Atlas / MCP servers / aiurda / Cursor10x

Cursor10xBLOCK

mcp/aiurda/cursor10x-1

The Cursor10x MCP is a persistent multi-dimensional memory system for Cursor that enhances AI assistants with conversation context, project history, and code relationships across sessions.

Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
18 17r · 1w · 0d
Transport
stdio
License
MIT
Stars
78
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Cursor10x has evolved into DevContext - A more powerful, dedicated context system for developers

🧠 Project-Centric 📊 Relationship Graphs ⚡ High Performance

One database per project Intelligent code connections Minimal resource needs

🔥 DevContext takes AI development to the next level 🔥

🔄 Continuous Context Awareness - Sophisticated retrieval methods focusing on what matters 📊 Structured Metadata - From repository structure down to individual functions 🧠 Adaptive Learning - Continuously learns from and adapts to your development patterns 🤖 Completely Autonomous - Self-managing context system that works in the background 📚 External Documentation - Automatically retrieves and integrates relevant documentation 📋 Workflow Integration - Seamless task management workflow built-in

👀 Be on the lookout 👀

The DevContext Project Generator is launching in the next couple days and will create a COMPLETE set up for your project to literally 10x your development workflow.

Visit DevContext Repository

DevContext is a cutting-edge Model Context Protocol (MCP) server providing developers with continuous, project-centric context awareness that understands your codebase at a deeper level.

#

Read from source at commit d1957c559c35OBSERVED · 2026-10-07
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add cursor10x-mcp --env TURSO_AUTH_TOKEN=${TURSO_AUTH_TOKEN} -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "cursor10x-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "TURSO_AUTH_TOKEN": "${TURSO_AUTH_TOKEN}"
      }
    }
  }
}
03

Exposed tools (18)

17 read · 1 write · 0 destructive.

ToolRiskDescription
checkHealthreadChecks the health of the memory system and its database
diagnoseVectorswriteRun diagnostics on the vector storage system to identify issues
endConversationreadEnds a conversation by storing the assistant message, recording a milestone, and logging an episode in one operation
generateBannerreadGenerates a banner containing memory system statistics and status
getActiveFilesreadRetrieves active files from the short-term memory
getComprehensiveContextreadRetrieves comprehensive context from all memory systems
getMemoryStatsreadRetrieves statistics about the memory system
getRecentEpisodesreadRetrieves recent episodes from the episodic memory
getRecentMessagesreadRetrieves recent messages from the short-term memory
initConversationreadInitializes a conversation by storing the user message, generating a banner, and retrieving context in one operation
manageVectorreadUnified tool for managing vector embeddings with operations for store, search, update, and delete
recordEpisodereadRecords an episode (action) in the episodic memory
storeAssistantMessagereadStores an assistant message in the short-term memory
storeDecisionreadStores a project decision in the long-term memory
storeMilestonereadStores a project milestone in the long-term memory
storeRequirementreadStores a project requirement in the long-term memory
storeUserMessagereadStores a user message in the short-term memory
trackActiveFilereadTracks an active file being accessed by the user
04

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryFAIL
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)WARN
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
not all pinned
Secrets in source
found

Findings (6)

HIGHHard-coded secrets · inv.env_committed · CWE-798, CWE-321
.env
.env
Why it matters. a real .env in the package
Fix. ship .env.example with placeholders only
MEDIUMInventory / provenance · inv.binary · CWE-1104
cursor10x-mcp-1.0.0.tgz
cursor10x-mcp-1.0.0.tgz
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMPrompt injection · prompt.hidden_style · CWE-94, CWE-1427
README.md:36
<a href="https://github.com/aurda012/devcontext" style="display: inline-block; background-color: rgba(40, 230, 210); color: white; padding: 12px 24px; text-decoration: none; border-radius: 8px; font-w
LOWInventory / provenance · inv.hidden_file · CWE-1104
.env
.env
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@libsql/client, @modelcontextprotocol/sdk, better-sqlite3, dotenv, nodemon
Why it matters. 5 dependency range(s) float
Fix. pin exact versions or ship a lockfile
INFOSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
README.md:132
curl -sSfL https://get.turso.tech/install.sh | bash

Gates applied: no_behavioural_pass.

Audited 2026-10-07 · audit v0.4.1 · source sha d1957c559c35full audit observations/trust-audit/mcp-server/aiurda__cursor10x-1.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-07d1957c559c35BLOCKD69first audit
06

Questions

What is the Cursor10x MCP server?

The Cursor10x MCP is a persistent multi-dimensional memory system for Cursor that enhances AI assistants with conversation context, project history, and code relationships across sessions.

What tools does Cursor10x expose?

18 in total: 17 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Cursor10x safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.

What credentials does Cursor10x need?

It reads TURSO_AUTH_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does Cursor10x run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as cursor10x-mcp at 1.4.1.

How current is this page?

The grade is for one exact copy of the source (d1957c559c35), read on 2026-10-07. The repository is watched and re-audited when it changes.

Advertisement