Llmemory Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Llmemory Mcp (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A remote MCP server that lets AI coding agents search and pull context from your imported AI chat history (ChatGPT, Claude, Codex, Claude Code) without copy-pasting. Reads your vault live from your own Google Drive. Zero server-side storage, fully private.
Server URL: https://mcp.llmemory.xyz/mcp Transport: Streamable HTTP Auth: OAuth 2.1 with Dynamic Client Registration (no API keys — browser flow on first use)
This is a remote MCP server — no cloning, no npm install, no local process. Cline just needs the URL.
Option A — Cline Dashboard (recommended):
LLMemory · URL: https://mcp.llmemory.xyz/mcpllmemory.Option B — Cline MCP config JSON: Add this to your Cline MCP settings (cline_mcp_settings.json):
{
"mcpServers": {
"llmemory": {
"type": "remote",
"url": "https://mcp.llmemory.xyz/mcp"
}
}
}Restart the Cline extension. On first tool call, the OAuth browser flow opens automatically.
Same URL works in any MCP client that supports Streamable HTTP + OAuth 2.1:
.vscode/mcp.json: { "servers": { "llmemory": { "type": "http", "url": "https://mcp.llmemory.xyz/mcp" } } }claude mcp add --transport http llmemory https://mcp.llmemory.xyz/mcphttps://mcp.llmemory.xyz/mcp| Tool | Purpose |
|---|---|
list_sources | Show which AI providers have data in your vault and counts |
list_recent | Recently updated conversations (id, title, source, message count). Filter by source |
search_chats | Full-text search across all imported conversations. Returns snippets + conversation IDs |
get_conversation | Fetch one full transcript by ID (Markdown or JSON) |
get_context_pack | Agent-ready briefing (goal, recent state, files, open tasks) for one conversation or a whole folder |
LLMemory reads the LLMemory/ folder in your Google Drive — a manifest.json plus one JSON file per conversation, written by the LLMemory browser extension or CLI. The server is read-only and zero-storage: it brokers Google OAuth, streams the result, then forgets everything. Your chats never leave your Drive on a server.
LLMemory/ folder.LLMemory/ Drive folder (drive.file scope).Full privacy posture: STORE_PRIVACY.md
list_recent filtered to codex, then get_conversationget_context_packlist_sourcesMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.