Engram (tinydarkforge/Engram) is an MCP server listed on the M8ven Trust Index. It scores 60 out of 100, grade C. It declares 41 tools. No publisher has claimed this listing.

Caution

60/100

Engram

Item: Engram
Rating: 60
Author: M8ven

Engram is an epistemic engine that provides persistent, confidence-ranked memory with contradiction detection and autonomous learning, enabling AI coding agents to recall and reason across projects via MCP.

→ tinydarkforge/Engram · listed on glama

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every push why connect →

Who stands behind it

tinydarkforge

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glamanot scored here

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings

⚠️

Known vulnerabilities in dependencies: 2 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

⚠️

Tests do not pass

Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 5 credentials: AGENTBRIDGE_API_KEY, AGENTBRIDGE_TOKEN, ANTHROPIC_API_KEY, MCP_API_KEY, OPENAI_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// tools this server exposes21 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

remember

Save a memory or session to Engram. Call at end of session, after completing a feature, or when recording a decision.

neural_search

Semantic search across all Engram sessions. Finds sessions by meaning, not just keywords. Use this to find relevant past work, learnings, and context.

get_bundle

Get pre-compiled context bundle for a specific project. Includes description, tech stack, recent sessions, and key concepts.

get_session

Get full session details by project and session ID.

search_sessions

Keyword search across sessions by summary and topics.

list_projects

List all projects indexed in Engram with session counts.

recent_sessions

Get the most recent sessions across all projects.

get_topics

Get top topics/tags from Engram with session counts.

query_concept

Look up a concept in the knowledge graph. Returns related concepts and connection strengths.

cross_project_search

Search across ALL projects semantically. Groups results by project with relevance scores. Great for finding related work across the entire codebase.

rebuild_index

Rebuild Engram indexes (bloom, git, embeddings).

find_duplicates

Find duplicate or near-duplicate sessions using embedding similarity. Returns pairs of sessions above the similarity threshold.

ledger_ingest

Write an assertion to the ledger. Creates new or reinforces existing assertions.

ledger_query

Query active assertions by plane.

ledger_select_context

Select and render ranked assertions for context injection.

ledger_stats

Get ledger statistics: counts by status, plane, and tensions.

handoff

Generate a portable context blob for agent-to-agent handoff. Packs project bundle, recent sessions, ledger assertions, and unresolved tensions into a token budget.

receive_handoff

Receive a context blob from another agent and confirm injection.

session_replay

Get the full timeline of events for a session, in chronological order.

session_diff

Compare two sessions and show what topics changed between them.

session_append_event

Append an event to a session timeline. Agents call this during a session to record decisions, experiments, rejections, and results in real-time. Subscribers to the replay resource receive real-time notifications.

// known CVEs in dependencies2 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.24.3GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

high@modelcontextprotocol/sdk@1.24.3GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

🔐 secretAGENTBRIDGE_API_KEY

🔐 secretAGENTBRIDGE_TOKEN

configAGENTBRIDGE_URL

🔐 secretANTHROPIC_API_KEY

configENGRAM_CONSOLIDATE_BATTERY_OK

configENGRAM_CONSOLIDATE_INTERVAL

configENGRAM_CONSOLIDATE_MAX_LOAD

configENGRAM_CONSOLIDATE_MIN_IDLE

configENGRAM_GIT_BRANCH

configENGRAM_PATH

configENGRAM_PROJECTS_JSON

configENGRAM_REPOS_ROOT

configENGRAM_SILENT

configENGRAM_SUMMARIZER_MODEL

configENGRAM_SUMMARIZER_PROVIDER

configHOST

configMCP_ALLOWED_HOSTS

🔐 secretMCP_API_KEY

configMCP_BIND_ADDR

configMCP_PORT

configOLLAMA_BASE_URL

configOLLAMA_HOST

🔐 secretOPENAI_API_KEY

configOPENAI_BASE_URL

configOPENCODE_CONFIG_PATH

Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.

deployPORT

// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

41/41 tools missing one or more hints — remember (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); neural_search (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_bundle (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +38 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

Only 2/41 tools referenced in tests (5%)

Write tests that reference each tool by name so every tool has at least one test.

Tests pass

npm test failed — tests do not pass

Make sure npm test runs cleanly. Common cause: missing build step or missing env vars.

Shell command execution

10 child_process calls — runs shell commands

Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.

No arbitrary install scripts

Has postinstall/preinstall script — runs arbitrary code on npm install

Remove postinstall/preinstall hooks unless they’re essential.

Production dependencies are patched

0 critical, 2 high severity in production deps — @modelcontextprotocol/sdk@1.24.3 (high), @modelcontextprotocol/sdk@1.24.3 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail

The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Verified](https://m8ven.ai/badge/mcp/tinydarkforge/engram?variant=verified)](https://m8ven.ai/mcp/tinydarkforge/engram)

Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.

commit: 1345dcbce93168877632513f7bee4cece689f5ef

code hash: d3c5b7bb0062b30ad039c3c74783a77161bbc8f60f068615cd7f1f8b81391a13

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client