mcp-memory-graph (YonasValentin/mcp-memory-graph) is an MCP server listed on the M8ven Trust Index. M8ven has not graded it yet. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
—
Grade pending
7 days ago

mcp-memory-graph

Local-first memory for Claude Code and any MCP client: hybrid vector + keyword search and a bi-temporal knowledge graph in one SQLite file. Local embeddings, no API key, $0/token.

→ YonasValentin/mcp-memory-graph· listed on glama

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

YonasValentin

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glamanot scored here

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: MCP_AUTH_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configCLAUDE_BINFor the Stop hook only: the claude binary on $PATH (or $), authenticated without prompting. Optional; disable with review_on_stop: false.
configMCP_ALLOWED_ORIGINS
🔐 secretMCP_AUTH_TOKEN
configMCP_BINDBind to 127.0.0.1 (the default) unless you front the server with a proxy that terminates TLS; then set =0.0.0.0.
configMCP_BODY_LIMIT
configMCP_CSP_EXTRA_CONNECT
configMCP_HEALTH_REQUIRE_EMBEDDER
configMCP_MEMORY_CONFIG_PATH3. Creates the config file with sensible defaults: ~/.mcp-memory/config.json (user scope) or <project>/.mcp-memory/config.json (project scope; the generated .mcp.json pins it via ).
configMCP_MEMORY_CWD
configMCP_MEMORY_DB_PATHDatabase file location. The directory is created automatically.
configMCP_MEMORY_DIMENSIONSEmbedding vector dimensions. Must match the model's output.
configMCP_MEMORY_MODELHuggingFace embedding model name. Must be an ONNX model compatible with Transformers.js.
configMCP_MEMORY_NLI_MODEL
configMCP_MEMORY_SESSION_ID
configMCP_PORT
configMCP_RATELIMIT_DISABLED
configMCP_SIGN_MEMORIESVerify the signed provenance envelope of memories (ed25519 over content_hash plus origin): per-memory ok/unsigned/content_mismatch/bad_signature/untrusted plus a summary. Opt-in signing via MCP_SIGN_MEMORIES; multi-machine allowlist via MCP_TRUSTED_PUBKEYS / trusted_pubkeys
configMCP_TIMEOUT
configMCP_TRUSTED_IP_HEADER
configMCP_VAULT_PATHObsidian vault root used by vault_sync, memory_export_vault, and rebuild when no explicit path is passed. MCP_VAULT_PATH and --vault <path> override.
configMCP_WEBHOOKSList webhook targets (gated by MCP_WEBHOOKS)
configMCP_WEBHOOK_DISPATCH_INTERVAL_MS
// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/yonasvalentin/mcp-memory-graph)](https://m8ven.ai/mcp/yonasvalentin/mcp-memory-graph)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: 6dd8aea43a022f380b9764cf5e468171360802f1
code hash: d9632a904779ee9a583ecdd3293003ac08ea3f1707a166b76ddc583ec4f07b09
verified: 9/5/2026, 7:30:06 AM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client