Open Mind

Item: Open Mind
Rating: 74
Author: M8ven

Self-hosted personal knowledge base with semantic search, enabling AI agents to capture, search, and manage thoughts using PostgreSQL with pgvector.

→ theippenguin/open-mind · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

1 flow detected: SLACK_BOT_TOKEN. We can’t prove the destination matches the brand the credential belongs to.

⚠️

Known vulnerabilities in dependencies: 1 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 6 credentials: API_KEY, OPENAI_API_KEY, OPENAI_CLIENT_SECRET, OPENROUTER_API_KEY, SLACK_BOT_TOKEN, SLACK_SIGNING_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies1 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highdrizzle-orm@0.45.1GHSA-gpj5-g38j-94v9

Drizzle ORM has SQL injection via improperly escaped SQL identifiers

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretAPI_KEY— Paste the output into .env as the value

configDATABASE_URL— postgresql://openmind:${POSTGRES_PASSWORD:-changeme}@postgres:5432/openmind

configEMBEDDING_PROVIDER— ${EMBEDDING_PROVIDER:-ollama}

configENABLED_EXTENSIONS— ${ENABLED_EXTENSIONS:-household-knowledge,home-maintenance,family-calendar,meal-planning,professional-crm,job-hunt-pipeline}

configMETADATA_LLM_MODEL— ${METADATA_LLM_MODEL:-llama3.2}

configMETADATA_LLM_PROVIDER— ${METADATA_LLM_PROVIDER:-ollama}

configOLLAMA_BASE_URL— ${OLLAMA_BASE_URL:-http://192.168.1.100:11434}

configOLLAMA_EMBEDDING_MODEL— nomic-embed-text

🔐 secretOPENAI_API_KEY— ${OPENAI_API_KEY:-}

configOPENAI_CLIENT_ID— ${OPENAI_CLIENT_ID:-}

🔐 secretOPENAI_CLIENT_SECRET— ${OPENAI_CLIENT_SECRET:-}

configOPENAI_REDIRECT_URI— ${OPENAI_REDIRECT_URI:-http://localhost:3100/auth/openai/callback}

🔐 secretOPENROUTER_API_KEY— ${OPENROUTER_API_KEY:-}

configPORT

🔐 secretSLACK_BOT_TOKEN

configSLACK_REPLY_ENABLED

🔐 secretSLACK_SIGNING_SECRET

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/theippenguin-open-mind-1vvglg)](https://m8ven.ai/mcp/theippenguin-open-mind-1vvglg)

commit: 345a359bd99c4dde925d9fce9725bc15760239b7

code hash: 21b075d26dbd3287aef39ceeb85403168c5cdf44faf22ac6a3d5c20ff3503b09

verified: 7/21/2026, 9:12:26 AM

view raw JSON →