memvid-mcp (Tapiocapioca/memvid-mcp) is an MCP server listed on the M8ven Trust Index. It scores 72 out of 100, grade C. It declares 40 tools. No publisher has claimed this listing.

C
Caution
72/100

memvid-mcp

An MCP server that provides a persistent memory layer for AI agents by wrapping the memvid CLI. It enables users to manage memory files, perform hybrid searches, and conduct RAG-based question answering through 40 specialized tools.

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

Tapiocapioca

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// tools this server exposes40 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

memvid_audit

Generate an audit report with sources and citations. Creates a detailed report showing which sources support a query. Useful for fact-checking and citation generation. Args: file: Path to the .mv2 memory file query: Query topic for the audit top_k: Number of sources to include include_snip

memvid_debug_segment

Debug segment information (internal structure). Shows internal index structure for debugging. Segment types: - lex: Lexical/full-text index (Tantivy) - vec: Vector index (embeddings) - time: Temporal index Args: file: Path to the .mv2 memory file segment_type: Type of segment to debug Return

memvid_export

Export memory data to JSON, CSV, or JSONL format. Args: file: Path to the .mv2 memory file output: Output file path format: Export format (json, csv, jsonl) frame_ids: Export only specific frame IDs (optional) Returns: Export status and output file path

memvid_tables

List internal SQLite tables and structures. Shows database schema for advanced debugging. Args: file: Path to the .mv2 memory file Returns: List of tables with column definitions

memvid_schema

Schema operations - infer or show schema summary. Can infer schemas from stored data or show existing schema definitions. Args: file: Path to the .mv2 memory file infer: Infer schemas from stored data summary: Show schema summary Returns: Schema information or inferred schemas

memvid_models

List available embedding models. Shows models configured in embedder.toml. Model types: - text: Text embedding models (e.g., OpenAI text-embedding-3-large) - clip: Multimodal models for images - whisper: Audio transcription models Args: model_type: Filter by model type (optional) Returns: Li

memvid_lock

Encrypt a memory file. Creates an encrypted .mv2e file using AES-256-GCM encryption. The original .mv2 file is not modified. Args: file: Path to the .mv2 file to encrypt output: Output path for the encrypted file (.mv2e) password: Encryption password (required for non-interactive use) Retur

memvid_unlock

Decrypt an encrypted memory file. Decrypts a .mv2e file back to .mv2 format. Args: file: Path to the encrypted .mv2e file output: Output path for the decrypted file (.mv2) password: Decryption password (required for non-interactive use) Returns: { "decrypted_file": string, "succes

memvid_enrich

Run Named Entity Recognition (NER) enrichment to extract entities. Extracts entities like people, organizations, locations, dates from content. Requires NER model configuration. Args: file: Path to the .mv2 memory file all: Process all frames that haven't been enriched frame_id: Process a sp

memvid_memories

Memory card operations - list, stats, or filter by entity. Memory cards are structured summaries of stored content. Args: file: Path to the .mv2 memory file list: List all memory cards stats: Show memory card statistics entity: Filter cards by entity name Returns: Memory cards matching

memvid_state

State management - show current memory state. Shows active session, binding status, and processing queue. Args: file: Path to the .mv2 memory file show: Display current state Returns: Current memory state information

memvid_facts

Fact extraction - list facts or extract from frame. Facts are structured assertions extracted from content. Args: file: Path to the .mv2 memory file frame_id: Extract facts from a specific frame list: List all extracted facts Returns: List of facts with source references

memvid_follow

Follow entity relationships in the knowledge graph. Traverses the entity graph starting from a given entity. Args: file: Path to the .mv2 memory file entity: Starting entity name link: Relationship type to follow (default: "related") hops: Number of relationship hops to traverse (default:

memvid_who

Entity lookup - find information about an entity. Searches for entity mentions and related information. Args: file: Path to the .mv2 memory file query: Entity name or search query Returns: Entity information and mentions

