Memheaven MCP Server

MemHeaven is a well-architected MCP memory server with solid security fundamentals: OAuth 2.1+PKCE authentication, stateless JWT-based authorization, tenant isolation, and audit logging. However, there are several concerns that prevent a higher score: sensitive configuration values are documented as requiring manual secret management without built-in protections, cryptographic operations depend on external libraries without visible verification of their security properties, and the codebase analysis is limited by incomplete source visibility (only README, package.json, and test helpers were provided). The permissions align well with the stated purpose (memory storage, semantic search, multi-client hosting), but the reliance on Cloudflare's security posture and lack of end-to-end encryption for stored data warrant caution. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity).

3 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.