Back to MCP Trust Indexm8ven
43
/ 100
1 month ago
glama

MemoryAPI

Persistent memory for AI agents. Store and semantically search memories via REST API or MCP. Free tier available.

→ heavysword1/memoryapi· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 7 credentials: ADMIN_SECRET, CDP_API_KEY_PRIVATE_KEY, OPENAI_API_KEY, STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, SUPABASE_SERVICE_KEY, WALLET_PRIVATE_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies2 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

lowexpress@4.18.2GHSA-qw6h-vgh9-j6wx

express vulnerable to XSS via response.redirect()

lowexpress@4.18.2GHSA-rv95-896h-c2vc

Express.js Open Redirect in malformed URLs

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretADMIN_SECRET
configAGENT_ID
configAPP_URL
configCDP_API_KEY_NAME
🔐 secretCDP_API_KEY_PRIVATE_KEY
configENDPOINT
configLIBRETRANSLATE_URL
configMETHOD
🔐 secretOPENAI_API_KEY
configPORT
configQUERY
configSTRIPE_PRO_PRICE_ID
🔐 secretSTRIPE_SECRET_KEY
configSTRIPE_STARTER_PRICE_ID
🔐 secretSTRIPE_WEBHOOK_SECRET
🔐 secretSUPABASE_SERVICE_KEY
configSUPABASE_URL
🔐 secretWALLET_PRIVATE_KEY
configX402_FACILITATOR_URL
configX402_NETWORK
configX402_WALLET_ADDRESS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/heavysword1-memoryapi-a12jgh)](https://m8ven.ai/mcp/heavysword1-memoryapi-a12jgh)
commit: a39f354cb1b9cf0c7e53868a20eea091787caed0
code hash: a5d9f52652bf36b10a372be941c860b29397b109f07d2d12eb4baa55b4fafc30
verified: 6/17/2026, 11:55:29 AM
view raw JSON →