Telemem MCP Server
by TeleAI-UAGITeleMem is a high-performance drop-in replacement for Mem0, featuring semantic deduplication, long-term dialogue memory, and multimodal video reasoning.
Telemem is an open-source mcp server by TeleAI-UAGI, written mainly in Python, with 494 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 26, 2026.
Scan summary: scanned Nov 5, 2026 at commit 8b6dcda. Seen able to run dynamic code, read environment and secrets, connect to the internet. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
8b6dcda · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings. BuildsIt installed from a fresh machine.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit401 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Passed. This check ran and found nothing it flags.Manifestserver.jsonpassPassed. This check ran and found nothing it flags.
Passed. This check ran and found nothing it flags.BuildpassPassed. This check ran and found nothing it flags.
Flagged. This check found an issue. See the findings below.Boot & handshakefailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Network egresswarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (71)
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
baselines/A-mem/memory_layer.py:437 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Contacts a hard-coded IP address instead of a domain name.
baselines/memobase/locomo-benchmark/src/memobase_client/memobase_search.py:48 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.setuptools@9.1.0: 4 known vulnerabilitiesPYSEC-2022-43012, PYSEC-2025-49, PYSEC-2026-1918, PYSEC-2026-3447
baselines/A-mem/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpcore2@2.9.1: 3 known vulnerabilitiesPYSEC-2026-3844, PYSEC-2026-3844, PYSEC-2026-3844
baselines/mem0/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpx2@2.9.1: 15 known vulnerabilitiesPYSEC-2026-3845, PYSEC-2026-3846, PYSEC-2026-3847, PYSEC-2026-3848, PYSEC-2026-3849 +10 more
baselines/mem0/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.requests@2.9.2: 5 known vulnerabilitiesPYSEC-2018-28, PYSEC-2023-74, PYSEC-2026-1872, PYSEC-2026-1873, PYSEC-2026-2275
baselines/mem0/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.11: 8 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.1: 8 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.25.0: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.3: 2 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@10.4.5: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.1: 5 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.0: 5 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 3 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@5.1.6: 3 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.5: 4 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.2: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.64: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
baselines/memobase/src/client/memobase-ts/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.8.1: 7 known vulnerabilitiesPYSEC-2026-1616, PYSEC-2026-1617, PYSEC-2026-1618, PYSEC-2026-3482, PYSEC-2026-3483 +2 more
baselines/memobase/src/mcp/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.20: 14 known vulnerabilitiesPYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039 +9 more
baselines/memobase/src/mcp/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.46.2: 7 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +2 more
baselines/memobase/src/mcp/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dnspython@2.7.0: 1 known vulnerabilityGHSA-45c3-73f7-pv4m
baselines/memobase/src/server/api/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mako@1.3.10: 3 known vulnerabilitiesPYSEC-2026-2617, PYSEC-2026-4243, PYSEC-2026-88
baselines/memobase/src/server/api/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.47.2: 6 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248 +1 more
baselines/memobase/src/server/api/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.5.0: 6 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1998, PYSEC-2026-4175 +1 more
baselines/memobase/src/server/api/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@48.0.1: 6 known vulnerabilitiesPYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554, PYSEC-2026-3552, PYSEC-2026-3553 +1 more
requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@2.0.0: 8 known vulnerabilitiesGHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv, GHSA-rwrf-2pqf-9j8j, GHSA-w4fh-qvv9-3v23, GHSA-5h93-6whr-6q8j +3 more
requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@1.3.0: 2 known vulnerabilitiesPYSEC-2026-249, PYSEC-2026-249
requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.yt-dlp@2026.6.9: 2 known vulnerabilitiesPYSEC-2026-3622, PYSEC-2026-3622
requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install contacted hosts other than package registriesreleases.astral.sh
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.MCP server didn't complete the protocol handshakeserver exited early with code 127
- lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Deserializes data with pickle/marshal, which can execute code.
