Back to Browse

Engram MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Git-backed markdown memory for AI agents; search hides superseded and archived notes.

About

Git-backed markdown memory for AI agents; search hides superseded and archived notes.

Security Report

4.2
Use Caution4.2High Risk

Engram is a well-designed MCP server with proper bearer-token authentication, appropriate permission scoping for its purpose (markdown vault management), and generally sound code practices. However, there are notable security concerns: the codebase lacks comprehensive input validation in path handling, uses broad exception catching in critical sections, and has potential race conditions in concurrent write scenarios. The authentication model is present and reasonable, but permission enforcement relies on trust rather than cryptographic verification at some points. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity).

4 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-rwnalds-engram": {
      "args": [
        "-y",
        "engram"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!