Back to Browse
Free
Server data from the Official MCP Registry
Git-versioned markdown memory for AI agents: save, search, compact, lint, and audit.
About
Git-versioned markdown memory for AI agents: save, search, compact, lint, and audit.
Security Report
6.2
Moderate6.2Moderate RiskPalinode is a well-architected memory system with thoughtful security practices: authentication is properly implemented via bearer tokens, dependencies are pinned to CVE-free versions, and path traversal defenses are present. However, there are notable gaps in input validation on several endpoints, insufficient validation of LLM-controlled operations, and some error handling that could leak information. The codebase shows security maturity in places (symlink defenses, rate limiting) but inconsistent rigor across all entry points. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.
4 files analyzed · 11 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Path to the markdown-memory directory (e.g. ~/.palinode). Created if missing.
Environment variable: PALINODE_DIR
Host where the back-end palinode-api process is reachable
Environment variable: PALINODE_API_HOST
Port for palinode-api
Environment variable: PALINODE_API_PORT
Optional bearer token enforced on every palinode-api request other than /health. Required when PALINODE_API_BIND_INTENT=public. Generate with: python -c 'import secrets; print(secrets.token_urlsafe(32))'.Required
Environment variable: PALINODE_API_TOKEN
Path to a file containing the bearer token (alternative to PALINODE_API_TOKEN; for docker-secrets style deployments)Required
Environment variable: PALINODE_API_TOKEN_FILE
Bind host for the MCP HTTP server. Defaults to loopback; set to 0.0.0.0 only with intentional network exposure (paired with PALINODE_API_BIND_INTENT=public on the back-end).
Environment variable: PALINODE_MCP_HTTP_HOST
Port for the MCP HTTP server
Environment variable: PALINODE_MCP_HTTP_PORT
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-phasespace-labs-palinode": {
"env": {
"PALINODE_DIR": "your-palinode-dir-here",
"PALINODE_API_HOST": "your-palinode-api-host-here",
"PALINODE_API_PORT": "your-palinode-api-port-here",
"PALINODE_API_TOKEN": "your-palinode-api-token-here",
"PALINODE_MCP_HTTP_HOST": "your-palinode-mcp-http-host-here",
"PALINODE_MCP_HTTP_PORT": "your-palinode-mcp-http-port-here",
"PALINODE_API_TOKEN_FILE": "your-palinode-api-token-file-here"
},
"args": [
"-y",
"openclaw-palinode"
],
"command": "npx"
}
}
}Reviews
No reviews yet
Be the first to review this server!
More Cloud & DevOps MCP Servers
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
137
Stars
510
Installs
8.0
Security
4.8
Local
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
-
Stars
68
Installs
10.0
Security
4.6
Local
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
120.0K
Stars
25
Installs
6.0
Security
5.0
Local