Triberef Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Triberef Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Tribal memory infrastructure for tribeCast AI agents. This is an MCP (Model Context Protocol) server that provides persistent memory across Claude Code sessions.
ref_tribal_memory) - Query decisions, entities, schemas, and active tasksref_session_context) - Track tokens used, items retrieved, session stateref_log_artifact) - Write outputs back to tribal memorylog_decision) - Record architectural and strategic decisionsupsert_entity) - Create/update tracked objects (products, services, schemas)create_task, log_completion) - Track work items for agentscd packages/triberef-mcp
npm installCopy .env.example to .env and fill in your Supabase credentials:
cp .env.example .envRequired environment variables:
SUPABASE_URL - Your Supabase project URLSUPABASE_SERVICE_KEY - Your Supabase service role keyExecute the migration in your Supabase SQL editor:
supabase/migrations/001_tribemcp_foundation.sqlOr use the Supabase CLI.
npm run buildStdio mode (for Claude Desktop/CLI):
npm start
# or
node dist/index.cjsHTTP mode (for browser/API access):
npm run start:http
# or
TRANSPORT=http node dist/index.cjsAdd to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"triberef": {
"command": "node",
"args": ["/path/to/tribecast/packages/triberef-mcp/dist/index.cjs"],
"env": {
"SUPABASE_URL": "your-supabase-url",
"SUPABASE_SERVICE_KEY": "your-service-key"
}
}
}
}# TypeScript watch mode
npm run dev
# Type checking
npm run check
# Build and inspect with MCP inspector
npm run build && npm run inspectQuery tribal memory with deduplication (items already retrieved in session are filtered).
{
"query": "payment architecture",
"include": ["decisions", "entities", "tasks"],
"max_tokens": 5000
}Get current session state.
{}Returns: session ID, tokens used/remaining, items retrieved counts.
Log an artifact back to tribal memory.
{
"task_id": "TRIBE-001",
"type": "code",
"name": "src/tools/tribal-memory.ts",
"content": "..."
}Record an architectural decision.
{
"topic": "Database architecture",
"decision": "Use Supabase PostgreSQL",
"rationale": "Existing infrastructure, real-time subscriptions",
"tags": ["database", "infrastructure"]
}Create or update an entity.
{
"name": "tribeRef",
"type": "product",
"description": "Tribal memory MCP server",
"status": "building",
"tags": ["mcp", "infrastructure"]
}Create a work item.
{
"task_id": "TRIBE-003",
"title": "Implement expert agent consultations",
"spec": "Add ref_expert_agent tool...",
"related_entities": ["tribeRef", "tribeAgent"]
}Mark task complete with artifacts.
{
"task_id": "TRIBE-001",
"artifacts": [
{ "type": "code", "name": "src/index.ts" },
{ "type": "migration", "name": "001_foundation.sql" }
]
}src/
├── index.ts # MCP server entry point
├── db.ts # Supabase client & types
├── session.ts # Session tracking & dedup
├── tools/
│ ├── tribal-memory.ts # ref_tribal_memory, log_decision, upsert_entity
│ ├── session-context.ts # ref_session_context
│ └── log-artifact.ts # ref_log_artifact, create_task, log_completion
└── utils/
└── tokens.ts # Token estimation utilitiesMIT (forked from ref-tools/ref-tools-mcp)
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.