Back to MCP Trust Indexm8ven
58
/ 100
1 month ago
glama

Personal Memory Gateway

A privacy-first memory layer for AI that securely bridges local knowledge with AI assistants through MCP tools, with intelligent redaction and local vector database.

→ shubham-01-star/mcp-personal-memory-gateway· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 7 credentials: ARCHESTRA_API_KEY, ARCHESTRA_EMBEDDING_API_KEY, ARCHESTRA_EMBEDDING_GEMINI_API_KEY, ARCHESTRA_GEMINI_API_KEY, DASHBOARD_UPLOAD_TOKEN, GEMINI_API_KEY, OPENAI_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies3 high3 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highundici@7.21.0GHSA-f269-vfmq-vjvj

Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client

highundici@7.21.0GHSA-v9p9-hfj2-hcw8

Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation

highundici@7.21.0GHSA-vrm6-8vpv-qv8q

Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression

lowundici@7.21.0GHSA-2mjp-6q6p-2qxm

Undici has an HTTP Request/Response Smuggling issue

lowundici@7.21.0GHSA-4992-7rv2-5pvq

Undici has CRLF Injection in undici via `upgrade` option

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configARCHESTRA_AGENT_ID
🔐 secretARCHESTRA_API_KEY
configARCHESTRA_BASE_URL
🔐 secretARCHESTRA_EMBEDDING_API_KEY
configARCHESTRA_EMBEDDING_BASE_URL
🔐 secretARCHESTRA_EMBEDDING_GEMINI_API_KEY
configARCHESTRA_EMBEDDING_GEMINI_BASE_URL
configARCHESTRA_EMBEDDING_MODEL
configARCHESTRA_ENABLE— Enable Archestra integration (0 or 1) 0
configARCHESTRA_EXTRACTIVE_MODE
🔐 secretARCHESTRA_GEMINI_API_KEY
configARCHESTRA_GEMINI_BASE_URL
configARCHESTRA_GROUNDING_MODE
configARCHESTRA_MODEL
configARCHESTRA_PROFILE_ID
configARCHESTRA_PROVIDER
configCHUNK_SIZE
configCONSENT_HOOK_ENABLE
configCONSENT_TTL_MS
configDASHBOARD_ALLOW_ORIGINAL
configDASHBOARD_ENABLE
configDASHBOARD_EVENT_BUFFER
configDASHBOARD_PORT— Port for the telemetry dashboard 8787
configDASHBOARD_STATS_PATH
configDASHBOARD_UPLOAD_MAX_BYTES
🔐 secretDASHBOARD_UPLOAD_TOKEN
configEMBEDDING_DIM
configEMBEDDING_MODEL
configEMBEDDING_PROVIDER— Embedding model source (local, gemini, etc.) local
🔐 secretGEMINI_API_KEY
configINGEST_DEBUG
configINGEST_DIR— "": "/path/to/your/data",
configINGEST_DISABLE
configINGEST_MANIFEST_PATH
configLANCE_DB_PATH— "": "/path/to/lancedb/storage"
configLANCE_TABLE_NAME
configLOG_LEVEL
configMCP_DEBUG
configMCP_HTTP_ENABLE
configMCP_HTTP_HOST
configMCP_HTTP_PORT
configMCP_STDIO_ENABLE
configMEMORY_QUERY_SCOPE
configMEMORY_RESULT_MAX_CHARS
configMEMORY_RETRIEVAL_TOP_K
configMEMORY_STRICT_QUERY_MATCH
configMEMORY_VECTOR_DIM
configOCR_LANGUAGE
🔐 secretOPENAI_API_KEY
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/shubham-01-star-mcp-personal-memory-gateway-1ii3tw)](https://m8ven.ai/mcp/shubham-01-star-mcp-personal-memory-gateway-1ii3tw)
commit: c20a838d0cb03fcab87a702ba52460fdd3146746
code hash: caa51ca62326bb7a59445aabb231202cfebee6bb3bacd3284cbeb0742eb3921c
verified: 6/15/2026, 2:17:09 PM
view raw JSON →