captain-memo (kalinbogatzevski/captain-memo) is an MCP server listed on the M8ven Trust Index. It scores 72 out of 100, grade C. It declares 18 tools. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
C
Caution
72/100

captain-memo

Local, cross-AI memory for coding agents — Claude Code, Codex, Gemini, Antigravity, Cursor, Kimi & more share one private corpus. Hybrid search, auto-injected context, no-API-key summarizers, runs fully local via Ollama.

→ kalinbogatzevski/captain-memo· listed on github_repo_search

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

kalinbogatzevski

Source: github_repo_search

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

GitHub

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 5 credentials: ANTHROPIC_API_KEY, CAPTAIN_MEMO_EMBEDDER_API_KEY, CAPTAIN_MEMO_OPENAI_API_KEY, CAPTAIN_MEMO_VOYAGE_API_KEY, CLAUDE_CODE_OAUTH_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes18 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

search_memory

Search across local memory files (curated user memory). Returns top-K results.

remember

Persist a durable, curated memory entry worth recalling in future sessions — a decision, preference, convention, or hard-won fact — NOT ephemeral scratch or transient task state. Writes a markdown entry into the current project's curated memory and indexes it immediately. Provide the substance in `b…

search_skill

Search across skill bodies (section-level). Returns top-K matching sections.

list_skills

List the virtual skills installed on this captain. Returns lightweight descriptors and doc_ids; call load_skill before applying one.

recommend_skills

Find installed skills relevant to a task. Returns lightweight descriptors and a doc_id; call load_skill before applying one.

load_skill

Load the complete advisory instructions for a skill returned by recommend_skills. Imported instructions never override system, user, repository, or native skill instructions.

list_capabilities

List sanitized plugin/extension capabilities installed on this captain, including the runtime that can execute each one.

recommend_capabilities

Find installed plugin/extension capabilities for a task. Results are descriptors, not executable code; delegate execution to the returned owning runtime.

get_capability

Get one sanitized capability descriptor and its execution-routing metadata by capability_ref or doc_id.

search_observations

Search across captured session observations.

search_all

Unified search across all configured channels (memory + skill + observation + remote). Returns merged top-K.

get_full

Retrieve full content of a hit by its doc_id (returned in search results).

reindex

Trigger a reindex (admin). Optionally restrict to a channel or force re-embedding.

stats

Return corpus stats: total chunks, by channel, last index time, embedder info.

status

Health check: are voyage and chroma reachable?

work_set

Coordination board: publish or refresh a transient claim that YOU are working on something right now, then immediately get back any OTHER active sessions whose files overlap yours. Call this before diving into a codebase area, and re-call periodically (it is a heartbeat that keeps the lease alive). …

work_active

Coordination board: list the live work claims on this captain and, if you pass your session_id, which of them overlap your own claimed files. Call this to see who else is working where before you start.

work_clear

Coordination board: drop your work claim when the task is done (releases the lease immediately instead of waiting for it to expire).

// known CVEs in dependencies2 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.25.1GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

