memostem-pluginsSAFE
Private, review-first AI knowledge for ChatGPT, Claude, Codex, and MCP.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Your reviewed knowledge, across AI conversations.
Let a connected AI reuse your private, confirmed knowledge or notice knowledge worth keeping as the conversation unfolds. New material becomes a private draft only after you confirm—without uploading the whole conversation or publishing anything automatically.
Use MemoStem · Connection guide · Privacy · Terms · Support · Security
This public repository is the official distribution source for MemoStem's chat-host skills, plugin packages, and hosted remote MCP connection metadata. ChatGPT, Claude, Kimi, Gemini and Grok are the primary channels; Codex and Claude Code are compatible secondary channels. The MemoStem application and server implementation remain private. Distributable manifests, skills, examples, and documentation have no mirrored authoring copy in that private repository.
Save here, reuse in another AI conversation
Select an explanation in ChatGPT and keep it in a private guest shelf. Connect your account to move it into private pending review, then review and approve it in MemoStem. Then ask Claude or another connected host to find that knowledge. Sign in to the same MemoStem account in each host; no host gets access to another host's conversation history.
Why MemoStem
- Get a timely suggestion. In supported plugin clien
f1c43a4ff75bOBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add memostem-plugins -- npx -y [email protected]
{
"mcpServers": {
"memostem-plugins": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Trust audit
SAFEgrade B · trust 88/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (5 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (6)
streamable-http
.app.json
docs/demos/memostem-0.6.2-guest-demo.mp4
files, access tokens, API keys, private URLs, user data, logs, screenshots with
Gates applied: no_behavioural_pass, no_license.
f1c43a4ff75bfull audit observations/trust-audit/mcp-server/girapphe__memostem-plugins.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | f1c43a4ff75b | SAFE | B | 88 | first audit |
Questions
What is the memostem-plugins MCP server?
Private, review-first AI knowledge for ChatGPT, Claude, Codex, and MCP.
Is memostem-plugins safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (88/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does memostem-plugins need?
No credential environment variables were found in its source, so it appears to need none.
How does memostem-plugins run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as memostem-plugins at 0.6.2.
How current is this page?
The grade is for one exact copy of the source (f1c43a4ff75b), read on 2026-10-12. The repository is watched and re-audited when it changes.