Search / io.github.DiaaAj/a-mem-mcp
a-mem-mcp
L0· runs locallySelf-evolving memory system for AI agents
v0.2.1 · active · repository · descriptor JSON · versions
Search / io.github.DiaaAj/a-mem-mcp
L0· runs locallySelf-evolving memory system for AI agents
v0.2.1 · active · repository · descriptor JSON · versions
{
"mcpServers": {
"a-mem-mcp": {
"command": "uvx",
"args": [
"a-mem==0.2.1"
],
"env": {
"LLM_BACKEND": "openai",
"LLM_MODEL": "gpt-4o-mini",
"OPENAI_API_KEY": "${OPENAI_API_KEY}",
"EMBEDDING_MODEL": "all-MiniLM-L6-v2",
"CHROMA_DB_PATH": "./chroma_db"
}
}
}
}claude mcp add a-mem-mcp -e "LLM_BACKEND=openai" -e "LLM_MODEL=gpt-4o-mini" -e "OPENAI_API_KEY=${OPENAI_API_KEY}" -e "EMBEDDING_MODEL=all-MiniLM-L6-v2" -e "CHROMA_DB_PATH=./chroma_db" -- uvx a-mem==0.2.1[mcp_servers.a-mem-mcp]
command = "uvx"
args = ["a-mem==0.2.1"]
env = { "LLM_BACKEND" = "openai", "LLM_MODEL" = "gpt-4o-mini", "OPENAI_API_KEY" = "${OPENAI_API_KEY}", "EMBEDDING_MODEL" = "all-MiniLM-L6-v2", "CHROMA_DB_PATH" = "./chroma_db" }
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"a-mem-mcp": {
"type": "local",
"command": [
"uvx",
"a-mem==0.2.1"
],
"enabled": true,
"environment": {
"LLM_BACKEND": "openai",
"LLM_MODEL": "gpt-4o-mini",
"OPENAI_API_KEY": "{env:OPENAI_API_KEY}",
"EMBEDDING_MODEL": "all-MiniLM-L6-v2",
"CHROMA_DB_PATH": "./chroma_db"
}
}
}
}{
"mcpServers": {
"a-mem-mcp": {
"command": "uvx",
"args": [
"a-mem==0.2.1"
],
"env": {
"LLM_BACKEND": "openai",
"LLM_MODEL": "gpt-4o-mini",
"OPENAI_API_KEY": "${OPENAI_API_KEY}",
"EMBEDDING_MODEL": "all-MiniLM-L6-v2",
"CHROMA_DB_PATH": "./chroma_db"
}
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=a-mem-mcp&config=eyJjb21tYW5kIjoidXZ4IiwiYXJncyI6WyJhLW1lbT09MC4yLjEiXSwiZW52Ijp7IkxMTV9CQUNLRU5EIjoib3BlbmFpIiwiTExNX01PREVMIjoiZ3B0LTRvLW1pbmkiLCJPUEVOQUlfQVBJX0tFWSI6IiR7T1BFTkFJX0FQSV9LRVl9IiwiRU1CRURESU5HX01PREVMIjoiYWxsLU1pbmlMTS1MNi12MiIsIkNIUk9NQV9EQl9QQVRIIjoiLi9jaHJvbWFfZGIifX0%3D"
}{
"servers": {
"a-mem-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"a-mem==0.2.1"
],
"env": {
"LLM_BACKEND": "openai",
"LLM_MODEL": "gpt-4o-mini",
"OPENAI_API_KEY": "${OPENAI_API_KEY}",
"EMBEDDING_MODEL": "all-MiniLM-L6-v2",
"CHROMA_DB_PATH": "./chroma_db"
}
}
}
}{
"mcpServers": {
"a-mem-mcp": {
"command": "uvx",
"args": [
"a-mem==0.2.1"
],
"env": {
"LLM_BACKEND": "openai",
"LLM_MODEL": "gpt-4o-mini",
"OPENAI_API_KEY": "${OPENAI_API_KEY}",
"EMBEDDING_MODEL": "all-MiniLM-L6-v2",
"CHROMA_DB_PATH": "./chroma_db"
}
}
}
}extensions:
"a-mem-mcp":
enabled: true
name: "a-mem-mcp"
type: stdio
cmd: "uvx"
args:
- "a-mem==0.2.1"
envs:
"LLM_BACKEND": "openai"
"LLM_MODEL": "gpt-4o-mini"
"OPENAI_API_KEY": "${OPENAI_API_KEY}"
"EMBEDDING_MODEL": "all-MiniLM-L6-v2"
"CHROMA_DB_PATH": "./chroma_db"
timeout: 300
Placeholders to fill from your own secret store: ${OPENAI_API_KEY}. The registry never accepts secret values.
