_PROXY_PORT

🔐 secretMINIMAX_API_KEY

🔐 secretNVIDIA_API_KEY

🔐 secretOPENAI_API_KEY

configOPENAI_BASE_URL

🔐 secretOPENROUTER_API_KEY

🔐 secretXAI_API_KEY

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 9 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/devvgwardo-brain-mcp-fwn806)](https://m8ven.ai/mcp/devvgwardo-brain-mcp-fwn806)

commit: f7cd8b284e6f15930a9a678fafe2f6f7b343d3a6

code hash: 5167e35bda162831ea2c3259e2ecaa703836101fe93fcf83f981c16cb0e5d92f

verified: 4/11/2026, 2:20:28 PM

view raw JSON →