Atlas / MCP servers / nhevers / MoltBrain

MoltBrainBLOCK

Name: MoltBrain
Author: nhevers

mcp/nhevers/moltbrain

MCP server by nhevers · ai · claude · claude code · Audited 2026-10-06

⚑ Report / re-scan Source ↗

Long-term memory layer for OpenClaw & MoltBook agents that learns and recalls your project context automatically.

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

7 6r · 1w · 0d

Transport

stdio

License

NOASSERTION

Stars

252

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Long-term memory layer for OpenClaw, MoltBook & Claude Code that learns and recalls your project context automatically.

Install • Features • How It Works • Storage • Virtuals • OpenClaw • Config • API

⚡ Quick Install

╔══════════════════════════════════════════════════════════════════════╗
║                                                                      ║
║   Step 1    /plugin marketplace add nhevers/moltbrain                ║
║   Step 2    /plugin install moltbrain                                ║
║                                                                      ║
╚══════════════════════════════════════════════════════════════════════╝

That's it. MoltBrain starts working automatically.

🧠 What It Does

╭──────────────────────────────────────────────────────────────────────────────╮
│                                                                              │
│     ┌─────────────────┐                      ┌─────────────────┐             │
│     │   SESSION #1    │                      │   SESSION #47   │             │
│     │─────────────────│                      │─────────────────│             │
│     │                 │                      │                 │             │
│     │  "Set up auth   │                      │  "Add password  │             │
│     │   with OAuth"   │                      │   reset flow"   │

Read from source at commit 232041f988d0OBSERVED · 2026-10-06

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add claude-recall-plugin --env GEMINI_API_KEY=${GEMINI_API_KEY} --env MOLTBRAIN_MOLTBOOK_API_KEY=${MOLTBRAIN_MOLTBOOK_API_KEY} --env OPENROUTER_API_KEY=${OPENROUTER_API_KEY} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "claude-recall-plugin": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "GEMINI_API_KEY": "${GEMINI_API_KEY}",
        "MOLTBRAIN_MOLTBOOK_API_KEY": "${MOLTBRAIN_MOLTBOOK_API_KEY}",
        "OPENROUTER_API_KEY": "${OPENROUTER_API_KEY}"
      }
    }
  }
}

Exposed tools (7)

6 read · 1 write · 0 destructive.

Tool	Risk	Description
`__IMPORTANT`	read	3-LAYER WORKFLOW (ALWAYS FOLLOW): 1. search(query) → Get index with IDs (~50-100 tokens/result) 2. timeline(anchor=ID) → Get context around interesting results 3. get_observations([IDs]) → Fetch full details ONLY for filtered IDs NEVER fetch full details without filtering first. 10x token savings.
`get_observations`	read	Step 3: Fetch full details for filtered IDs. Params: ids (array of observation IDs, required), orderBy, limit, project
`recall_context`	read	Retrieve relevant memories based on current context
`save_memory`	write	Manually save an important piece of information
`search`	read	Step 1: Search memory. Returns index with IDs. Params: query, limit, project, type, obs_type, dateStart, dateEnd, offset, orderBy
`search_memories`	read	Search through stored memories
`timeline`	read	Step 2: Get context around results. Params: anchor (observation ID) OR query (finds anchor automatically), depth_before, depth_after, project

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (10 observation(s))
Network: declared (10 observation(s))
Shell: declared (6 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (23)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

scripts/generate-changelog.js:30

const body = exec(`gh release view ${release.tagName} --json body --jq '.body'`).trim();

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

LOWInventory / provenance · inv.hidden_file · CWE-1104

.build-info

.build-info

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.translation-cache.json

.translation-cache.json

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInformation disclosure · disclose.log_secret · CWE-209, CWE-532

benchmarks/compression.bench.ts:285

console.log(`    Token reduction: ${codeTokens.ratio.toFixed(2)}x`);

LOWInformation disclosure · disclose.log_secret · CWE-209, CWE-532

benchmarks/compression.bench.ts:290

console.log(`    Token reduction: ${narrativeTokens.ratio.toFixed(2)}x`);

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/core/api/ErrorHandler.ts:8

import { logger } from '../../utils/logger.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/core/api/Server.ts:16

import { logger } from '../../utils/logger.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/core/builder/ContextConfigLoader.ts:9

import { SettingsDefaultsManager } from '../../common/SettingsDefaultsManager.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/core/builder/HistoryBuilder.ts:12

import { logger } from '../../utils/logger.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/core/builder/HistoryBuilder.ts:13

import { getProjectName } from '../../utils/project-name.js';