2
/ 100
2 days ago
glama

Audrey

Local-first memory firewall and MCP server for AI agents. Audrey provides recall, memory capsules, preflight checks, reflexes, validation, tool-trace learning, contradiction handling, and SQLite/sqlite-vec storage.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Hardcoded credentials detected
8 live-looking API keys in source: 8 OpenAI API key
⚠️
Tests do not pass
Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.
🔐
You'll be asked for 7 credentials: ANTHROPIC_API_KEY, AUDREY_API_KEY, GOOGLE_API_KEY, OPENAI_API_KEY, PYPI_API_TOKEN, TWINE_PASSWORD, UV_PUBLISH_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretANTHROPIC_API_KEY
configAUDREY_AGENTollama-local-agent npx audrey serve
configAUDREY_ALLOW_NO_AUTH0 Set to 1 to allow non-loopback bind without an API key. Don't.
🔐 secretAUDREY_API_KEYUse if the REST sidecar is reachable beyond the local process boundary.
configAUDREY_CAPSULE_MODE
configAUDREY_CONTEXT_BUDGET_CHARS4000 Default Memory Capsule character budget.
configAUDREY_DATA_DIRSet one per tenant, environment, or isolation boundary.
configAUDREY_DEBUG0 Set to 1 to print MCP info logs (server started, warmup completed). Errors always log.
configAUDREY_DEMO_PARENT_DIR
configAUDREY_DEVICEgpu Local embedding device (gpu or cpu). Falls back to CPU if GPU init fails.
configAUDREY_EMBEDDING_DIMENSIONS
configAUDREY_EMBEDDING_PROVIDERPin and AUDREY_LLM_PROVIDER explicitly.
configAUDREY_ENABLE_ADMIN_TOOLS0 Set to 1 to enable export, import, and forget routes/tools. Disabled by default.
configAUDREY_HOST127.0.0.1 REST sidecar bind address. Set to 0.0.0.0 only with AUDREY_API_KEY.
configAUDREY_LLM_PROVIDERPin AUDREY_EMBEDDING_PROVIDER and explicitly.
configAUDREY_ONNX_VERBOSE0 Set to 1 to restore ONNX runtime EP-assignment warnings (suppressed by default).
configAUDREY_PERF_PARENT_DIR
configAUDREY_PORT7437 REST sidecar port.
configAUDREY_PRAGMA_DEFAULTS1 Set to 0 to revert SQLite PRAGMA tuning to better-sqlite3 defaults.
configAUDREY_PROMOTE_ROOTSunset Colon/semicolon-separated extra roots for audrey promote --yes writes. By default writes are restricted to process.cwd().
configAUDREY_RUN_LOCAL_EMBEDDING_TESTS
configAUDREY_SMOKE_TMPDIR
configAUDREY_URL
configComSpec
🔐 secretGOOGLE_API_KEY
configMAX_TOOL_LOOPS
configMEM0_BASE_URL
configMEM0_EVENT_POLL_INTERVAL_MS
configMEM0_EVENT_TIMEOUT_MS
configMEM0_GUARDBENCH_RUN_ID
configMEM0_GUARDBENCH_SKIP_CLEANUP
configMEM0_GUARDBENCH_USER_PREFIX
configOLLAMA_MODELqwen3 node examples/ollama-memory-agent.js "What should you remember about Audrey?"
configOLLAMA_URL
🔐 secretOPENAI_API_KEY
🔐 secretPYPI_API_TOKEN
🔐 secretTWINE_PASSWORD
configTWINE_USERNAME
🔐 secretUV_PUBLISH_TOKEN
configZEP_AUTH_SCHEME
configZEP_BASE_URL
configZEP_GUARDBENCH_INGEST_DELAY_MStime in a live account, set before the run.
configZEP_GUARDBENCH_RUN_ID
configZEP_GUARDBENCH_SKIP_CLEANUP
configZEP_GUARDBENCH_USER_PREFIX
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/evilander-audrey-1b2h6i)](https://m8ven.ai/mcp/evilander-audrey-1b2h6i)
commit: 9f771bae94f5ce4cfd5d5425e300a6a440c833d2
code hash: 5d164355f4b76b661190469beba422401f572cbc441e871c33cc9c23f0453ac8
verified: 6/2/2026, 11:12:28 AM
view raw JSON →