Is Nautilus Compass Memory MCP server safe?
Probably. Read the findings first.
Use with care. Some checks failed or could not be verified.
What to know before installing
- highWhole environment serialized (possible credential exfil)
Public scan report
scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it
1 high2 medium
- Code scan132 source files scanned3/25
- Live reliabilityremote reachable in 994ms (auth required)20/20
- –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
- Auth qualityauth enforced (unknown)9/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
Findings (3)
- mediumNetwork call to a raw IP address
net.raw-ipnautilus_compass-3.2.0/cloud_ingest.py: …n.get( "COMPASS_CLOUD_INGEST_URL", "http://127.0.0.1:8770/v1/v14/ingest_obs" ) AGENT_TYPE = os.env…
- mediumeval / new Function used
exec.evalnautilus_compass-3.2.0/daemon.py: … # 砍激活 buffer(可 env 覆盖)。释放显存给共置的 gate B eval(soul 收敛路径)。 try: _max_seq = …
- highWhole environment serialized (possible credential exfil)
env.dumpnautilus_compass-3.2.0/deeptest.py: … · subprocess args 中文也保 UTF-8 env = os.environ.copy() env["PYTHONIOENCODING"] = "utf-8" …
Overall 62/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Nautilus Compass Memory does
MemorixLocal-first project memory with legacy MCP and 2026 discovery compatibility.not reviewedEstablishedC- PlurOpen, local-first engram memory for AI agents: read, correct, delete; shared over MCP.not reviewedEstablishedA
- VestigeLocal-first memory for AI agents that reaches backward to find a failure's root cause.not reviewedEstablishedB