baselines/A-mem/test_advanced.py:253 - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.0.1: 1 known vulnerabilityPYSEC-2026-2270
baselines/A-mem/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.tqdm@4.66.1: 1 known vulnerabilityPYSEC-2026-1976
baselines/A-mem/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.idna@3.9.0: 1 known vulnerabilityPYSEC-2026-215
baselines/A-mem/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.scipy@1.9.3: 1 known vulnerabilityPYSEC-2023-102
baselines/A-mem/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.27.4: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
baselines/memobase/src/client/memobase-ts/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@eslint/plugin-kit@0.3.2: 1 known vulnerabilityGHSA-xffm-g5w8-qvg7
baselines/memobase/src/client/memobase-ts/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@humanfs/node@0.16.6: 1 known vulnerabilityGHSA-p498-v437-472g
baselines/memobase/src/client/memobase-ts/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ajv@6.12.6: 1 known vulnerabilityGHSA-2g4f-4pwh-qvx6
baselines/memobase/src/client/memobase-ts/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 1 known vulnerabilityGHSA-gcqx-w48m-w2h4
baselines/memobase/src/client/memobase-ts/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.diff@4.0.2: 1 known vulnerabilityGHSA-73rr-hh4g-fpgx
baselines/memobase/src/client/memobase-ts/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.idna@3.10: 2 known vulnerabilitiesPYSEC-2026-215, PYSEC-2026-215
baselines/memobase/src/mcp/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pygments@2.19.1: 1 known vulnerabilityPYSEC-2026-2987
baselines/memobase/src/mcp/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.1.0: 1 known vulnerabilityPYSEC-2026-2270
baselines/memobase/src/mcp/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.35.0: 1 known vulnerabilityGHSA-xcq7-p3pf-p88h
baselines/memobase/src/server/api/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pygments@2.19.2: 1 known vulnerabilityPYSEC-2026-2987
baselines/memobase/src/server/api/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pytest@8.4.1: 1 known vulnerabilityPYSEC-2026-1845
baselines/memobase/src/server/api/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.1.1: 1 known vulnerabilityPYSEC-2026-2270
baselines/memobase/src/server/api/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.requests@2.32.4: 1 known vulnerabilityPYSEC-2026-2275
baselines/memobase/src/server/api/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.h2@4.3.0: 2 known vulnerabilitiesPYSEC-2026-3628, PYSEC-2026-3628
requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.hpack@4.1.0: 2 known vulnerabilitiesPYSEC-2026-4053, PYSEC-2026-4053
requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.mem0ai@2.0.5: 2 known vulnerabilitiesGHSA-5324-3w58-qpp2, GHSA-5324-3w58-qpp2
requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.44.0: 2 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h
requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.Reads environment variables not listed in the manifestOPENAI_BASE_URL, MODEL, EMBEDDING_MODEL, MEM0_API_KEY, MEM0_ORGANIZATION_ID, MEM0_PROJECT_ID, LOCAL_MEM_SIMPLE, EMBED_BASE_URL, OPENAI_EMBEDDING_BASE_URL, MEMOBASE_API_KEY, MEMOBASE_PROJECT_URL, ZEP_API_KEY, HOST, TRANSPORT, MEMOBASE_BASE_URL
Network activity
During install
files.pythonhosted.orgpypi.orgreleases.astral.sh
While running
Not run — the code wasn't started in this scan
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Telemem alternatives
View more →Similar mcp servers in Database Management, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Telemem (this page) TeleAI-UAGI | 494 | Apache-2.0 | Oct 26, 2026 | Scanned, no flagged issues |
| Codebase Memory MCP DeusData | 48k | MIT | Nov 1, 2026 | Scanned, see report |
| Xerj xerj-org | 19k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| MCP Toolbox googleapis | 17k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Nightingale ccfos | 13k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Dbhub bytebase | 3.8k | MIT | Oct 26, 2026 | Scanned, no flagged issues |