74
/ 100
13 days ago
glama

Cairn MCP Server

A self-hosted persistent memory platform for AI agents and humans offering tools for memory storage, search, beliefs, work management, and code intelligence via MCP.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 13 credentials: CAIRN_NEO4J_PASSWORD, CAIRN_API_KEY, CAIRN_DB_PASS, CAIRN_EMBEDDING_OPENAI_KEY, CAIRN_OPENAI_API_KEY, CAIRN_GEMINI_API_KEY, CAIRN_SSH_ENCRYPTION_KEY, CAIRN_AUTH_JWT_SECRET, CAIRN_OIDC_CLIENT_SECRET, CAIRN_OPENCODE_PASSWORD, CAIRN_CLAUDE_CODE_SSH_KEY, CAIRN_PUSH_TOKEN, CAIRN_PG_PASS
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configCAIRN_API_URL
configCAIRN_NEO4J_URIbolt://localhost:7687 Neo4j bolt URI
configCAIRN_NEO4J_USERneo4j Neo4j username
🔐 secretCAIRN_NEO4J_PASSWORDcairn-dev-password Neo4j password
configCAIRN_NEO4J_DATABASE
🔐 secretCAIRN_API_KEY(empty) API key if cairn auth is enabled
configCAIRN_CODE_FORCEfalse Force re-index even if content hash unchanged
configCAIRN_CODE_WATCHtrue Enable filesystem watching after initial index
configCAIRN_CODE_PROJECTS(empty) Comma-separated project=path pairs (alternative to --watch)
configCAIRN_PROFILE(empty) Preset: vector, enriched, knowledge, enterprise. Sets capability defaults.
configCAIRN_DB_HOST
configCAIRN_DB_PORT
configCAIRN_DB_NAME
configCAIRN_DB_USER
🔐 secretCAIRN_DB_PASScairn-dev-password Database password. Change this for anything beyond local.
configCAIRN_EMBEDDING_BACKENDlocal local (MiniLM, 384-dim) or bedrock (Titan V2, 1024-dim)
configCAIRN_EMBEDDING_MODEL
configCAIRN_EMBEDDING_DIMENSIONS
configCAIRN_EMBEDDING_BEDROCK_MODEL
configCAIRN_EMBEDDING_BEDROCK_REGION
configAWS_DEFAULT_REGION
configCAIRN_EMBEDDING_OPENAI_URL
configCAIRN_OPENAI_BASE_URL
configCAIRN_EMBEDDING_OPENAI_MODEL
🔐 secretCAIRN_EMBEDDING_OPENAI_KEY
🔐 secretCAIRN_OPENAI_API_KEY
configCAIRN_LLM_BACKENDAWS Bedrock Set =bedrock, export AWS creds.
configCAIRN_BEDROCK_MODEL
configCAIRN_OLLAMA_URL
configCAIRN_OLLAMA_MODEL
configCAIRN_GEMINI_MODEL
🔐 secretCAIRN_GEMINI_API_KEYGoogle Gemini Set CAIRN_LLM_BACKEND=gemini, add . Free tier available.
