Back to MCP Trust Indexm8ven
39
/ 100
1 month ago
glama

Graph-Memory

Self-hosted personal knowledge graph for Claude that persists across sessions, devices, and tools. Built on Neo4j with local semantic embeddings; OAuth 2.1 lets Claude Code, Claude Desktop, and claude.ai web all hit the same graph.

→ stevepridemore/graph-memory· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Tool annotations don’t match behaviour
1 read-only tool performs write/delete/exec — graph_stats (line 79: mkdirSync(join(GRAPH_MEMORY_HOME, "logs"), { recursive: true }))
⚠️
Tool descriptions don’t match what handlers do
1 tool describes read intent but its handler mutates — graph_ingest (line 508: mkdirSync(pendingDir, { recursive: true }))
⚠️
Tests do not pass
Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: NEO4J_PASSWORD, TLS_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configALLOW_DESTRUCTIVE_TESTS
configBACKUP_FILE
configBOOTSTRAP_TENANT_ID
configCF_ACCESS_AUD
configCF_ACCESS_TEAM_DOMAIN
configFORCE_WIPE
configGRAPH_MEMORY_HOME— edit ~/graph-memory/.env (NEO4J_PASSWORD, , CLAUDE_PROJECTS_DIR)
configLOCAL_TENANT_ID
configMCP_PORT
configMCP_TRANSPORT
configNEO4J_DATABASE
configNEO4J_LOCAL_DATABASE
configNEO4J_LOCAL_URI
configNEO4J_LOCAL_USER
🔐 secretNEO4J_PASSWORD— edit ~/graph-memory/.env (, GRAPH_MEMORY_HOME, CLAUDE_PROJECTS_DIR)
configNEO4J_URI
configNEO4J_USER
configOAUTH_ALLOWED_EMAILS
configOAUTH_ISSUER
configOAUTH_MAX_CLIENTS
configOAUTH_REDIRECT_URI_HOSTS
configTENANT_ID_SOURCE
configTLS_CERT
🔐 secretTLS_KEY
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 9 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/stevepridemore-graph-memory-1qni0c)](https://m8ven.ai/mcp/stevepridemore-graph-memory-1qni0c)
commit: b7b44af8ec6fa2ab41e9555575fec6ac8a6520d2
code hash: 1d34776e986e16b4a7e44d8ae73074fe2c93fff996976d031d2ab80d407a9477
verified: 6/10/2026, 11:24:39 AM
view raw JSON →