whitemagicBLOCK
Local-first, governed memory and session continuity for AI coding agents, over MCP - verifiable handoffs via signed continuity receipts. Rust, MIT, no telemetry by default.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://dmv.agentcommunity.org/c/UNIT-FA2-46DL/whitemagic)
A local-first memory layer for MCP agents.
WhiteMagic gives an AI agent durable project memory over MCP: record important context, find it after restart, and carry useful decisions into the next session — without sending your memory store to any hosted service.
You are an agent reading this repo? Start with skill.md (five-minute operational onboarding) and llms.txt (machine-readable index).
{
"mcpServers": {
"whitemagic": {
"command": "wm",
"args": ["serve", "--profile", "cyberbrain"]
}
}
}Hosted services (separate from the local package)
- Remote MCP —
https://mcp.whitemagic.dev/mcp(streamable-http):
read-only recall over a curated public corpus; keyless discovery; evaluation keys with a published 50 recalls/day allowance; OAuth 2.1; x402 session lease options published as $0.01 for 5 minutes or $0.50 for 24 hours, with a published 10,000 RPM limit; and memory.search_batch for up to 10 queries in one MCP call. These limits and options are described by the live server card; the batch tool is also present in the live tools/list response. Your local store is not uploaded to this read-only recall lane.
- Receipt verification and agent trust API —
https://api.whitemagic.dev:
stateless POST /verify for continuity-receipt bundles (/health and /info keyless), plus a published /erc8004/validate adapter targeting Base. See the API's live service metadata and endpoint documentation for the advertised contract.
- Memory Crystal client and API —
scripts/crystal_client.py
seals and opens crystal envelopes locally with AES-256-GCM or ChaCha20-
88393e9fdeffOBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add whitemagic-mcp -- npx -y [email protected]
claude mcp add whitemagic:10.3.0 -- docker run -i --rm docker.io/lbailey94/whitemagic:10.3.0:None
Trust audit
BLOCKgrade F · trust 44/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (11 observation(s))
- Network
- declared (10 observation(s))
- Shell
- declared (3 observation(s))
- Dependencies
- pinned
- Secrets in source
- found
Findings (25)
if text.contains("-----BEGIN PRIVATE KEY-----")|| text.contains("-----BEGIN RSA PRIVATE KEY-----")|| text.contains("-----BEGIN EC PRIVATE KEY-----")|| text.contains("-----BEGIN OPENSSH PRIVATE KEY-----")content: "-----BEGIN RSA PRIVATE KEY-----\nMIIEowIBAAKCAQEA...".to_string(),
println!(" JEV Pre-Triage: 26.70 ns / eval (37.5M evals/sec)");" ✓ Precondition Contract: {:.2} ns/eval (Store, Landlock, Mesh)","~/.ssh",
"~/.gnupg",
"~/.ssh" => {Self::path_prefix_match("~/.ssh", s)"~/.gnupg" => {id_rsa ... curl
sutra_vectors.bin
sutra_vectors.bin
seed_min_frame
let id = store.system("mesh beacon accepted", "sangha-transport");assert_ne!(mesh_a, hkdf32(root, "wm/beacon/v1"));
let parent_all = mk_manifest(ScopeMode::All, &[], &["secret:exfil"]);
.attenuate(&mk_manifest(ScopeMode::Include, &["secret:exfil"], &[]))
.attenuate(&mk_manifest(ScopeMode::All, &[], &["secret:exfil"]))
"endpoint": "http://127.0.0.1:8787",
endpoint: "http://127.0.0.1:11434/v1".into(),
.gitleaks.toml
.SRCINFO
Gates applied: critical_finding, no_behavioural_pass.
88393e9fdefffull audit observations/trust-audit/mcp-server/lbailey94__whitemagic.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 88393e9fdeff | BLOCK | F | 44 | first audit |
Questions
What is the whitemagic MCP server?
Local-first, governed memory and session continuity for AI coding agents, over MCP - verifiable handoffs via signed continuity receipts. Rust, MIT, no telemetry by default.
Is whitemagic safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (44/100) and found 13 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does whitemagic need?
It reads GITHUB_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does whitemagic run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as whitemagic-mcp at 10.3.0.
How current is this page?
The grade is for one exact copy of the source (88393e9fdeff), read on 2026-10-12. The repository is watched and re-audited when it changes.