60
/ 100
1 month ago
glama
Engram
Engram is an epistemic engine that provides persistent, confidence-ranked memory with contradiction detection and autonomous learning, enabling AI coding agents to recall and reason across projects via MCP.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
⚠️
Tests do not pass
Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 5 credentials: AGENTBRIDGE_API_KEY, AGENTBRIDGE_TOKEN, ANTHROPIC_API_KEY, MCP_API_KEY, OPENAI_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies2 high
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
AGENTBRIDGE_API_KEY🔐 secret
AGENTBRIDGE_TOKENconfig
AGENTBRIDGE_URL🔐 secret
ANTHROPIC_API_KEYconfig
ENGRAM_CONSOLIDATE_BATTERY_OKconfig
ENGRAM_CONSOLIDATE_INTERVALconfig
ENGRAM_CONSOLIDATE_MAX_LOADconfig
ENGRAM_CONSOLIDATE_MIN_IDLEconfig
ENGRAM_GIT_BRANCHconfig
ENGRAM_PATHconfig
ENGRAM_PROJECTS_JSONconfig
ENGRAM_REPOS_ROOTconfig
ENGRAM_SILENTconfig
ENGRAM_SUMMARIZER_MODELconfig
ENGRAM_SUMMARIZER_PROVIDERconfig
HOSTconfig
MCP_ALLOWED_HOSTS🔐 secret
MCP_API_KEYconfig
MCP_BIND_ADDRconfig
MCP_PORTconfig
OLLAMA_BASE_URLconfig
OLLAMA_HOST🔐 secret
OPENAI_API_KEYconfig
OPENAI_BASE_URLconfig
OPENCODE_CONFIG_PATHconfig
PORT// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/tinydarkforge-engram-1ovmk7)commit: 1345dcbce93168877632513f7bee4cece689f5ef
code hash: d3c5b7bb0062b30ad039c3c74783a77161bbc8f60f068615cd7f1f8b81391a13
verified: 6/15/2026, 2:12:43 PM