74
/ 100
1 month ago
glama
Trapic Core
Self-hosted MCP server for long-term memory in AI coding assistants, capturing decisions, conventions, and discoveries as structured traces with tag and keyword search.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 3 credentials: TRAPIC_ADMIN_PASSWORD, TRAPIC_MARIADB_PASSWORD, TRAPIC_PG_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 low
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Zod denial of service vulnerability
Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
TRAPIC_ADMIN_PASSWORD— my-secret docker compose upconfig
TRAPIC_CORS_ORIGINconfig
TRAPIC_DB— ./data/trapic.db SQLite database pathconfig
TRAPIC_DB_ADAPTER— Three backends, switchable via :config
TRAPIC_HOST— 127.0.0.1 Bind address (0.0.0.0 to expose)config
TRAPIC_MARIADB_DATABASE— trapic Databaseconfig
TRAPIC_MARIADB_HOST— localhost Host🔐 secret
TRAPIC_MARIADB_PASSWORDconfig
TRAPIC_MARIADB_PORT— 3306 Portconfig
TRAPIC_MARIADB_USER— trapic Userconfig
TRAPIC_PG_DATABASE— trapic Databaseconfig
TRAPIC_PG_HOST— localhost Host🔐 secret
TRAPIC_PG_PASSWORDconfig
TRAPIC_PG_PORT— 5432 Portconfig
TRAPIC_PG_USER— trapic Userconfig
TRAPIC_PORT— 3000 Server portconfig
TRAPIC_TRUST_PROXYconfig
TRAPIC_USER— local-user Default user ID (open mode)// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/trapicai-trapic-core-1msh3c)commit: f47a19b4a60bb8daee4c619b28c8f07461430aac
code hash: a711bdc3e840f1438b99d6cf218bb15b47a40351dc9cc1f23f0322028eb64fa4
verified: 6/22/2026, 1:25:55 PM