/ 100

11 days ago

glama

junto-memory

A shared memory and coordination server for multiple AI coding agents, built on the Model Context Protocol (MCP).

→ tlemmons/junto-memory · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 6 credentials: MONGO_PASSWORD, ANTHROPIC_API_KEY, JUNTO_TUNNEL_REQUIRES_KEY, JUNTO_REQUIRE_KEY, JUNTO_SYNC_PRIMARY_KEY, JUNTO_SYNC_LOCAL_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configMONGO_HOST— localhost MongoDB host (set automatically in Docker Compose).

configMONGO_PORT— 27019 MongoDB external port. (.env.example currently shows 27018; that's stale — docker-compose.yml uses 27019.)

configMONGO_DB— mcp_orchestrator MongoDB database name.

configMONGO_USER— mcp_orch MongoDB username.

🔐 secretMONGO_PASSWORD— changeme MongoDB root password. Change this.

🔐 secretANTHROPIC_API_KEY— Required only for the standalone librarian enrichment service.

configMONGO_URL

configTERM

configMCP_SERVER_URL

configLIBRARIAN_HOST

configLIBRARIAN_PORT

configLIBRARIAN_PROJECT_ROOTS— JSON map of project names to filesystem paths for librarian code analysis.

configMCP_AUTH_ENABLED— Set =true in .env to require API keys for all sessions. Keys are managed via the memory_admin tool with role-based access control:

🔐 secretJUNTO_TUNNEL_REQUIRES_KEY

🔐 secretJUNTO_REQUIRE_KEY

configCHROMA_HOST— localhost ChromaDB host (set automatically in Docker Compose).

configCHROMA_PORT— 8001 ChromaDB external port.

configORIGIN_SERVER_ID

configJUNTO_SSE_KEEPALIVE_SECONDS

configJUNTO_SSE_KEEPALIVE_TIMEOUT

configJUNTO_SYNC_PRIMARY_URL

configJUNTO_SYNC_LOCAL_URL

🔐 secretJUNTO_SYNC_PRIMARY_KEY

🔐 secretJUNTO_SYNC_LOCAL_KEY

configJUNTO_SYNC_CURSOR_PATH

configJUNTO_SYNC_AGENT_NAME

configJUNTO_SYNC_PROJECT

configLOG_LEVEL

configJUNTO_TIMING_LOG

configLIBRARIAN_WEBHOOK_URL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/tlemmons-junto-memory-1rr6et)](https://m8ven.ai/mcp/tlemmons-junto-memory-1rr6et)

commit: 0e2a7cef0aab8edca6a277e4fb6b88c1a57f5b44

code hash: 958be0455d0f3ba3aec969f14c99ca42f555ee02147f7b87c6681bbd95301c50

verified: 6/17/2026, 11:35:36 AM

view raw JSON →