memvid_create

Create a new .mv2 memory file for storing AI agent memories. The .mv2 format is a SQLite-based memory store supporting: - Full-text lexical search (Tantivy) - Vector similarity search (embeddings) - Temporal indexing Args: file: Absolute path where the .mv2 file will be created Returns: JSON

memvid_open

Open and display information about a memory file. Returns metadata including: - Frame count - Index sizes (lexical, vector, temporal) - Creation date - Last modified date Args: file: Path to the .mv2 memory file Returns: JSON with file metadata and statistics

memvid_stats

Show detailed statistics for a memory file. Returns: { "frame_count": number, "vector_count": number, "lex_index_bytes": number, "vec_index_bytes": number, "time_index_bytes": number, "total_size_bytes": number } Args: file: Path to the .mv2 memory file

memvid_verify

Verify integrity of a memory file. Checks: - SQLite database integrity - Index consistency - Frame checksums (with deep=true) Args: file: Path to the .mv2 memory file deep: Perform thorough verification including all frame checksums (slower) Returns: JSON with verification results and any i

memvid_doctor

Diagnose and repair a memory file. Can rebuild corrupted indexes: - Time index: chronological ordering - Lexical index: full-text search (Tantivy) - Vector index: similarity search Args: file: Path to the .mv2 memory file rebuild_time_index: Rebuild temporal index rebuild_lex_index: Rebuild

memvid_find

Search in a memory file using hybrid, lexical, or vector search. Search modes: - hybrid (default): Combines lexical and vector search with RRF ranking - lex: Full-text lexical search only (Tantivy) - vec: Vector similarity search only (requires embeddings) Args: file: Absolute path to .mv2 file

memvid_vec_search

Vector-only similarity search (semantic search). Uses vector embeddings for semantic similarity matching. Requires embeddings to be generated (use memvid_put with embed=true). Args: file: Path to the .mv2 memory file query: Search query text (will be embedded) limit: Maximum results (default

memvid_ask

Ask a question using RAG (Retrieval-Augmented Generation). Retrieves relevant context from memory and synthesizes an answer. Requires LLM configuration in llm.toml. Modes: - hybrid: Combined lexical + semantic retrieval - lex: Lexical retrieval only - sem: Semantic retrieval only Args: file: Pa

memvid_timeline

Show chronological timeline of frames. Returns frames ordered by creation time. Args: file: Path to the .mv2 memory file limit: Maximum entries to show reverse: Show newest first (default: oldest first) since: Filter from Unix timestamp (milliseconds) until: Filter until Unix timestamp (

memvid_when

Temporal search - find when something was mentioned. Searches for content and returns results with temporal context. Args: file: Path to the .mv2 memory file query: Time-related search query limit: Maximum results (default: 10) Returns: Results with timestamps showing when topics were men

memvid_session

Session management - list, start, stop, or replay sessions. Sessions track agent interactions for replay and analysis. Args: file: Path to the .mv2 memory file list: List all recorded sessions start: Start a new session with this name stop: Stop the current active session replay: Replay

memvid_binding

Memory binding operations - show or unbind. Bindings associate memory files with specific contexts or agents. Args: file: Path to the .mv2 memory file show: Show current binding information unbind: Remove the current binding Returns: Binding status or operation confirmation

memvid_status

Show system status. Displays: - Memvid version - NER model status - Embedder configuration - LLM configuration Returns: System status information

memvid_sketch

Sketch operations using SimHash for near-duplicate detection. Sketches enable fast similarity detection between frames. Args: file: Path to the .mv2 memory file build: Build sketches for all frames without them stats: Show sketch statistics Returns: Sketch build status or statistics

memvid_nudge

Nudge operations - trigger background processing. Forces processing of pending operations like: - Index updates - Embedding generation - Entity extraction Args: file: Path to the .mv2 memory file Returns: Processing trigger confirmation

