MCP.Market

Engram MCP server

by NickCirv·io.github.NickCirv/engram·v4.5.0·142 stars
No reviews yet

Ranked local code-graph context for AI coding agents. Intercepts reads + greps. Apache-2.0.

C65/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C65/100

full report

Adoption
Established

142 stars131 downloads/wk

Reviews

Write one

Nobody has reviewed Engram yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Engram tools (6)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • benchmark

    Compare token cost of graph queries vs reading raw files.

  • god_nodes

    Return the most connected entities \u2014 the core abstractions of the codebase.

  • graph_stats

    Return summary: node/edge counts, confidence breakdown, context reduction.

  • list_mistakes

    List known mistakes from the knowledge graph \u2014 prior bugs, failure modes, and wrong approaches extracted from past session documents. Use this before making changes to check if the codebase has hit similar problems before.

  • query_graph

    Search the knowledge graph using natural language. Returns relevant code structure as compact context.

  • shortest_path

    Find the shortest path between two concepts in the graph.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

2 medium
  • Code scan45 source files scanned15/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 4 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10

Findings (2)

  • mediumnpm install lifecycle script presentinstall.script
  • mediumnpm install lifecycle script presentinstall.script
    package.json: …tress": "tsx bench/stress-test.ts", "postinstall": "node scripts/postinstall.mjs", "pr…
Overall 65/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Engram compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
65/100
higher than 20% of 48,255 servers
Tools
6
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
142
more than 95% of 28,688 servers
Downloads a week
131
more than 68% of 12,191 servers with a package

What its tools let an agent do: 6 read

Install Engram in Claude Code, Cursor or VS Code

Runs npx -y engramx on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add engram -- npx -y engramx
Add to Cursor

What the publisher says

From the Engram repository's README, as published. We do not edit it. Read it on GitHub

Engram

A local structural code graph and context toolkit for AI coding agents. Engram indexes source entities, Git relationships and selected project memory, then exposes focused context through a CLI, agent hooks, MCP and an authenticated local dashboard.

Use it to find relevant code before reading full files, inspect relationships and carry recorded mistakes into a later session. Read the source returned by a query before making a behavioral claim: graph retrieval is an aid to investigation.

Quickstart

The inspected package is engramx 4.5.0 and requires Node >=20. This source-build example is source-inspected, not executed; it does not assume a currently published package or extension version.

git clone https://github.com/NickCirv/engram.git
cd engram
git checkout 9fa2a4b74ca8e66560d74d1255c16c43157d32bd
npm install --ignore-scripts
npm run build
export ENGRAM_NO_UPDATE_CHECK=1
node dist/cli.js init ../your-project --no-hook
node dist/cli.js query "authentication" --project ../your-project --budget 2000
node dist/cli.js stats --project ../your-project

Replace ../your-project with a codebase you can inspect. Indexing writes the project's .engram/ graph. The --no-hook flag matters: the default CLI init also installs a Sentinel hook. Start with the graph, examine the output, then decide which integration to enable. The build includes grammar bundling; inspect package scripts and dependencies before installation.

The query returns matching graph entities and an estimated token count, or a no-matching-nodes message. Counts depend on the indexed project; no benchmark output is fabricated here.

What is implemented

These entry points are declared in the pinned CLI. Consult each command's help before a write operation. Generators, hook installers, cache/database commands and plugin installation can modify local state.

Architecture

Source miners extract entities, references, Git co-change and selected mistake/session information. The graph store persists project-local SQLite using sql.js. Queries traverse the graph and render bounded context. The provider resolver combines built-in sources and optional plugins/MCP providers; integrations can add external processes and network access.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Engram: common questions

Is Engram MCP server safe?
With care: it is graded C, so read the findings first (65/100). Read the Engram safety report
How do I install Engram?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Engram need an API key?
Yes. The registry entry asks for ENGRAM_API_TOKEN.
Is Engram maintained?
The last commit was 43 days ago (2026-09-22). The latest release is v4.5.0.
How does Engram compare with other MCP servers?
safety score 65/100 (higher than 20% of 48,255 servers); tools 6 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.