Sample Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Sample Mcp (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server that provides memory storage and retrieval capabilities using Mem0. This tool allows you to store and search through memories, making it useful for maintaining context and making informed decisions based on past interactions.
This server now supports StreamableHTTP via Smithery CLI while retaining optional STDIO compatibility.
npm run devnpm run buildnpm run start:httpYou can configure the server using Smithery’s generated form in the playground or by setting environment variables (e.g., MEM0_API_KEY).
Run the server over STDIO (useful for local clients that only support STDIO):
env MEM0_API_KEY=your-api-key-here npm run build:stdio && npm run start:stdio#### Configuring Cursor 🖥️
To configure Mem0 MCP in Cursor:
env MEM0_API_KEY=your-api-key-here npx -y @mem0/mcp (or use start:stdio from this repo)To configure Mem0 MCP using JSON configuration:
{
"mcpServers": {
"mem0-mcp": {
"command": "npx",
"args": ["-y", "@mem0/mcp"],
"env": {
"MEM0_API_KEY": "YOUR-API-KEY-HERE"
}
}
}
}Add the following JSON block to your User Settings (JSON) file in VS Code:
{
"mcp": {
"inputs": [
{
"type": "promptString",
"id": "apiKey",
"description": "Mem0 API Key",
"password": true
}
],
"servers": {
"mem0-memory": {
"command": "npx",
"args": ["-y", "@mem0/mcp"],
"env": {
"MEM0_API_KEY": "${input:apiKey}"
}
}
}
}
}Store new memories with user-specific context.
{
"name": "add-memory",
"arguments": {
"content": "User prefers dark mode interface",
"userId": "user123"
}
}Search through stored memories to retrieve relevant information.
{
"name": "search-memories",
"arguments": {
"query": "What are the user's interface preferences?",
"userId": "user123"
}
}{
"content": [
{
"type": "text",
"text": "Memory added successfully"
}
],
"isError": false
}{
"content": [
{
"type": "text",
"text": "Memory: User prefers dark mode interface\nRelevance: 0.95\n---\nMemory: User mentioned liking minimal UI\nRelevance: 0.82\n---"
}
],
"isError": false
}MEM0_API_KEY: Your Mem0 API key (required)npm install.env file in the project directory and add your Mem0 API key:MEM0_API_KEY=your-api-key-here
DEFAULT_USER_ID=mem0-mcp-usernpm run devnpm run build:stdio
npm run start:stdioThe server includes error handling for:
Example error response:
{
"content": [
{
"type": "text",
"text": "Error: Failed to search memories: Invalid API key"
}
],
"isError": true
}Contributions are welcome! Please feel free to submit a Pull Request.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.