memvid_process_queue

Process pending operations queue. Executes any queued operations such as: - Deferred index updates - Batch embedding generation - Scheduled enrichments Args: file: Path to the .mv2 memory file Returns: { "operations_processed": number, "errors": number }

memvid_verify_single_file

Verify integrity of a single frame. Checks: - Content checksum - Metadata integrity - Index consistency Args: file: Path to the .mv2 memory file frame_id: Frame ID to verify Returns: { "frame_id": number, "valid": boolean, "issues": [] }

memvid_config

Show current configuration. Displays configuration from: - embedder.toml (embedding model settings) - llm.toml (LLM settings for RAG) - Environment variables Returns: { "memvid_path": string, "config_dir": string, "embedder": {...}, "llm": {...} }

memvid_version

Print memvid version information. Returns: Version string (e.g., "memvid 0.1.0")

memvid_put

Add content to a memory file from a file or directory. Supports: text, markdown, code, PDF, images (OCR). Use embed=true for vector embeddings (semantic search). Args: file: Absolute path to .mv2 file input: Absolute path to file/directory to ingest recursive: Include subdirectories when inp

memvid_put_many

Batch add multiple files from a directory with progress tracking. Optimized for large directories with commit batching. Args: file: Path to the .mv2 memory file input: Path to input directory recursive: Include subdirectories parallel: Process files in parallel batch_size: Number of file

memvid_view

View content of a specific frame by ID. Args: file: Path to the .mv2 memory file frame_id: Frame ID (non-negative integer) raw: Show raw content without formatting/highlighting Returns: { "frame_id": number, "content": string, "uri": string, "created_at": string, "metad

memvid_update

Update content of a specific frame. Replaces the entire content of the frame. For partial corrections, use memvid_correct instead. Args: file: Path to the .mv2 memory file frame_id: Frame ID to update content: New content for the frame Returns: JSON with update confirmation

memvid_delete

Delete a specific frame from memory. This operation is destructive and cannot be undone. Args: file: Path to the .mv2 memory file frame_id: Frame ID to delete force: Skip confirmation prompt Returns: JSON with deletion confirmation

memvid_correct

Correct/amend content of a frame. Creates a correction record preserving the original content for audit purposes. Use this instead of update when you want to maintain history. Args: file: Path to the .mv2 memory file frame_id: Frame ID to correct content: Corrected content Returns: JSON w

memvid_api_fetch

Fetch content from a URL and add to memory. Supports web pages, APIs, and document URLs. Args: file: Path to the .mv2 memory file url: URL to fetch content from title: Custom title for the fetched content (optional) Returns: JSON with fetch status and created frame ID

// known CVEs in dependencies2 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.6.1GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.6.1GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configMEMVID_LOG_LEVELwarning Log level: debug, info, warning, error
configMEMVID_PATHmemvid Path to the memvid binary
configMEMVID_VERBOSE0 Set to 1 for verbose CLI output
// quality suggestions

Tool annotations

1/40 tools have annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

40/40 tools missing one or more hints — memvid_audit (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); memvid_debug_segment (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); memvid_export (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +37 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool handlers catch errors

Only 0/40 tool handlers wrap calls in try/catch (0%)

Wrap each tool handler body in try/catch and return a structured error response.

Tests exist

No test files found

Add tests that exercise each declared tool.

Production dependencies are patched

0 critical, 2 high severity in production deps — @modelcontextprotocol/sdk@1.6.1 (high), @modelcontextprotocol/sdk@1.6.1 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/tapiocapioca/memvid-mcp?variant=verified)](https://m8ven.ai/mcp/tapiocapioca/memvid-mcp)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: b93fe3e2ef26c2dd06c49b747748fad13e955dc5
code hash: fe56bc8b4e6ecdcfada3b98acaa4c42ef54afb7fdaf7725c7c7d247695afef64
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client