Is Superlocalmemory MCP server safe?

Probably. Read the findings first.

C60/100grade C

Use with care. Some checks failed or could not be verified.

What to know before installing

Public scan report

scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it

1 high2 medium

Code scan87 source files scanned3/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 16 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

highNetwork call to a paste/tunnel/webhook hostnet.suspicious-host

configs/chatgpt-desktop-mcp.json: …": "Copy the HTTPS URL from ngrok (e.g. https://abc123.ngrok.app)", "step4": "In ChatGPT: Settings →…

mediumnpm install lifecycle script presentinstall.script

package.json: …'*.pyc' -delete 2>/dev/null; true", "postinstall": "node scripts/postinstall.js", "pre…

Overall 60/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

M3 Memory
Local-first memory — 100+ tools, 99.2% LongMemEval-S retrieval@10, hybrid search, GDPR, no cloud.
not reviewed
Established
A
Shodh Memory
Cognitive memory for AI agents — semantic search, Hebbian learning, knowledge graphs.
not reviewed
Established
C
Reverie
Graph memory that dreams: Neo4j knowledge-graph memory for AI agents with hybrid search
not reviewed
Established
B