Back to MCP Trust Indexm8ven
58
/ 100
1 month ago
glama

Git Memory MCP Server

Enables Git repository operations and real-time monitoring via MCP tools, with support for WebSocket events, authentication, and observability.

→ nirutyodjai/git-memory-mcp-server· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 1 critical, 16 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 5 credentials: DB_PASSWORD, GIT_MEMORY_API_KEY, GIT_WEBHOOK_SECRET, REDIS_PASSWORD, WEBHOOK_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 critical16 high13 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalsimple-git@3.20.0GHSA-r275-fr43-pm7q

simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE

high@modelcontextprotocol/sdk@0.5.0GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@0.5.0GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

highws@8.14.2GHSA-3h5v-q93c-6h6q

ws affected by a DoS when handling a request with many HTTP headers

highsimple-git@3.20.0GHSA-hffm-xvc3-vprc

simple-git is vulnerable to Remote Code Execution

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configADMIN_WS_URL
configALLOWED_ORIGINS
configCACHE_CHECK_PERIOD
configCACHE_MAX_KEYS
configCACHE_TTL
configCOMPRESSION_LEVEL
configCONNECTION_TIMEOUT
configCURRENT_CONNECTIONS
configDB_HOST
configDB_NAME
🔐 secretDB_PASSWORD
configDB_PORT
configDB_USER
configENABLE_COMPRESSION
configENABLE_CORS
configENABLE_HELMET
configENABLE_KEEP_ALIVE
configENABLE_METRICS
configENABLE_PROFILER
configGIT_CACHE_RESULTS
configGIT_MAX_CONCURRENT
configGIT_MEMORY_ALLOWED_REPOS— เพิ่มตัวแปร ใน .env เพื่อจำกัด path ที่อนุญาตให้เรียกใช้คำสั่ง Git ผ่าน CLI endpoints:
🔐 secretGIT_MEMORY_API_KEY— เพิ่มตัวแปร ใน .env เพื่อเปิดใช้งาน API key authentication สำหรับ /git/ endpoints และ MCP tools:
configGIT_MEMORY_PYTHON
configGIT_MEMORY_PY_ROOT
configGIT_TIMEOUT
🔐 secretGIT_WEBHOOK_SECRET
configHEALTH_PATH
configHOST
configHOT_RELOAD
configJAEGER_ENDPOINT
configJEST_MAX_WORKERS
configKEEP_ALIVE_TIMEOUT
configLOG_CONSOLE
configLOG_FILE
configLOG_LEVEL
configLOG_MAX_FILES
configLOG_MAX_SIZE
configMAX_CONNECTIONS
configMAX_CONNECTIONS_PER_WORKER
configMAX_FREE_SOCKETS
configMAX_PAYLOAD_SIZE
configMAX_SOCKETS
configMETRICS_PATH
configPORT
configPYTHONPATH
configPYTHON_BIN
configRAMP_UP_TIME
configRATE_LIMIT
configRATE_LIMIT_BLOCK_DURATION
configRATE_LIMIT_DURATION
configRATE_LIMIT_POINTS
configREDIS_DB
configREDIS_HOST
🔐 secretREDIS_PASSWORD
configREDIS_PORT
configREDIS_URL
configREQUESTS_PER_SECOND
configREQUEST_TIMEOUT
configSERVER_URL
configSTATS_INTERVAL
configTEST_BASE_URL
configTEST_DURATION
configTEST_REPO_PATH— export =/path/to/test/repo
🔐 secretWEBHOOK_SECRET
configWORKERS
configWS_MAX_PAYLOAD
configWS_PER_MESSAGE_DEFLATE
configWS_PING_INTERVAL
configWS_PONG_TIMEOUT
configWS_URL
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/nirutyodjai-git-memory-mcp-server-ubjr5r)](https://m8ven.ai/mcp/nirutyodjai-git-memory-mcp-server-ubjr5r)
commit: 7c8694565c50474cbc5e1be923b5852cd78e3a9c
code hash: 415886757f3bc58eff3a5c322ec074e1c329245d70a6c37033f4b9ccf864b91d
verified: 6/15/2026, 1:50:50 PM
view raw JSON →