/ 100

1 month ago

official

neverinfamous/memory-journal-mcp

A MCP server built for developers enabling Git based project management with project and personal…

→ neverinfamous/memory-journal-mcp · listed on official

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Official Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 2 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: GITHUB_TOKEN, GITLAB_API_TOKEN, MCP_AUTH_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies2 high1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highsimple-git@3.35.2GHSA-hffm-xvc3-vprc

simple-git is vulnerable to Remote Code Execution

highesbuild@0.28.0GHSA-gv7w-rqvm-qjhr

esbuild: Missing binary integrity verification in Deno module enables remote code execution via NPM_CONFIG_REGISTRY

lowesbuild@0.28.0GHSA-g7r4-m6w7-qqqr

esbuild allows arbitrary file read when running the development server on Windows

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configALLOWED_IO_ROOTS— "": "/app/repo"

configAUDIT_LOG_MAX_SIZE

configAUDIT_LOG_PATH— "": "/app/data/mcp-audit.jsonl",

configAUDIT_READS

configAUDIT_REDACT

configAUTO_REBUILD_INDEX— "": "true",

configBRIEFING_COPILOT_REVIEWS— "": "true",

configBRIEFING_ENTRY_COUNT— Journal Content — , BRIEFING_SUMMARY_COUNT, BRIEFING_INCLUDE_TEAM

configBRIEFING_INCLUDE_TEAM— "": "true",

configBRIEFING_ISSUE_COUNT— GitHub Enrichment — , BRIEFING_PR_COUNT, BRIEFING_PR_STATUS, BRIEFING_MILESTONE_COUNT, BRIEFING_WORKFLOW_COUNT, BRIEFING_WORKFLOW_STATUS, BRIEFING_COPILOT_REVIEWS

configBRIEFING_MILESTONE_COUNT— GitHub Enrichment — BRIEFING_ISSUE_COUNT, BRIEFING_PR_COUNT, BRIEFING_PR_STATUS, , BRIEFING_WORKFLOW_COUNT, BRIEFING_WORKFLOW_STATUS, BRIEFING_COPILOT_REVIEWS

configBRIEFING_PR_COUNT— GitHub Enrichment — BRIEFING_ISSUE_COUNT, , BRIEFING_PR_STATUS, BRIEFING_MILESTONE_COUNT, BRIEFING_WORKFLOW_COUNT, BRIEFING_WORKFLOW_STATUS, BRIEFING_COPILOT_REVIEWS

configBRIEFING_PR_STATUS— "": "true",

configBRIEFING_SUMMARY_COUNT— Journal Content — BRIEFING_ENTRY_COUNT, , BRIEFING_INCLUDE_TEAM

configBRIEFING_WORKFLOW_COUNT— GitHub Enrichment — BRIEFING_ISSUE_COUNT, BRIEFING_PR_COUNT, BRIEFING_PR_STATUS, BRIEFING_MILESTONE_COUNT, , BRIEFING_WORKFLOW_STATUS, BRIEFING_COPILOT_REVIEWS

configBRIEFING_WORKFLOW_STATUS— "": "true",

configCODEMODE_INTERNAL_FULL_ACCESS— "": "true",

configCODE_MODE_MAX_RESULT_SIZE

configDB_PATH

configDEFAULT_PROJECT_NUMBER

configFLAG_VOCABULARY

🔐 secretGITHUB_TOKEN— "": "ghp_your_token_here",

🔐 secretGITLAB_API_TOKEN

configGITLAB_URL

configHOST

configINSTRUCTION_LEVEL— Depth — : essential, standard (default), or full

configMAX_STATEFUL_SESSIONS

configMCP_AUTH_SCOPES

🔐 secretMCP_AUTH_TOKEN

configMCP_CORS_ORIGIN

configMCP_ENABLE_HSTS

configMCP_HOST

configMCP_RATE_LIMIT_MAX

configMEMORY_JOURNAL_MCP_TOOL_FILTER— Control which tools are exposed via (or CLI: --tool-filter):

configMEMORY_JOURNAL_WORKFLOW_SUMMARY— "": "/deploy: prod deployment /audit: security scan",

configOAUTH_ALLOW_PLAINTEXT_LOOPBACK

configOAUTH_AUDIENCE

configOAUTH_CLOCK_TOLERANCE

configOAUTH_ENABLED

configOAUTH_ISSUER

configOAUTH_JWKS_URI

configPROJECT_REGISTRY— Dynamic Project Routing Switch contexts across multiple repositories using a single server instance via

configPRUNE_IMPORTANCE_THRESHOLD

configPRUNE_OLDER_THAN_DAYS

configPUBLIC_ORIGIN

configRULES_FILE_PATH— "": "/app/rules.md",

configSKILLS_DIR_PATH— "": "/app/skills",

configTEAM_AUTHOR— "": "your_username"

configTEAM_DB_PATH— team 28 CRUD, search, stats, relationships, IO (Markdown import/export), backup, vector search, cross-project insights, matrix, Hush Protocol flags (requires )

configTRUST_PROXY

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/official-https-github-com-neverinfamous-memory-journal-mcp)](https://m8ven.ai/mcp/official-https-github-com-neverinfamous-memory-journal-mcp)

commit: 6acf6e9a73b1aa3375484775ddd08a94c3ef5069

code hash: 646832306010108d34a9888f06dc32e3ca9e68d5686ac9797a2f7d4e37aef6c4

verified: 6/16/2026, 11:55:03 AM

view raw JSON →