Back to MCP Trust Indexm8ven
43
/ 100
1 month ago
glama

Mnela MCP Server

Enables MCP clients to read and write into a self-hosted personal knowledge base built from imported chats, documents, and notes, with a knowledge graph and AI-powered enrichment.

→ SmartDogg/mnela· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 4 credentials: ADMIN_INITIAL_PASSWORD, COOKIE_SECRET, MNELA_INTERNAL_TOKEN, MNELA_PROVIDER_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 medium1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

mediumturbo@2.3.3GHSA-hcf7-66rw-9f5r

Trubo: Login callback CSRF/session fixation

lowturbo@2.3.3GHSA-3qcw-2rhx-2726

Turbo: Unexpected local code execution during Yarn Berry detection

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretADMIN_INITIAL_PASSWORD
configADMIN_INITIAL_USERNAME
configCOMPOSE_FILE
configCOMPOSE_PROJECT_NAME
🔐 secretCOOKIE_SECRET— cp .env.example .env # edit POSTGRES_PASSWORD, REDIS_PASSWORD,
configDATABASE_URL— Boot-critical secrets .env (gitignored) No , REDIS_URL, COOKIE_SECRET, MNELA_PROVIDER_SECRET, MNELA_INTERNAL_TOKEN
configHTTP_PORT
configMCP_HTTP_PORT
configMNELA_CLAUDE_BIN
configMNELA_DATA_DIR
🔐 secretMNELA_INTERNAL_TOKEN— Boot-critical secrets .env (gitignored) No DATABASE_URL, REDIS_URL, COOKIE_SECRET, MNELA_PROVIDER_SECRET,
configMNELA_LOG_LEVEL
🔐 secretMNELA_PROVIDER_SECRET— Boot-critical secrets .env (gitignored) No DATABASE_URL, REDIS_URL, COOKIE_SECRET, , MNELA_INTERNAL_TOKEN
configMNELA_REAL_EXPORT_ZIP
configPOSTGRES_DB
configPOSTGRES_USER
configREDIS_URL— Boot-critical secrets .env (gitignored) No DATABASE_URL, , COOKIE_SECRET, MNELA_PROVIDER_SECRET, MNELA_INTERNAL_TOKEN
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/smartdogg-mnela-2ctzb4)](https://m8ven.ai/mcp/smartdogg-mnela-2ctzb4)
commit: 7e4cf5413a418429a50fb9dd78ff9184969b1a43
code hash: 620b204060d646051b0819f3748cd47c409ef73151af3fe2ee8d925b39128ad5
verified: 6/15/2026, 12:44:03 PM
view raw JSON →