{"name":"io.github.munhq/chat-recall","slug":"munhq-chat-recall","title":"chat-recall","description":"One searchable history across every AI coding tool, with secret scanning and a shared task board.","url":"https://mcp.market/server/munhq-chat-recall","rating":null,"grade":"C","score":68,"certified":false,"status":"active","category":"productivity","tags":["productivity","security"],"presence":{"score":43,"stars":2,"forks":0,"downloads_week":1347,"last_push_at":"2026-09-16T18:12:47.000Z","license":"NOASSERTION"},"claimed":false,"transport":"mixed","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/munhq/chat-recall","website":"https://chatrecall.dev","version":"0.7.0","remotes":[{"type":"streamable-http","url":"https://chatrecall.dev/mcp"}],"packages":[{"registryType":"npm","identifier":"chat-recall","version":"0.7.0","runtimeHint":"npx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Server to sync to. Defaults to the hosted service at https://chatrecall.dev; set it to your own instance to self-host. Self-hosting is free for one person.","format":"string","name":"CHAT_RECALL_SERVER"},{"description":"Which tools to register: \"lean\" (default, 28 tools — tool choice degrades as the list grows) or \"full\" (all 63 tools, plus recall_help — a directory of the rest; 4 code-intelligence tools register only with the codeindex companion on PATH). Every tool works when called by name either way.","format":"string","default":"lean","choices":["lean","full"],"name":"CHAT_RECALL_MCP_PROFILE"},{"description":"Set to 1 to load the whole server inside each session. By default every session with the same profile and server shares one background daemon, and each session is a thin relay onto it — the engine is loaded once per machine instead of once per session. Turn it off for a sandbox with no writable runtime directory.","format":"string","name":"CHAT_RECALL_NO_DAEMON"},{"description":"Seconds with no session attached before the shared daemon exits and returns its memory. Default 900. Set 0 to keep it resident.","format":"string","name":"CHAT_RECALL_DAEMON_IDLE_SECS"}]}],"tools":[],"scan":{"score":68,"grade":"C","scanned_at":"2026-09-19T09:58:26.371Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T09:58:26.306Z","components":{"code":{"score":1,"max":25,"notes":["97 source files scanned"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 653ms (auth required)"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (endpoint requires auth); not counted"]},"auth":{"score":15,"max":15,"notes":["OAuth resource metadata advertised on 401"]},"maintenance":{"score":15,"max":15,"notes":["last push 3 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"install.curl-pipe","severity":"high","component":"code","title":"curl | sh in a script","evidence":"dist/cli.js: …chat-recall (or re-run the installer: curl -fsSL ${targets[0].serverUrl.replace(/\\/+$/, \"\")}/install | sh)`)); } if (check) { const own =…"},{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"dist/cli.js: …function git(toplevel, args) { return execSync(`git ${args}`, { cwd: toplevel, stdio: …"}],"inputs":{"probes":[{"url":"https://chatrecall.dev/mcp","reachable":true,"authRequired":true,"latencyMs":653,"authScheme":"oauth"}],"packages":[{"registryType":"npm","identifier":"chat-recall","version":"0.7.0","found":true,"license":"Elastic-2.0","hasInstallScripts":false,"dependencyCount":9,"publishedAt":"2026-09-16T17:21:52.238Z","repositoryUrl":"git+https://github.com/munhq/chat-recall.git","weeklyDownloads":1347}],"repo":{"found":true,"owner":"munhq","repo":"chat-recall","archived":false,"pushedAt":"2026-09-16T18:12:47Z","stars":2,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/243440819?v=4","ownerCreatedAt":"2025-11-11T22:03:58Z","license":"NOASSERTION"},"icon":{"url":"https://chatrecall.dev/favicon.svg","source":"site"},"presence":{"stars":2,"forks":0,"downloadsWeek":1347,"license":"NOASSERTION","lastPushAt":"2026-09-16T18:12:47.000Z","score":43}}}},"grade_history":[],"reviews":[]}