memory-bank-mcp

MCP server · npm · ★ 921 · graded 2026-10-23Source linked

A Model Context Protocol (MCP) server implementation for remote memory bank management, inspired by Cline Memory Bank.

No outside reports on file

This tool gives your AI assistant access to a remote database, which creates a new place sensitive data can leak if not properly secured and monitored.

Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee.

Was this verdict for Memory Bank MCP helpful?

What it can access

  • Local filesReads local filesNOTED
  • Command executionNo shell command runner notedLOW
  • Network reachConnects to outside service APINOTED
  • CredentialsRequires API key or tokenREVIEW
  • Package sourcenpm (@allpepper/memory-bank-mcp)PUBLIC

Inferred from this listing’s public package details and description. Check the project’s source before installing.

Install

npx -y @allpepper/memory-bank-mcp

All setup options ↓

Everything known

We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.

0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30

Popularity grade: C (from public signals such as stars and downloads, not a code review). Graded 2026-10-23.

Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.

Check a specific version →

About Memory Bank MCP

memory-bank-mcp is an open-source MCP server focused on Developer tools and Cloud & infrastructure. A Model Context Protocol (MCP) server implementation for remote memory bank management, inspired by Cline Memory Bank. Source code and documentation are published on GitHub at alioshr/memory-bank-mcp.

Who it’s for

Developers building AI applications that need persistent memory features, or anyone using Claude Desktop or similar AI tools who wants to add a custom memory system. It requires technical setup to configure and run.

Alternatives

  • Built-in AI memory features: Claude and other AI models have native conversation memory; use those before adding external tools.
  • Local file storage MCP: Simpler MCP servers that store memories locally on your machine instead of remotely.
  • Database MCP servers: Generic database connectors (PostgreSQL, SQLite) if you want full control over memory storage.

Setup

Check these steps against the project’s own instructions before running anything.

Follow the project's README. Typically MCP servers are added to Claude Desktop by editing the config file with the server's connection details, but exact steps depend on how this particular project is packaged.

Why this grade

CC — Moderate risk signals

Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.

Popularity and upkeep

35/100
GitHub stars
921
Listing last refreshed
2026-10-30

These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.

Risks to watch for

  • Remote database access: The server connects to a remote memory bank, so any compromise of that database could expose stored conversations or sensitive notes.
  • Prompt injection: An attacker could craft text containing hidden instructions that tricks the AI into misusing the memory system or exposing stored data.
  • Unvetted code: With 921 GitHub stars but no npm downloads tracked, adoption is unclear; the code may not be widely reviewed for security issues.
  • Data leakage through memory: Information stored could be accidentally retrieved in wrong contexts or leaked if the connection isn't encrypted.
  • No clear auth details: The README isn't visible here; unclear how credentials for the remote database are stored or protected.

How to lower the risk

Least-privilege permissions

  • Only store non-sensitive summaries in the memory bank, never passwords or private keys.
  • Restrict the MCP server's ability to delete or modify stored data.

Network isolation

  • Ensure the remote memory database is on a private network, not public internet.
  • Use strong encryption (TLS/HTTPS) for all connections to the memory server.

Monitoring

  • Log all requests the AI makes to read or write memories.
  • Set alerts if unusual amounts of data are stored or retrieved at once.

Red flags to watch for

  • The AI suddenly starts referencing memories you didn't create.
  • Connection errors or timeouts suggesting the remote database is down or unreachable.
  • Stored memories appearing in conversations where they shouldn't be relevant.

Questions

How do I install Memory Bank MCP?

Run npx -y @allpepper/memory-bank-mcp in your terminal, or add the server entry to your claude_desktop_config.json or .cursor/mcp.json as shown in the Setup section on this page. Full setup docs and environment variables are in github.com/alioshr/memory-bank-mcp.

Are there security reports about Memory Bank MCP?

No reports found for this package in our research (last checked 2026-10-30). Memory Bank MCP currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include remote database access, prompt injection, unvetted code.

Is Memory Bank MCP actively maintained?

Memory Bank MCP has 921 GitHub stars. Our directory data was last refreshed on 2026-10-30. Check recent commit activity, release tags, and open issues at github.com/alioshr/memory-bank-mcp before pinning it in production.

What are alternatives to Memory Bank MCP?

Notable alternatives to Memory Bank MCP include Built-in AI memory features (Claude and other AI models have native conversation memory), Local file storage MCP (Simpler MCP servers that store memories locally on your machine instead of remotely), Database MCP servers (Generic database connectors (PostgreSQL, SQLite) if you want full control over memory storage). You can also compare Memory Bank MCP side by side with other MCP servers in the Related tools section on this page.

README badge and team notes

Maintain or use Memory Bank MCP? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.

AgentArmorHQ Risk Grade C for Memory Bank MCP

GitHub README Markdown:

markdown
[![AgentArmorHQ Risk Grade for Memory Bank MCP](https://agentarmorhq.com/api/badge/alioshr-memory-bank-mcp)](https://agentarmorhq.com/skills/alioshr-memory-bank-mcp)

HTML embed:

html
<a href="https://agentarmorhq.com/skills/alioshr-memory-bank-mcp"><img src="https://agentarmorhq.com/api/badge/alioshr-memory-bank-mcp" alt="AgentArmorHQ Risk Grade for Memory Bank MCP" height="20" /></a>

Terminal check:

terminal
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "alioshr-memory-bank-mcp"

Share with your security lead

Need sign-off to use memory-bank-mcp? Copy this note for Slack, a ticket or a pull request.

### AgentArmorHQ Security Review Memo: memory-bank-mcp
- **Listing URL:** https://agentarmorhq.com/skills/alioshr-memory-bank-mcp
- **Type:** App connector
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 921 GitHub stars

#### Permission & Blast-Radius Signals
- **Local files:** Reads local files
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** Requires API key or token
- **Package source:** npm (@allpepper/memory-bank-mcp)

#### Recommended Hardened Setup
- **Command:** `npx -y --ignore-scripts @allpepper/memory-bank-mcp`
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.

_Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee._

Key facts

Type
App connector
Publisher
alioshr
Source code
github.com/alioshr/memory-bank-mcp
Install command
npm install @allpepper/memory-bank-mcp
Est. context load
~550 tokens / turn (~3 tool schemas, 0.27% of 200k context)
Popularity
921 GitHub stars
Last updated
2026-10-30
Last graded
2026-10-23

Community

Discussions for Memory Bank MCP

Ask questions or share configuration tips. Governed by our Community Rules & Terms.

No posts match this filter yet.

Be the first to ask a question or share a working tip.

Was this listing for Memory Bank MCP helpful?

Check before you install, in Claude

Your assistant answers Block, Review or No known issues for any package before it installs it.

Get this check inside Claude