Back to MCP Trust Indexm8ven
74
/ 100
23 days ago
glama

Memxus

One context engine for every AI. Persistent context from GitHub, Notion, and your decisions, delivered to Claude, ChatGPT, Cursor, VS Code, Gemini, and any MCP-compatible client.

→ gpitrella/memxus-remote-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: MEMXUS_API_KEY. We can’t prove the destination matches the brand the credential belongs to.
⚠️
Known vulnerabilities in dependencies: 1 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 9 credentials: CHATGPT_OAUTH_CLIENT_SECRET, CONNECTORS_INTERNAL_SECRET, GITHUB_APP_PRIVATE_KEY, GITHUB_TOKEN, MASTER_ENCRYPTION_KEY, MEMXUS_API_KEY, NEXT_PUBLIC_SUPABASE_ANON_KEY, SUPABASE_ANON_KEY, SUPABASE_SERVICE_ROLE_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 high1 medium4 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highws@8.18.0GHSA-96hv-2xvq-fx4p

ws: Memory exhaustion DoS from tiny fragments and data chunks

mediumajv@8.17.1GHSA-2g4f-4pwh-qvx6

ajv has ReDoS when using `$data` option

lowexpress@4.18.2GHSA-qw6h-vgh9-j6wx

express vulnerable to XSS via response.redirect()

lowexpress@4.18.2GHSA-rv95-896h-c2vc

Express.js Open Redirect in malformed URLs

lowws@8.18.0GHSA-58qx-3vcg-4xpx

ws: Uninitialized memory disclosure

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configALLOWED_SKILL_DOC_HOSTS
configAPI_BASE_URL
configBILLING_UPGRADE_URL
configCHATGPT_OAUTH_CLIENT_ID
🔐 secretCHATGPT_OAUTH_CLIENT_SECRET
configCHATGPT_OAUTH_REDIRECT_URI
configCOMMUNITY_FETCH_CIRCUIT_ERROR_PCT
configCOMMUNITY_FETCH_CIRCUIT_MIN_ATTEMPTS
configCOMMUNITY_FETCH_CIRCUIT_OPEN_MS
configCOMMUNITY_FETCH_MAX_PER_WINDOW
configCOMMUNITY_FETCH_WINDOW_MS
configCONNECTORS_GATEWAY_URL
🔐 secretCONNECTORS_INTERNAL_SECRET
configDISABLE_SKILL_CARD_FOR_CLIENTS
configEMBED_CACHE_ENABLED
configEMBED_CACHE_MAX_ENTRIES
configEMBED_CACHE_TTL_MS
configENABLE_ENCRYPTION
configENABLE_ENCRYPT_METADATA
configENABLE_IMPACT_SUMMARY
configENABLE_INAPP_CONNECT
configENABLE_PLAN_WARNINGS
configFORCE_PLAIN_TEXT
configGITHUB_APP_ID
🔐 secretGITHUB_APP_PRIVATE_KEY
🔐 secretGITHUB_TOKEN
configKEYWORD_SEARCH_DECRYPT_CAP
🔐 secretMASTER_ENCRYPTION_KEY
configMCP_PERF_LOGS
configMCP_PREFS_CACHE_TTL_MS
configMCP_SESSION_TTL_MS
configMCP_SMOKE_URL
configMCP_STATELESS
🔐 secretMEMXUS_API_KEY
configNEXT_PUBLIC_POLAR_PRODUCT_STARTER
🔐 secretNEXT_PUBLIC_SUPABASE_ANON_KEY
configNEXT_PUBLIC_SUPABASE_URL
configOFFICIAL_SKILL_OWNERS
configOFFICIAL_SKILL_REPOS
configPLAN_CACHE_ENABLED
configPLAN_CACHE_MAX_ENTRIES
configPLAN_CACHE_TTL_MS
configPLAN_LIMITS_ENABLED
configPRICING_UPGRADE_URL
configPRICING_V3_RETENTION
configPROJECT_PROFILE_CACHE_TTL_MS
configSANITIZE_TOOL_ERRORS
configSKILLS_SH_API_URL
configSKILL_CARD_ROLLOUT_PCT
configSKILL_DISCOVERY_MAX_RESULTS
configSKILL_DISCOVERY_MIN_RESULTS
configSKILL_GITHUB_CACHE_TTL_MS
configSKILL_GITHUB_TIMEOUT_MS
configSKILL_PREFETCH_REUSE_MS
configSKILL_PRELOAD_ENABLED
configSMOKE_MANIFEST
🔐 secretSUPABASE_ANON_KEY
🔐 secretSUPABASE_SERVICE_ROLE_KEY— Supabase service role key
configSUPABASE_URL— Supabase project URL
configTEST_FLAG_XYZ
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/gpitrella-memxus-remote-mcp-60q6g3)](https://m8ven.ai/mcp/gpitrella-memxus-remote-mcp-60q6g3)
commit: be1eeaa3a66a1152c80ce1ebd735c1845747a27a
code hash: 5f872b407f65636ead1a8198bd612340d7fbd060f0dc60a7a93a3968f590748f
verified: 7/8/2026, 8:44:10 AM
view raw JSON →