MemOS MCP Server
by MemTensorSelf-evolving memory OS for LLM & AI Agents: ultra-persistent memory, hybrid-retrieval, and cross-task skill reuse, with 35.24% token savings and DeepSeek Harness support.
MemOS is an open-source mcp server by MemTensor, written mainly in TypeScript, with 12,215 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 29, 2026.
Scan summary: scanned Nov 5, 2026 at commit d326a64. Seen able to run shell commands, run dynamic code, read environment and secrets. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
d326a64 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings. BuildsIt installed from a fresh machine.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit527 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Passed. This check ran and found nothing it flags.BuildpassPassed. This check ran and found nothing it flags.
Flagged. This check found an issue. See the findings below.Boot & handshakefailFlagged. This check found an issue. See the findings below.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (111)
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/memos-local-openclaw/scripts/run-accuracy-test.ts:129 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/memos-local-openclaw/src/storage/ensure-binding.ts:36 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/openwork-memos-integration/apps/desktop/scripts/after-pack.cjs:247 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/openwork-memos-integration/apps/desktop/scripts/package.cjs:43 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/openwork-memos-integration/apps/desktop/skills/dev-browser/scripts/start-server.ts:54 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/openwork-memos-integration/apps/desktop/skills/dev-browser/scripts/start-server.ts:57 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/openwork-memos-integration/apps/desktop/skills/dev-browser/scripts/start-server.ts:102 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/openwork-memos-integration/apps/desktop/skills/dev-browser/scripts/start-server.ts:115 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/openwork-memos-integration/apps/desktop/src/main/opencode/cli-path.ts:107 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/openwork-memos-integration/apps/desktop/src/main/opencode/cli-path.ts:202 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/openwork-memos-integration/apps/desktop/src/main/utils/system-path.ts:125 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
evaluation/scripts/utils/mirix_utils.py:10 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
packages/memos-core/src/storage/ensure-binding.ts:36 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/memos/memories/activation/kv.py:158 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/memos/memories/activation/vllmkv.py:164 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.adm-zip@0.5.18: 16 known vulnerabilitiesGHSA-7q85-xj36-vmfc, GHSA-8238-w5pm-2374, GHSA-c6fg-446q-cg94, GHSA-j5f4-cc29-5x44, GHSA-p634-w6r4-rjp2 +11 more
apps/memos-local-plugin/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.2: 4 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx, GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
apps/memos-local-plugin/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 6 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +1 more
apps/memos-local-plugin/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.10: 6 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp +1 more
apps/memos-local-plugin/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.34.5: 6 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w, GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c +1 more
apps/memos-local-plugin/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 2 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
apps/memos-local-plugin/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@10.0.0: 2 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
apps/memos-local-plugin/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@5.4.21: 16 known vulnerabilitiesGHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +11 more
apps/memos-local-plugin/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.4.3: 2 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
apps/memos-local-plugin/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dnspython@2.7.0: 1 known vulnerabilityGHSA-45c3-73f7-pv4m
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2025.7.0: 1 known vulnerabilityPYSEC-2026-4217
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph@0.5.3: 1 known vulnerabilityPYSEC-2026-83
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-checkpoint@2.1.1: 3 known vulnerabilitiesPYSEC-2026-1527, PYSEC-2026-2573, PYSEC-2026-2574
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-sdk@0.1.73: 2 known vulnerabilitiesPYSEC-2026-2575, PYSEC-2026-4240
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.4.7: 3 known vulnerabilitiesPYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lxml@6.0.0: 1 known vulnerabilityPYSEC-2026-87
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.12.0: 7 known vulnerabilitiesPYSEC-2026-1617, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mem0ai@0.1.114: 5 known vulnerabilitiesPYSEC-2026-2633, PYSEC-2026-2634, PYSEC-2026-2635, PYSEC-2026-2636, GHSA-5324-3w58-qpp2
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.orjson@3.11.0: 1 known vulnerabilityPYSEC-2026-107
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pdfminer-six@20250506: 2 known vulnerabilitiesPYSEC-2026-1761, PYSEC-2026-1762
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobuf@6.31.1: 1 known vulnerabilityPYSEC-2026-1805
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.20: 7 known vulnerabilitiesPYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039 +2 more
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.soupsieve@2.7: 4 known vulnerabilitiesPYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.46.2: 14 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +9 more
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.torch@2.7.1: 9 known vulnerabilitiesPYSEC-2025-203, PYSEC-2025-204, PYSEC-2025-206, PYSEC-2026-139, PYSEC-2026-1970 +4 more
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ujson@5.10.0: 4 known vulnerabilitiesPYSEC-2026-2291, PYSEC-2026-2292, PYSEC-2026-2293, PYSEC-2026-2294
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.5.0: 6 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1998, PYSEC-2026-4175 +1 more