This is a local package: the command runs on your machine.
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulns2 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-2g87-pp6c-29x5 in [email protected] (indirect, fixed in 3.14.4), GHSA-5wr8-gcqf-gqf3 in [email protected] (indirect, fixed in 3.14.4); 8 more of lower severity or without a fixdeps.mcp_sdk_versionmcp 2.2.0, no known advisorydeps.resolvable[email protected] resolved: 148 packagesNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo ~liveness-unmeasured -stale-284d
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
[email protected] PyPI147 dependencies, resolved · MCP SDK mcp 2.2.0 · advisories checked 2026-10-19
| advisory | severity | package | fixed in |
|---|---|---|---|
| GHSA-36p7-vc44-83pfChromaDB has a code injection vulnerability | critical | [email protected]direct | no fix yet |
| GHSA-f4j7-r4q5-qw2cChromaDB Python project has a pre-authentication code injection vulnerability | critical | [email protected]direct | no fix yet |
| GHSA-2g87-pp6c-29x5aiohttp: Multiple instances of excessive or unbounded memory/CPU use | high | [email protected]indirect | fixed in 3.14.4 |
| GHSA-5wr8-gcqf-gqf3aiohttp server lacks an initial request/header timeout | high | [email protected]indirect | fixed in 3.14.4 |
| GHSA-2wm9-hf6c-p5crChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection | high | [email protected]direct | no fix yet |
| GHSA-xph7-9rjv-w5frChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to | high | [email protected]direct | no fix yet |
| GHSA-8mgp-746c-j5xpNLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots | high | [email protected]direct | no fix yet |
| GHSA-hj66-6f7g-4r5vOauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation | moderate | [email protected]indirect | fixed in 4.0.0 |
| GHSA-xpv3-w29h-x7cvOauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208) | moderate | [email protected]indirect | fixed in 4.0.0 |
| GHSA-494j-54xm-rwp3AIOHTTP: Secure attribute not enforced for shared cookie | low | [email protected]indirect | fixed in 3.14.4 |
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
a-mem | pypi | 0.2.1 | – | OPENAI_API_KEY |
No tools observed. Local packages are never executed by the registry.
Schemas: list_tools.
{
"name": "io.github.DiaaAj/a-mem-mcp",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.2.1",
"packages": [
{
"version": "0.2.1",
"transport": {
"type": "stdio"
},
"identifier": "a-mem",
"registryType": "pypi",
"environmentVariables": [
{
"name": "LLM_BACKEND",
"format": "string",
"default": "openai",
"description": "LLM backend to use (openai, ollama, sglang, or openrouter)"
},
{
"name": "LLM_MODEL",
"format": "string",
"default": "gpt-4o-mini",
"description": "LLM model name (e.g., gpt-4o-mini, llama2, etc.)"
},
{
"name": "OPENAI_API_KEY",
"format": "string",
"isSecret": true,
"isRequired": true,
"description": "OpenAI API key (required if LLM_BACKEND=openai)"
},
{
"name": "EMBEDDING_MODEL",
"format": "string",
"default": "all-MiniLM-L6-v2",
"description": "Sentence transformer model for embeddings"
},
{
"name": "CHROMA_DB_PATH",
"format": "string",
"default": "./chroma_db",
"description": "ChromaDB storage directory path"
}
]
}
],
"repository": {
"url": "https://github.com/DiaaAj/a-mem-mcp",
"source": "github"
},
"description": "Self-evolving memory system for AI agents"
}