RemembrallBLOCK
Whole-codebase knowledge for AI coding agents. A field-aware code graph (functions, classes, methods, fields, references) plus persistent memory. Rust, Postgres + pgvector, MCP.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://crates.io/crates/remembrall-server) [](https://github.com/roboticforce/remembrallmcp/actions/workflows/ci.yml) [](https://hub.docker.com/r/cdnsteve/remembrallmcp)
Whole-codebase knowledge for AI coding agents. A field-aware code graph plus persistent memory, built on Rust, Postgres + pgvector, and exposed over MCP.
The problem: AI coding agents see a few pages out of the book each session. They grep, read, and re-derive how the codebase fits together from scratch - no map of what calls what, no way to know what breaks when something changes, and no memory of decisions made in past sessions.
The solution: RemembrallMCP gives the agent the whole codebase - a field-aware dependency graph (functions, classes, methods, fields, and the references between them) across 9 languages, plus persistent memory that survives between sessions.
1. Field-Aware Code Graph - A live map of your codebase built with tree-sitter. Functions, classes, methods, and data fields, plus call, import, defines, inherits, and field-reference relationships across 9 languages. Ask "what breaks if I change this?" - down to a single struct field - and get an answer in milliseconds, before the agent touches anything.
2. Persistent Memory - Decisions, patterns, and organizational knowledge that survive between sessions. Hybrid semantic + full-text search finds relevant context instantly.
remembrall_recall("authentication middleware patterns")
-> 3 relevant memories from past sessions
remembrall_index("/path/to/project", "myapp")
-> Builds dependency graph: 847 symbols, 1,203 relationships
remembrall_impact("AuthMiddleware", direction="upstream")
-> 12 file0ec0b20e1911OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add remembrallmcp --env DATABASE_URL=${DATABASE_URL} -- npx -y [email protected]Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (4 observation(s))
- Network
- declared (6 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- found
Findings (9)
"DATABASE_URL": "postgres://postgres:postgres@localhost:5450/remembrall"
DATABASE_URL: postgres://postgres:postgres@localhost:5450/remembrall
- Default local database URL: `postgres://postgres:postgres@localhost:5450/remembrall`.
- Run server over stdio: `DATABASE_URL="postgres://postgres:postgres@localhost:5450/remembrall" ./target/release/remembrall`
- Run validation spike: `DATABASE_URL="postgres://postgres:postgres@localhost:5450/remembrall" cargo run --bin spike3`
tar czf ../../../remembrall-${{ matrix.target }}.tar.gz remembrallcd ../../..
Gates applied: no_behavioural_pass, no_license.
0ec0b20e1911full audit observations/trust-audit/mcp-server/roboticforce__remembrall-1.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 0ec0b20e1911 | BLOCK | D | 69 | first audit |
Questions
What is the Remembrall MCP server?
Whole-codebase knowledge for AI coding agents. A field-aware code graph (functions, classes, methods, fields, references) plus persistent memory. Rust, Postgres + pgvector, MCP.
Is Remembrall safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does Remembrall need?
It reads DATABASE_URL from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Remembrall run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as remembrallmcp at 0.5.1.
How current is this page?
The grade is for one exact copy of the source (0ec0b20e1911), read on 2026-10-08. The repository is watched and re-audited when it changes.