Local-first persistent memory for AI coding agents.
PMB is a well-intentioned local-first memory system for AI agents with generally sound architecture and appropriate permissions for its purpose. However, there are several code quality and security concerns that prevent a higher score: incomplete error handling in critical paths, potential shell command injection via user-controlled configuration, missing authentication on the optional HTTP server, and insufficient input validation in graph traversal operations. The codebase also shows signs of being actively developed with incomplete features (truncated code in recall.py) and experimental functionality that increases maintenance risk. Supply chain analysis found 3 known vulnerabilities in dependencies (1 critical, 1 high severity). Package verification found 1 issue.
4 files analyzed · 14 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-oleksiijko-pmb-ai": {
"args": [
"-y",
"pmb-ai"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.