MCP.Market

Stashpad MCP server

by laaielichter·io.github.laaielichter/stashpad·v0.2.2
No reviews yet

Local memory for any AI agent: Markdown files with sources, a review queue and search.

B72/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B72/100

full report

Adoption
Growing

0 stars47 downloads/wk

Reviews

Write one

Nobody has reviewed Stashpad yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Stashpad tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-27 · same rubric, same numbers if you re-run it

1 medium
  • Code scan36 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 8 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10

Findings (1)

  • mediumeval / new Function usedexec.eval
    src/cli.mjs: …2)); } else { io.stdout(`Stashpad eval (${report.data})`); io.stdout(`Models…
Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Stashpad compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
72/100
higher than 40% of 4,460 AI and agents servers
Downloads a week
47
more than 39% of 1,538 AI and agents servers with a package

Install Stashpad in Claude Code, Cursor or VS Code

Runs npx -y stashpad on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add stashpad -- npx -y stashpad
Add to Cursor

What the publisher says

From the Stashpad repository's README, as published. We do not edit it. Read it on GitHub

Stashpad Local memory for any AI coding agent: an MCP server and CLI that keep plain Markdown notes with sources, a review queue and search.

Works with Claude Code, Codex, Cursor, VS Code, Gemini CLI and any other MCP client, or with no MCP at all (plain commands and an AGENTS.md block). No model, no cloud, no dependencies: Node 20 or newer.

Quickstart

npm install -g stashpad
stashpad setup                  # prints the MCP settings for your agent app (generic, claude-code, vscode, codex)
stashpad doctor --client        # starts the server the way your agent app does and checks it answers

Expected: client start: the server answered with 8 tools in ... ms and Nothing is broken.

Claude Code users can install the plugin instead, which also adds the hooks below: /plugin marketplace add laaielichter/stashpad, then /plugin install stashpad@stashpad (or stashpad@reverseport from the ReversePort marketplace).

Why Stashpad?

  • Your agent stops forgetting after compaction. Pinned rules and the latest handoff come back at the start of every session and right after /compact.
  • Rules you set stay in front of the agent. stashpad pin keeps the few rules that matter in every brief; each prompt gets only the memories that clearly match it.
  • Nothing ends up in memory behind your back. Agent, tool and web notes wait for a person; near-copies, secrets and hidden text are refused.
  • You can read, fix and keep it. Memories are Markdown files with a source and dates, in your project, in git if you want. Old facts are ended, never overwritten.
  • It keeps working. One store per project (worktrees share it), a lock for parallel writers, snapshots before changes, doctor that says what to fix.

How it compares

What Stashpad does not do: semantic search (word search finds about 2 of 3 reworded questions in our eval), automatic extraction of memories from chats (by design), sync between computers (use git), or a shared server for a team.

Start and end of a session

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Stashpad: common questions

Is Stashpad MCP server safe?
Mostly: it is graded B (72/100). Read the Stashpad safety report
How do I install Stashpad?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Stashpad need an API key?
Yes. The registry entry asks for STASHPAD_PASSPHRASE.
Is Stashpad maintained?
The last commit was 16 days ago (2026-10-19). The latest release is v0.2.2.
What can I use instead of Stashpad?
Servers from other publishers that do the same job: Basic Memory MCP server, IWE (iwe.md) MCP server and Memanto MCP server.
How does Stashpad compare with other AI and agents MCP servers?
safety score 72/100 (higher than 40% of 4,460 AI and agents servers); downloads a week 47 (more than 39% of 1,538 AI and agents servers with a package). Full comparison.

Alternatives to Stashpad

Same job from other publishers: the closest match first, then the best rated.

  • Basic Memory
    Local-first knowledge management with bi-directional LLM sync via Markdown files.
    B
  • IWE (iwe.md)
    Markdown knowledge base as agent memory. Runs against the notes directory it is started in.
    A
  • Memanto
    MCP server for Memanto - persistent semantic memory for any MCP-compatible agent
    A
  • OpenWorkProof
    Verifiable agent evidence; opt-in Codex guard and reference SOC alert review.
    A
  • Mnemoverse Memory
    Hosted agent memory that learns from outcomes, with shared rooms. No key: mcp.mnemoverse.com/mcp
    A