2
/ 100
1 month ago
glama

Engram

A local memory layer for AI coding tools that stores user preferences, lessons, and project context as local files, exposed via MCP so different AI tools can share the same understanding of you.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Hardcoded credentials detected
4 live-looking API keys in source: 2 OpenAI API key, 1 GitHub PAT (classic), 1 Slack token
🔐
You'll be asked for 2 credentials: ENGRAM_SECRET, ENGRAM_AUTH_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configENGRAM_TEST
configENGRAM_SBOM_PRIVATE_MARKERS
configENGRAM_DIR
configENGRAM_BETA_TRACKING
🔐 secretENGRAM_SECRETEncryption Optional field-level AES-256-GCM encryption via env var. Install pip install piia-engram[secure]. Full-disk encryption for all files (v4.0)
configENGRAM_AUDITAudit logging Local access audit log on by default at ~/.engram/audit.log; opt out with =0. Local file only — never sent anywhere. Per-caller audit (blocked by MCP spec)
configENGRAM_APPROVAL
configENGRAM_TOOLSMCP tools 17 Core (loaded by default) + 36 Advanced (opt-in via =all)
configENGRAM_SEARCH
configENGRAM_BACKUP_RETENTION
configENGRAM_GOVERNANCEExports are owner-gated when =1 (see
configENGRAM_CLIENT_TYPEexport =claude_code
configENGRAM_CALLER_DEPTH
configENGRAM_CALLER_ROLE
configENGRAM_WORKFLOW_STAGE
configENGRAM_HOOK_DEBUG
configCLAUDE_INVOKED_BY
configENGRAM_MIN_TURNS_TO_FLUSH
configENGRAM_CURSOR_SAVE_DEBOUNCE
configENGRAM_CURSOR_WRITEBACK_ACTIVE
configENGRAM_CURSOR_WRITEBACK_DEBUG
configENGRAM_MCP_STARTUP_SYNC
configENGRAM_HEARTBEAT_INTERVAL
🔐 secretENGRAM_AUTH_TOKENabc123... python -m piia_engram.mcp_server --transport sse --host 0.0.0.0 --port 8767
configENGRAM_CORS_ORIGINSSet to restrict cross-origin access (e.g. https://your-domain.com).
configENGRAM_RECONCILE
configENGRAM_EMBED_MODEL
configFASTEMBED_CACHE_PATH
configPYTHONIOENCODING[ok] not set (stdout/stderr already UTF-8)
configENGRAM_MAX_RULE_LINES
configENGRAM_TELEMETRY
configENGRAM_TELEMETRY_REMOTE
configENGRAM_TELEMETRY_URL
configENGRAM_FEEDBACK
configENGRAM_FEEDBACK_URL
configENGRAM_NO_UPDATE_CHECK
configCODEX_HOME
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/patdolitse-piia-engram-18jeit)](https://m8ven.ai/mcp/patdolitse-piia-engram-18jeit)
commit: c1c009cb8e21ed5448af1da84b6dea1e92bcb811
code hash: 0d72bbf3b8d651767ed8c01d8fc5cc3ecf65c6b625e731d3e2ee5ae62fd96b12
verified: 6/16/2026, 1:10:15 PM
view raw JSON →