69
/ 100
4 days ago
glama

SOMA MCP

A private, self-hosted MCP server that wraps a retrieval pipeline over your own data, enabling trusted AI agents to access and manage your personal memory through standard MCP tools.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 3 credentials: MCP_JWT_SIGNING_KEY, MCP_STORAGE_ENCRYPTION_KEY, AUTH0_CLIENT_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configMCP_RATE_LIMITCalls per minute per subject (default 30; 0 disables).
configSOMA_DATAData path (token store, audit log).
configMCP_SINGLE_USERexperimentation (it warns loudly). Set =1 so the fail-closed
configAUTH0_CONFIG_URL, AUTH0_CLIENT_ID, AUTH0_CLIENT_SECRET, AUTH0_AUDIENCE, BASE_URL OAuth 2.1 provider.
🔐 secretMCP_JWT_SIGNING_KEY, MCP_STORAGE_ENCRYPTION_KEY Enable encrypted, persistent token storage (pip install -e .[auth]).
🔐 secretMCP_STORAGE_ENCRYPTION_KEYMCP_JWT_SIGNING_KEY, Enable encrypted, persistent token storage (pip install -e .[auth]).
configAUTH0_CLIENT_IDAUTH0_CONFIG_URL, , AUTH0_CLIENT_SECRET, AUTH0_AUDIENCE, BASE_URL OAuth 2.1 provider.
🔐 secretAUTH0_CLIENT_SECRETAUTH0_CONFIG_URL, AUTH0_CLIENT_ID, , AUTH0_AUDIENCE, BASE_URL OAuth 2.1 provider.
configAUTH0_AUDIENCEAUTH0_CONFIG_URL, AUTH0_CLIENT_ID, AUTH0_CLIENT_SECRET, , BASE_URL OAuth 2.1 provider.
configBASE_URLAUTH0_CONFIG_URL, AUTH0_CLIENT_ID, AUTH0_CLIENT_SECRET, AUTH0_AUDIENCE, OAuth 2.1 provider.
configMCP_TOEGANG_SUBJECTSComma-separated allowlist of subjects permitted to use the instance.
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/odbgrowth-soma-mcp-1nq0zk)](https://m8ven.ai/mcp/odbgrowth-soma-mcp-1nq0zk)
commit: eb2e1161a0ad182e101fc3aefee63f1e8ee27029
code hash: e2582cfe6c1adfc2b72f6b9b13efa8f2223322134e0ce977813eee76e92970f3
verified: 6/22/2026, 12:28:26 PM
view raw JSON →