Palinode MCP server

by phasespace-labs·io.github.phasespace-labs/palinode·v0.21.0

No reviews yet

Inspectable, correctable project memory in git-versioned Markdown for AI agents.

C66/100grade C

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

C66/100

full report

Adoption

Established

40 stars503 downloads/wk

Reviews

Write one

Nobody has reviewed Palinode yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Palinode tools (3)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

palinode_entities
List all known entities, or get memory files referencing a specific entity.
palinode_ingest
Fetch a URL and save it as a research reference in Palinode memory.
palinode_push
Sync memory changes to GitHub for backup and cross-machine access.

Public scan report

scanner v0.1.8 · 2026-09-19 · same rubric, same numbers if you re-run it

2 medium

Code scan184 source files scanned; 184 source files scanned15/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 1 days ago15/15
Maintainer identityregistry namespace matches repository owner7/10

Findings (2)

mediumsubprocess with shell=Trueexec.shell-true

palinode-0.21.0/palinode/core/git_tools.py: …form is used deliberately — never ``shell=True``, never string-interpolated commands …

mediumsubprocess with shell=Trueexec.shell-true

palinode-0.21.0/palinode/core/git_tools.py: …form is used deliberately — never ``shell=True``, never string-interpolated commands …

Overall 66/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Grade history

2026-09-19restoreD → Cscore 66: subprocess with shell=True; subprocess with shell=True

Install directly

claude mcp add palinode -- uvx palinode

Add to Cursor

Palinode: common questions

Is Palinode MCP server safe?: With care: it is graded C, so read the findings first (66/100). Read the Palinode safety report
How do I install Palinode?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Palinode need an API key?: Yes. The registry entry asks for PALINODE_API_TOKEN, PALINODE_API_TOKEN_FILE.
Is Palinode maintained?: The last commit was in the last day (2026-09-18). The latest release is v0.21.0.
What can I use instead of Palinode?: Servers from other publishers that do the same job: Nexusmem MCP server, memgit MCP server and Kindex MCP server. Compare all Palinode alternatives.

Alternatives to Palinode

Same job from other publishers: the closest match first, then the best rated.

All Palinode alternatives →

Nexusmem
Local-first memory for AI coding agents: shell history with exit codes, git diffs, docs, MCP.
not reviewed
Growing
A
memgit
Git for AI memory — version-controlled, searchable context that persists across sessions
not reviewed
Growing
B
Kindex
Persistent knowledge graph and MCP server for AI workflows with git-tracked project context.
not reviewed
Growing
A
Kindex
Persistent knowledge graph and MCP server for AI workflows with git-tracked project context.
not reviewed
Growing
B
Bettermemory
Memory for coding agents, checked against the filesystem and git before it is believed.
not reviewed
Growing
A

Palinode vs Nexusmem Palinode vs memgit Palinode vs Kindex

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: C · 66/100
Stars: 40
Downloads/wk: 503
Price: Free
Licence: MIT
Transport: Local · pypi
Version: 0.21.0
Category: Developer tools
Last release: 2026-09-18

Credentials it needs

PALINODE_DIRPath to the markdown-memory directory (e.g. ~/.palinode). Created if missing.
PALINODE_API_HOSTHost where the back-end palinode-api process is reachable
PALINODE_API_PORTPort for palinode-api
PALINODE_API_TOKENsecretOptional bearer token enforced on every palinode-api request other than /health. Required when PALINODE_API_BIND_INTENT=public. Generate with: python -c 'import secrets; print(secrets.token_urlsafe(32))'.
PALINODE_API_TOKEN_FILEsecretPath to a file containing the bearer token (alternative to PALINODE_API_TOKEN; for docker-secrets style deployments)
PALINODE_DIRPath to the markdown-memory directory
PALINODE_MCP_HTTP_HOSTBind host for the MCP HTTP server. Defaults to loopback; set to 0.0.0.0 only with intentional network exposure (paired with PALINODE_API_BIND_INTENT=public on the back-end).
PALINODE_MCP_HTTP_PORTPort for the MCP HTTP server
PALINODE_API_HOSTHost where the back-end palinode-api is reachable
PALINODE_API_PORTPort for palinode-api
PALINODE_API_TOKENsecretBearer token enforced by palinode-api. Required when binding non-loopback. Generate with: python -c 'import secrets; print(secrets.token_urlsafe(32))'.
PALINODE_API_TOKEN_FILEsecretPath to a file containing the bearer token (alternative to PALINODE_API_TOKEN)

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/phasespace-labs-palinode.svg)](https://mcp.market/server/phasespace-labs-palinode)

How the badge works