byterover-cliBLOCK
ByteRover CLI (brv) - The portable memory layer for autonomous coding agents (formerly Cipher)
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Interactive REPL CLI for AI-powered context memory
Overview
ByteRover CLI (brv) gives AI coding agents persistent, structured memory. It lets developers curate project knowledge into a context tree, sync it to the cloud, and share it across tools and teammates.
Run brv in any project directory to start an interactive REPL powered by your choice of LLM. The agent understands your codebase through an agentic map, can read and write files, execute code, and store knowledge for future sessions.
📄 Read the paper for the full technical details.
Or download our self-hosted PDF version of the paper here.
Key Features:
- 🌐 Web dashboard for curating and querying context (
brv webui) - 🖥️ Interactive TUI with REPL interface (React/Ink)
- 🧠 Context tree and knowledge storage management
- 🔀 Git-like version control for the context tree (branch, commit, merge, push/pull)
- 🤖 20 LLM providers (Anthropic, OpenAI, Google, Groq, Mistral, xAI, DeepSeek, and more)
- 🛠️ 24 built-in agent tools (code exec, file ops, knowledge search, memory management)
- 🔄 Cloud sync with push/pul
e1090ca7ceaaOBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add byterover-cli -- npx -y [email protected]
{
"mcpServers": {
"byterover-cli": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (2)
2 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
brv-curate | read | |
brv-query | read |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (10 observation(s))
- Network
- declared (15 observation(s))
- Shell
- declared (6 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (21)
parsed = yaml.load(yamlBlock, {schema: FRONTMATTER_SCHEMA})const socket = io(`http://127.0.0.1:${config.daemonPort}`, {target: 'http://127.0.0.1',
target: 'http://127.0.0.1',
if (status.running) return `http://127.0.0.1:${status.port}`return 'http://127.0.0.1:0'
.gitmodules
.mocharc.json
.prettierrc.json
return createHash('md5').update(data).digest('hex').slice(0, 16)return createHash('sha1').update(projectPath).digest('hex').slice(0, 16)group: ['**/server/**', '../server/**', '../../server/**', '../../../server/**', '../../../../server/**'],
group: ['**/agent/**', '../agent/**', '../../agent/**', '../../../agent/**', '../../../../agent/**'],
group: ['**/oclif/**', '../oclif/**', '../../oclif/**', '../../../oclif/**', '../../../../oclif/**'],
group: ['**/tui/**', '../tui/**', '../../tui/**', '../../../tui/**', '../../../../tui/**'],
group: ['**/server/**', '../server/**', '../../server/**', '../../../server/**', '../../../../server/**'],
const binary = atob(padded)
@ai-sdk/anthropic, @ai-sdk/cerebras, @ai-sdk/cohere, @ai-sdk/deepinfra, @ai-sdk/google, @ai-sdk/groq, @ai-sdk/mistral, @ai-sdk/openai
- **Intel Mac (darwin-x64) install support** — `curl -fsSL https://byterover.dev/install.sh | sh` now installs on Intel Macs. Previously the installer rejected `darwin-x64` with an Apple-Silicon-only
- **Native binary installer** - Install on macOS and Linux without Node.js via `curl -fsSL https://byterover.dev/install.sh | sh`. Uninstaller script also available.
curl -fsSL https://byterover.dev/install.sh | sh
Gates applied: no_behavioural_pass.
e1090ca7ceaafull audit observations/trust-audit/mcp-server/campfirein__byterover-cli.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | e1090ca7ceaa | BLOCK | D | 69 | first audit |
Questions
What is the byterover-cli MCP server?
ByteRover CLI (brv) - The portable memory layer for autonomous coding agents (formerly Cipher)
What tools does byterover-cli expose?
2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is byterover-cli safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does byterover-cli need?
No credential environment variables were found in its source, so it appears to need none.
How does byterover-cli run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as byterover-cli at 3.16.1.
How current is this page?
The grade is for one exact copy of the source (e1090ca7ceaa), read on 2026-10-12. The repository is watched and re-audited when it changes.