Grimoire

Item: Grimoire
Rating: 0
Author: M8ven

A self-hosted personal context server that unifies knowledge base, retrieval, credential management, and agent memory via MCP, with a built-in notes app for human oversight.

→ JeremiahM37/grimoire · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Code appears obfuscated

1 file are unreadable to a human reviewer. Cannot audit what they do.

🔐

You'll be asked for 3 credentials: ANTHROPIC_API_KEY, GRIMOIRE_AUTH_TOKEN, GRIMOIRE_SYNC_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configGRIMOIRE_NO_WATCHER— 0 Disable the filesystem watcher (tests/CI)

configGRIMOIRE_LOCAL_EMBED— / _MODEL auto / potion-base-8M pip install model2vec → local semantic embeddings, no service

configGRIMOIRE_OLLAMA_URL— (empty) Reachable Ollama → generative ask/summarize

configGRIMOIRE_EMBED_MODEL— nomic-embed-text Embeddings (offline hashing fallback built in)

configLOCOMO_DATA

configLOCOMO_PARALLEL

configLOCOMO_OLLAMA_URL

configLME_DATA

🔐 secretANTHROPIC_API_KEY

configGRIMOIRE_LLM_MODEL— GRIMOIRE_LLM / auto / qwen3.5:4b Answer backend + model

configGRIMOIRE_WHISPER_MODEL

configGRIMOIRE_FRAME_OPTIONS— SAMEORIGIN X-Frame-Options (reverse-proxy embedding)

configGRIMOIRE_VAULT— ~/notes .venv/bin/python -m server # → http://<host>:9111

configGRIMOIRE_PORT— / GRIMOIRE_HOST 9111 / 0.0.0.0 Bind address

configGRIMOIRE_HOST— GRIMOIRE_PORT / 9111 / 0.0.0.0 Bind address

configGRIMOIRE_DAILY_DIR— / GRIMOIRE_INBOX_DIR journal / inbox Vault sub-folders

configGRIMOIRE_INBOX_DIR— GRIMOIRE_DAILY_DIR / journal / inbox Vault sub-folders

🔐 secretGRIMOIRE_AUTH_TOKEN— (empty = open) Bearer token for the API/console

configGRIMOIRE_SYNC_PEER— / _TOKEN / _INTERVAL (off) Background sync with a peer

🔐 secretGRIMOIRE_SYNC_TOKEN

configGRIMOIRE_SYNC_INTERVAL

configGRIMOIRE_API— "env": { "": "http://localhost:9111",

configGRIMOIRE_AGENT_NAME— "": "my-agent" } } } }

configGRIMOIRE_VAULT_IDLE_LOCK— 900 Credential-vault auto-lock (seconds)

configGRIMOIRE_BROKER_ALLOW_PRIVATE— 0 Allow brokered calls to private-range hosts

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/jeremiahm37-grimoire-uoa9g7)](https://m8ven.ai/mcp/jeremiahm37-grimoire-uoa9g7)

commit: e02401d29812df0fe5187ff439c8ea44d772b67c

code hash: 6838d1075b5c6befa67506140b9a62e69d37e0f26233f7f3d14ef9e9bf393b6b

verified: 7/21/2026, 9:24:27 AM

view raw JSON →