configCAIRN_OPENAI_MODEL
configCAIRN_LLM_RELATIONSHIP_EXTRACT
configCAIRN_LLM_RULE_CONFLICT_CHECK
configCAIRN_LLM_SESSION_SYNTHESIS
configCAIRN_LLM_CONSOLIDATION
configCAIRN_LLM_CONFIDENCE_GATING
configCAIRN_RERANKING
configCAIRN_TYPE_ROUTING
configCAIRN_SPREADING_ACTIVATION
configCAIRN_MCA_GATE
configCAIRN_ACCESS_FREQUENCY
configCAIRN_KNOWLEDGE_EXTRACTIONfalse Entity/statement extraction on store
configCAIRN_CODE_INTELLIGENCE
configCAIRN_SEARCH_V2
configCAIRN_THOUGHT_EXTRACTION
configCAIRN_TERMINAL_BACKEND
🔐 secretCAIRN_SSH_ENCRYPTION_KEY
configCAIRN_TERMINAL_MAX_SESSIONS
configCAIRN_TERMINAL_CONNECT_TIMEOUT
configCAIRN_AUTH_ENABLEDfalse Multi-user authentication (JWT, PATs, OIDC/SSO)
configCAIRN_AUTH_HEADER
🔐 secretCAIRN_AUTH_JWT_SECRET(empty) JWT signing secret (required when auth enabled)
configCAIRN_AUTH_JWT_EXPIRE_MINUTES
configCAIRN_STDIO_USER
configCAIRN_OIDC_ENABLEDfalse OIDC/SSO integration (any OIDC-compliant provider)
configCAIRN_OIDC_PROVIDER_URL
configCAIRN_OIDC_CLIENT_ID
🔐 secretCAIRN_OIDC_CLIENT_SECRET
configCAIRN_OIDC_SCOPES
configCAIRN_OIDC_AUTO_CREATE
configCAIRN_OIDC_DEFAULT_ROLE
configCAIRN_OIDC_ADMIN_GROUPS
configCAIRN_MCP_OAUTH_ENABLEDfalse OAuth2 Authorization Server for remote MCP clients (Claude.ai, mobile)
configCAIRN_MCP_OAUTH_ACCESS_EXPIRY
configCAIRN_MCP_OAUTH_REFRESH_EXPIRY
configCAIRN_ANALYTICS_ENABLED
configCAIRN_ANALYTICS_RETENTION_DAYS
configCAIRN_ANALYTICS_COST_EMBEDDING
configCAIRN_ANALYTICS_COST_LLM_INPUT
configCAIRN_ANALYTICS_COST_LLM_OUTPUT
configCAIRN_ROUTER_ENABLED
configCAIRN_ROUTER_CAPABLE_BACKEND
configCAIRN_ROUTER_CAPABLE_MODEL
configCAIRN_ROUTER_CAPABLE_BUDGET
configCAIRN_ROUTER_FAST_BACKEND
configCAIRN_ROUTER_FAST_MODEL
configCAIRN_ROUTER_FAST_BUDGET
configCAIRN_ROUTER_CHAT_BACKEND
configCAIRN_ROUTER_CHAT_MODEL
configCAIRN_ROUTER_CHAT_BUDGET
configCAIRN_RERANKER_BACKEND
configCAIRN_RERANKER_MODEL
configCAIRN_RERANK_CANDIDATES
configCAIRN_RERANKER_BEDROCK_MODEL
configCAIRN_RERANKER_REGION
configCAIRN_WORKSPACE_BACKEND
configCAIRN_OPENCODE_URL
🔐 secretCAIRN_OPENCODE_PASSWORD
configCAIRN_OPENCODE_DEFAULT_AGENT
configCAIRN_CLAUDE_CODE_ENABLED
configCAIRN_CLAUDE_CODE_WORKING_DIR
configCAIRN_CLAUDE_CODE_MAX_TURNS
configCAIRN_CLAUDE_CODE_MAX_BUDGET
configCAIRN_CLAUDE_CODE_MCP_URL
configCAIRN_CLAUDE_CODE_SSH_HOST
configCAIRN_CLAUDE_CODE_SSH_USER
🔐 secretCAIRN_CLAUDE_CODE_SSH_KEY
configCAIRN_AGENT_SDK_ENABLED
configCAIRN_AGENT_SDK_WORKING_DIR
configCAIRN_AGENT_SDK_MAX_TURNS
configCAIRN_AGENT_SDK_MAX_BUDGET
configCAIRN_AGENT_SDK_MCP_URL
configCAIRN_AGENT_SDK_DEFAULT_MODEL
configCAIRN_AGENT_SDK_SANDBOX
configCAIRN_BUDGET_RULES
configCAIRN_BUDGET_SEARCH
configCAIRN_BUDGET_RECALL
configCAIRN_BUDGET_CAIRN_STACK
configCAIRN_BUDGET_INSIGHTS
configCAIRN_BUDGET_WORKSPACE
configCAIRN_BUDGET_ORIENT
configCAIRN_WORK_ITEMS_PREFIX_LENGTH
configCAIRN_CLUSTER_MIN_SIZE
configCAIRN_CLUSTER_MIN_SAMPLES
configCAIRN_CLUSTER_SELECTION_METHOD
configCAIRN_CLUSTER_STALENESS_HOURS
configCAIRN_CLUSTER_STALENESS_GROWTH_PCT
configCAIRN_CLUSTER_TSNE_MAX_SAMPLES
configCAIRN_ENRICHMENT_ENABLED
configCAIRN_EXTENDED_TOOLS
configCAIRN_TRANSPORT
configCAIRN_HTTP_HOST
configCAIRN_HTTP_PORT
configCAIRN_PUBLIC_URLPrerequisites: Auth enabled (CAIRN_AUTH_ENABLED=true), OIDC configured (CAIRN_OIDC_ENABLED=true), and a public URL set ().