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.virtualenv@20.31.2: 20 known vulnerabilitiesPYSEC-2026-2009, PYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014 +15 more
poetry.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@46.0.7: 4 known vulnerabilitiesPYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554, GHSA-537c-gmf6-5ccf
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dnspython@2.8.0: 1 known vulnerabilityGHSA-45c3-73f7-pv4m
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.29.0: 9 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2026.3.0: 1 known vulnerabilityPYSEC-2026-4217
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.joserfc@1.6.4: 4 known vulnerabilitiesPYSEC-2026-2528, PYSEC-2026-2530, GHSA-9pg5-8c7x-5hfx, GHSA-jpxq-7h8p-2q76
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langchain-core@1.3.0: 1 known vulnerabilityPYSEC-2026-2564
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.7.33: 2 known vulnerabilitiesPYSEC-2026-2582, GHSA-f4xh-w4cj-qxq8
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.27.0: 7 known vulnerabilitiesPYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.26: 5 known vulnerabilitiesPYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3039, PYSEC-2026-3040, PYSEC-2026-3041
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.soupsieve@2.8.3: 4 known vulnerabilitiesPYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ujson@5.12.0: 2 known vulnerabilitiesPYSEC-2026-2293, PYSEC-2026-2294
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.6.3: 5 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.MCP server didn't complete the protocol handshakeserver exited early with code 0
- lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
apps/openwork-memos-integration/apps/desktop/skills/dev-browser/src/snapshot/__tests__/snapshot.test.ts:39 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
examples/mem_reader/samples.py:549 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
apps/memos-local-openclaw/tests/skill-v1-enhancements.test.ts:182 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
apps/openwork-memos-integration/apps/desktop/e2e/specs/settings-providers.spec.ts:103 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
apps/openwork-memos-integration/apps/desktop/__tests__/unit/main/ipc/handlers.unit.test.ts:404 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key2 matches in this file
apps/openwork-memos-integration/apps/desktop/e2e/specs/settings.spec.ts:361 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key2 matches in this file
apps/openwork-memos-integration/apps/desktop/__tests__/integration/main/secureStorage.integration.test.ts:64 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key2 matches in this file
tests/mem_scheduler/test_config.py:100 - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.29.0: 2 known vulnerabilitiesGHSA-4x5r-pxfx-6jf8, GHSA-4x5r-pxfx-6jf8
apps/memos-local-plugin/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@vitest/mocker@2.1.9: 4 known vulnerabilitiesGHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8, GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
apps/memos-local-plugin/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.10.19: 2 known vulnerabilitiesGHSA-w5vr-8v7q-w6rv, GHSA-w5vr-8v7q-w6rv
apps/memos-local-plugin/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.21.5: 2 known vulnerabilitiesGHSA-67mh-4wv8-2f99, GHSA-67mh-4wv8-2f99
apps/memos-local-plugin/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.27.7: 2 known vulnerabilitiesGHSA-g7r4-m6w7-qqqr, GHSA-g7r4-m6w7-qqqr
apps/memos-local-plugin/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.filelock@3.18.0: 4 known vulnerabilitiesPYSEC-2026-1374, PYSEC-2026-1375, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.fonttools@4.59.0: 1 known vulnerabilityPYSEC-2026-1389
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.h2@4.2.0: 2 known vulnerabilitiesPYSEC-2026-1435, PYSEC-2026-3628
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.hpack@4.1.0: 2 known vulnerabilitiesPYSEC-2026-4053, PYSEC-2026-4053
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.idna@3.10: 1 known vulnerabilityPYSEC-2026-215
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.langchain-text-splitters@1.0.0: 1 known vulnerabilityPYSEC-2026-77
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.pygments@2.19.2: 1 known vulnerabilityPYSEC-2026-2987
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.pytest@8.4.1: 1 known vulnerabilityPYSEC-2026-1845
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.1.1: 1 known vulnerabilityPYSEC-2026-2270
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.requests@2.32.4: 1 known vulnerabilityPYSEC-2026-2275
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.setuptools@80.9.0: 2 known vulnerabilitiesPYSEC-2026-3447, GHSA-xmj3-9gf7-h52w
poetry.lock - lowLow. Minor, or common in normal tools. Shown for information.diskcache@5.6.3: 1 known vulnerabilityPYSEC-2026-2447
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.h2@4.3.0: 1 known vulnerabilityPYSEC-2026-3628
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.idna@3.12: 1 known vulnerabilityPYSEC-2026-215
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.41.0: 1 known vulnerabilityGHSA-xcq7-p3pf-p88h
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pydantic-settings@2.14.0: 1 known vulnerabilityGHSA-4xgf-cpjx-pc3j
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.setuptools@81.0.0: 2 known vulnerabilitiesPYSEC-2026-3447, GHSA-xmj3-9gf7-h52w
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.torch@2.11.0: 1 known vulnerabilityGHSA-rrmf-rvhw-rf47
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Network activity
During install
files.pythonhosted.orgpypi.org
While running
Not run — the code wasn't started in this scan
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
MemOS alternatives
View more →Similar mcp servers in Database Management, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| MemOS (this page) MemTensor | 12k | Apache-2.0 | Oct 29, 2026 | Scanned, no flagged issues |
| Codebase Memory MCP DeusData | 48k | MIT | Nov 1, 2026 | Scanned, see report |
| Xerj xerj-org | 19k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| MCP Toolbox googleapis | 17k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Nightingale ccfos | 13k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Dbhub bytebase | 3.8k | MIT | Oct 26, 2026 | Scanned, no flagged issues |