Tugra MCP server
com.tugra-ai/tugra·v0.1.4Provenance-aware memory format for AI agents: every claim carries its source, age and boundary.
0 stars66 downloads/wk
Reviews
Write oneNobody has reviewed Tugra yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Tugra tools (4, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
event_reportAppend a telemetry line to akis/YYYY-MM-DD.jsonl. No network.
fact_proposewrite actionWrite a draft fact under kasa/_oneriler/ (or quarantine). Secret patterns are rejected before any write; the matching text is never returned. type=boundary is always quarantined. Fake mcp:// sources are not injected.
fact_readRead one fact by uid. Body passes through the presentation layer (injection escaping). Retired facts include superseded_by and the reason.
fact_searchSearch stored facts. Retired and rotten facts are omitted unless archive is true. Rank: token score, then freshness, then confidence. Boundary facts add a no-claim warning. Authorization required.
Public scan report
scanner v0.1.10 · 2026-10-14 · same rubric, same numbers if you re-run it
- Code scan39 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 2 days ago15/15
- Maintainer identitynamespace and repository owner differ; website matches verified namespace5/10
How Tugra compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 75% of 48,243 servers
- Tools
- 4
- the typical server has 7
- Tools that change things
- 25%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 66
- more than 51% of 12,306 servers with a package
What its tools let an agent do: 3 read · 1 change
Install Tugra in Claude Code, Cursor or VS Code
Runs npx -y tugra on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add tugra -- npx -y tugra
What the publisher says
From the Tugra repository's README, as published. We do not edit it. Read it on GitHub
tugra
Part of VERAX, by VERAX Teknoloji. Start with the VERAX body: verax-ai/verax. Sister projects: Conarium · Cedulon.
npx tugra initThat creates a vault, writes a sample fact, and prints a config block. Paste the block into your MCP client. On a TTY, npx tugra prints help and exits. Piped (Claude Desktop, Cursor, Claude Code) it is the MCP server.
Provenance-aware memory for AI agents. Every claim carries its source, its age, and its boundary. There is no cloud.
What it is
A fact that cannot name where it came from is not a fact. Tugra stores each claim as a file whose frontmatter holds source, last verification date, shelf life, and — when the topic is off-limits — a boundary that forbids invention. Search ranks by token score, then freshness, then confidence. Retired and rotten facts stay out of the default set.
Tools
Stored field names stay in the vault's native shape (kaynak, guven, raf_omru, sinir). The tool names and parameter names above are the public contract.
Install — env paths (optional)
tugra init is enough to start. Override the two paths only if you already have a vault elsewhere. Without them, the server looks next to the installed package — that is wrong for a bare npx with no init.
- TUGRA_VAULT — vault (markdown facts)
- TUGRA_EVENTS — telemetry directory
Authorization: if no authorization store is configured, single-user mode is on — search and propose work without a profile. If an authorization store is configured (a yetki/ directory, or TUGRA_AUTH), each agent needs a JSON profile or search returns unauthorized.
Claude Desktop
claudedesktopconfig.json:
{
"mcpServers": {
"tugra": {
"command": "npx",
"args": ["-y", "tugra"],
"env": {
"TUGRA_VAULT": "/absolute/path/to/vault",
"TUGRA_EVENTS": "/absolute/path/to/events"
}
}
}
}Claude Code
.mcp.json at the project root, or claude mcp add:
{
"mcpServers": {
"tugra": {
"command": "npx",
"args": ["-y", "tugra"],
"env": {
"TUGRA_VAULT": "/absolute/path/to/vault",
"TUGRA_EVENTS": "/absolute/path/to/events"
}
}
}
}Cursor
.cursor/mcp.json or Cursor Settings → MCP:
{
"mcpServers": {
"tugra": {
"command": "npx",
"args": ["-y", "tugra"],
"env": {
"TUGRA_VAULT": "/absolute/path/to/vault",
"TUGRA_EVENTS": "/absolute/path/to/events"
}
}
}
}Windsurf
mcp_config.json:
{
"mcpServers": {
"tugra": {
"command": "npx",
"args": ["-y", "tugra"],
"env": {
"TUGRA_VAULT": "/absolute/path/to/vault",
"TUGRA_EVENTS": "/absolute/path/to/events"
}
}
}
}Codex
~/.codex/config.toml:
[mcp_servers.tugra]
command = "npx"
args = ["-y", "tugra"]
[mcp_servers.tugra.env]
TUGRA_VAULT = "/absolute/path/to/vault"
TUGRA_EVENTS = "/absolute/path/to/events"Windows: use a full path (C:\\Users\\…\\vault). Node 20 or newer.
More client notes: docs/install.md.
Shared-vault authorization (optional)
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Tugra: common questions
- Is Tugra MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Tugra safety report
- How do I install Tugra?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Tugra need an API key?
- No secret keys are declared. It reads 3 settings from the environment.
- Is Tugra maintained?
- The last commit was 24 days ago (2026-10-12). The latest release is v0.1.4.
- How does Tugra compare with other MCP servers?
- safety score 88/100 (higher than 75% of 48,243 servers); tools 4 (the typical server has 7); tools that change things 25% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.