configCAIRN_CORS_ORIGINS
configCAIRN_EVENT_ARCHIVE_DIR
configCAIRN_INGEST_DIR/data/ingest Staging directory for file-path ingestion of large documents
configCAIRN_CODE_DIR/data/code Root directory for code intelligence indexing (mount codebases here)
configCAIRN_INGEST_MAX_SIZE
configCAIRN_INGEST_CHUNK_SIZE
configCAIRN_INGEST_CHUNK_OVERLAP
configCAIRN_DECAY_LAMBDA
configCAIRN_DECAY_ENABLED
configCAIRN_DECAY_SCAN_INTERVAL
configCAIRN_DECAY_THRESHOLD
configCAIRN_DECAY_MIN_AGE_DAYS
configCAIRN_DECAY_PROTECT_IMPORTANCE
configCAIRN_DECAY_PROTECT_TYPES
configCAIRN_DECAY_DRY_RUN
configCAIRN_CONSOLIDATION_ENABLED
configCAIRN_CONSOLIDATION_INTERVAL
configCAIRN_CONSOLIDATION_MIN_CLUSTER
configCAIRN_CONSOLIDATION_SIMILARITY
configCAIRN_CONSOLIDATION_DRY_RUN
configCAIRN_CONSOLIDATION_MAX_PER_RUN
configCAIRN_AUDIT_ENABLED
configCAIRN_WEBHOOKS_ENABLED
configCAIRN_WEBHOOKS_DELIVERY_INTERVAL
configCAIRN_WEBHOOKS_BATCH_SIZE
configCAIRN_WEBHOOKS_MAX_ATTEMPTS
configCAIRN_WEBHOOKS_BACKOFF_BASE
configCAIRN_WEBHOOKS_TIMEOUT
configCAIRN_ALERTING_ENABLED
configCAIRN_ALERTING_EVAL_INTERVAL
configCAIRN_RETENTION_ENABLED
configCAIRN_RETENTION_SCAN_INTERVAL
configCAIRN_RETENTION_DRY_RUN
configCAIRN_OTEL_ENABLED
configCAIRN_OTEL_ENDPOINT
configCAIRN_OTEL_SERVICE_NAME
configCAIRN_PUSH_ENABLED
configCAIRN_PUSH_URL
🔐 secretCAIRN_PUSH_TOKEN
configCAIRN_PUSH_TOPIC
configCAIRN_PUSH_TIMEOUT
configCAIRN_PG_HOST
configCAIRN_PG_PORT
configCAIRN_PG_DB
configCAIRN_PG_USER
🔐 secretCAIRN_PG_PASS
configCAIRN_DB_CONTAINER
configCAIRN_ALLOW_INSECURE
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/jasondostal-cairn-mcp-zkfgv7)](https://m8ven.ai/mcp/jasondostal-cairn-mcp-zkfgv7)
commit: 40be32a9718ea7e090bb9591605b440ce230cd41
code hash: dc65268b074be5dead5c8b61364390a59f7dee82cd386a4b0adf14465bfec4bc
verified: 7/18/2026, 8:01:56 AM
view raw JSON →