Back to Browse

Emem MCP Server

Developer ToolsModerate7.6MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Shared, verifiable memory for machines and AI. Encode where data lives; decode with any AI.

About

Shared, verifiable memory for machines and AI. Encode where data lives; decode with any AI.

Remote endpoints: streamable-http: https://emem.dev/mcp

Security Report

7.6
Moderate7.6Low Risk

The emem MCP server is a Rust spatial-memory protocol with a public read path that needs no API key, plus signed writes under attester keys. The visible code shows no exfiltration, shell execution, or hardcoded secrets, and its network, storage, and env-var access fits a memory and data-retrieval service. The excerpt is truncated, so the authorization checks on write endpoints (attest, challenge, memory writes) could not be verified and are the main open item.

12 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

database

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

crypto_signing

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

PaaS port convention: the container entrypoint binds 0.0.0.0:$PORT when EMEM_BIND is not set explicitly. Falls back to 5051.Optional

Environment variable: PORT

Bind address for the HTTP server. When unset, the entrypoint derives it from PORT, falling back to 0.0.0.0:5051.Optional

Environment variable: EMEM_BIND

Path to the persistent data directory (sled cache + ed25519 identity). Mount a volume here; on managed platforms that mount /data, set EMEM_DATA=/data.Optional

Environment variable: EMEM_DATA

Optional canonical origin for self-referencing URLs in MCP responses (e.g. https://emem.dev). When unset the server falls back to urn:emem.Optional

Environment variable: EMEM_PUBLIC_URL

Comma-separated hostnames for built-in Let's Encrypt ACME (TLS-ALPN-01). When set, the server binds 0.0.0.0:443 instead of EMEM_BIND.Optional

Environment variable: EMEM_TLS_DOMAINS

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!