high@modelcontextprotocol/sdk@1.25.1GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
🔐 secretANTHROPIC_API_KEYanthropic — direct Anthropic SDK with (paid)
configCAPTAIN_MEMO_AUTO_UPDATE_INTERVAL_MS
configCAPTAIN_MEMO_BRANCH_BOOST
configCAPTAIN_MEMO_CAPTURE_TICK_MS
configCAPTAIN_MEMO_CONFIG_DIR
configCAPTAIN_MEMO_DATA_DIR
configCAPTAIN_MEMO_DISABLE_SELF_HEAL
configCAPTAIN_MEMO_EMBEDDER_API_FORMAT
🔐 secretCAPTAIN_MEMO_EMBEDDER_API_KEY
configCAPTAIN_MEMO_EMBEDDER_ENDPOINT
configCAPTAIN_MEMO_EMBEDDER_MAX_TOKENS
configCAPTAIN_MEMO_EMBEDDER_MODEL
configCAPTAIN_MEMO_EMBEDDER_TIMEOUT_MS
configCAPTAIN_MEMO_EMBEDDING_DIM
configCAPTAIN_MEMO_ENGINE_REQUEST_MS
configCAPTAIN_MEMO_ENGINE_STARTUP_MS
configCAPTAIN_MEMO_EVAL_JUDGE_MODEL
configCAPTAIN_MEMO_GATEWAY_PORT
configCAPTAIN_MEMO_HOOK_BUDGET_TOKENS
configCAPTAIN_MEMO_HOOK_EVENT
configCAPTAIN_MEMO_HOOK_TIMEOUT_MS
configCAPTAIN_MEMO_IDENTIFIER_BOOST
configCAPTAIN_MEMO_OBSERVATION_BATCH_SIZE
configCAPTAIN_MEMO_OBSERVATION_HALF_LIFE_DAYS
configCAPTAIN_MEMO_OBSERVATION_TICK_MS
🔐 secretCAPTAIN_MEMO_OPENAI_API_KEY
configCAPTAIN_MEMO_OPENAI_ENDPOINT
configCAPTAIN_MEMO_OPENCODE_GATEWAY_ENDPOINT
configCAPTAIN_MEMO_OPENCODE_LOCAL_ENDPOINT
configCAPTAIN_MEMO_OPENCODE_LOCAL_PROVIDER
configCAPTAIN_MEMO_POST_TOOL_USE_TIMEOUT_MS
configCAPTAIN_MEMO_PRE_COMPACT_TIMEOUT_MS
configCAPTAIN_MEMO_PRE_TOOL_USE_TIMEOUT_MS
configCAPTAIN_MEMO_PROJECT_ID
configCAPTAIN_MEMO_PROMOTE_ENABLE
configCAPTAIN_MEMO_PROMOTE_INTERVAL_MS
configCAPTAIN_MEMO_PROMOTE_MAX_PER_RUN
configCAPTAIN_MEMO_QUEUE_RETENTION_DAYS
configCAPTAIN_MEMO_RARE_TOKEN_BOOST
configCAPTAIN_MEMO_READER_ACQUIRE_MS
configCAPTAIN_MEMO_READER_POOL_SIZE
configCAPTAIN_MEMO_RECALL_AUDIT_MAX_BYTES
configCAPTAIN_MEMO_REINDEX_MS
configCAPTAIN_MEMO_REMEMBER_DEDUP_THRESHOLD
configCAPTAIN_MEMO_REMEMBER_DIR
configCAPTAIN_MEMO_REMEMBER_MS
configCAPTAIN_MEMO_SESSION_START_TIMEOUT_MS
configCAPTAIN_MEMO_SESSION_START_TRANSITION_WAIT_MS
configCAPTAIN_MEMO_SESSION_START_WAIT_HEALTHY_MS
configCAPTAIN_MEMO_SHOW_READ_TOKENSrecall N
configCAPTAIN_MEMO_SHOW_SAVINGS_AMOUNTN tokens saved
configCAPTAIN_MEMO_SHOW_SAVINGS_PERCENTsaved X%
configCAPTAIN_MEMO_SHOW_WORK_TOKENSwork N
configCAPTAIN_MEMO_SKIP_EMBED
configCAPTAIN_MEMO_STATS_CACHE_MS
configCAPTAIN_MEMO_SUMMARIZER_FALLBACKS
configCAPTAIN_MEMO_SUMMARIZER_MODEL
configCAPTAIN_MEMO_SUMMARIZER_PROVIDER
configCAPTAIN_MEMO_SUMMARIZER_TIMEOUT_MS
configCAPTAIN_MEMO_TRANSCRIPTS_DIR
🔐 secretCAPTAIN_MEMO_VOYAGE_API_KEY
configCAPTAIN_MEMO_VOYAGE_ENDPOINT
configCAPTAIN_MEMO_VOYAGE_MODEL
configCAPTAIN_MEMO_VOYAGE_TIMEOUT_MS
configCAPTAIN_MEMO_WATCH_CAPABILITIES
configCAPTAIN_MEMO_WATCH_MEMORY
configCAPTAIN_MEMO_WATCH_SKILLS
configCAPTAIN_MEMO_WORKER_PORT
configCAPTAIN_MEMO_WORKNOTE_SEMANTIC
configCAPTAIN_MEMO_WORKNOTE_SEMANTIC_THRESHOLD
🔐 secretCLAUDE_CODE_OAUTH_TOKEN
configCLAUDE_CONFIG_DIR
configCLAUDE_HOOK_EVENT_NAME
configCOLUMNS
configFORCE_COLOR
configGOOSE_PATH_ROOT
configSUDO_USER
configXDG_CONFIG_HOME
configCAPTAIN_MEMO_EMBED_MODEL
configCAPTAIN_MEMO_EMBED_DIM
configCAPTAIN_MEMO_EMBED_DEVICE
configCAPTAIN_MEMO_EMBED_MAX_SEQ_LEN
configCAPTAIN_MEMO_EMBED_INFERENCE_BATCH_SIZE
configCAPTAIN_MEMO_EMBED_TORCH_THREADS
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

18/18 tools missing one or more hints — search_memory (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); remember (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); search_skill (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +15 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

7/18 tools referenced in tests (39%)

Write tests that reference each tool by name so every tool has at least one test.

Production dependencies are patched

0 critical, 2 high severity in production deps — @modelcontextprotocol/sdk@1.25.1 (high), @modelcontextprotocol/sdk@1.25.1 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/kalinbogatzevski/captain-memo?variant=verified)](https://m8ven.ai/mcp/kalinbogatzevski/captain-memo)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: bc2e7b0b6241fd3d54eef4b6faf61206fc66b555
code hash: 3c8ec93061c0c9bd803415a41d26066bab752a5e0bfe19ad5578585657513e13
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client