Is Engram MCP server safe?

Probably. Read the findings first.

C68/100grade C

Use with care. Some checks failed or could not be verified.

Public scan report

scanner v0.1.8 · 2026-09-19 · same rubric, same numbers if you re-run it

2 medium

Code scan270 source files scanned15/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 1 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

mediumnpm install lifecycle script presentinstall.script

package.json: …npm run build && npm run test:run", "postinstall": "node scripts/preflight.cjs", "vers…

Overall 68/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Codebase Memory
Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.
not reviewed
Widely used
C
Prism Coder
Session memory for coding agents: local-first recall, drift detection, on-device inference.
not reviewed
Established
C
Deja Vu
deja-vu: local memory over the session histories of thirty-three coding agents.
not reviewed
Established
A