Atlas / MCP servers / soul-brews-studio / Oracle

OracleBLOCK

Name: Oracle
Author: soul-brews-studio

mcp/soul-brews-studio/oracle-4

MCP server by soul-brews-studio · Audited 2026-10-08

⚑ Report / re-scan Source ↗

Oracle v2 - MCP Memory Layer with semantic search, philosophy, and knowledge management

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

82 68r · 13w · 1d

Transport

stdio · streamable-http

License

NOASSERTION

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/Soul-Brews-Studio/arra-oracle-v3/actions/workflows/ci.yml) [](./LICENSE) [](https://bun.sh) [](https://deploy.workers.cloudflare.com/?url=https://github.com/Soul-Brews-Studio/arra-oracle-v3) [](https://vercel.com/new/clone?repository-url=https%3A%2F%2Fgithub.com%2FSoul-Brews-Studio%2Farra-oracle-v3&env=ORACLE_URL&envDescription=Oracle%20HTTP%20API%20base%20URL%20for%20the%20Studio%20API%20proxy&envLink=https%3A%2F%2Fgithub.com%2FSoul-Brews-Studio%2Farra-oracle-v3%2Fblob%2Falpha%2Fdocs%2Fdeploy-vercel.md%23environment-variables&project-name=arra-oracle-studio&repository-name=arra-oracle-studio) — Vercel quickstart

Docker run → arra mine ~/notes → open the UI → search your memory.

Arra Oracle is the Oracle family's local memory and search layer. It stores your notes in SQLite, searches them with FTS/vector-capable APIs, and exposes the same memory through HTTP, MCP, the arra CLI, plugins, and the Studio UI.

Quick start: Docker is the primary path

You only need Docker, curl, and a notes folder. This path starts the HTTP server, mines ~/notes, opens the built-in UI, and performs the first search. No local Bun install, API key, schema choice, or vector service is required.

1. Run Arra Oracle

export ARRA_PORT="${ARRA_PORT:-47778}"
export ARRA_URL="http://127.0.0.1:${ARRA_PORT}"
export ARRA_CONTAINER="${ARRA_CONTAINER:-arra-oracle}"
export ARRA_VOLUME="${ARRA_VOLUME:-arra-oracle-data}"
export ARRA_NOTES_DIR="${ARRA_NOTES_DIR:-$HOME/notes}"

mkdir -p "$ARRA_NOTES_DIR"
docker volume create "$ARRA_VOLUME" >/dev/null

Read from source at commit 239588dc1199OBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add arra-oracle-studio-worker --env ARRA_API_KEY=${ARRA_API_KEY} --env ARRA_API_TOKEN=${ARRA_API_TOKEN} --env CF_API_TOKEN=${CF_API_TOKEN} --env CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN} -- npx -y @soul-brews/arra-oracle-studio-worker

claude-desktop

{
  "mcpServers": {
    "arra-oracle-studio-worker": {
      "command": "npx",
      "args": [
        "-y",
        "@soul-brews/arra-oracle-studio-worker"
      ],
      "env": {
        "ARRA_API_KEY": "${ARRA_API_KEY}",
        "ARRA_API_TOKEN": "${ARRA_API_TOKEN}",
        "CF_API_TOKEN": "${CF_API_TOKEN}",
        "CLOUDFLARE_API_TOKEN": "${CLOUDFLARE_API_TOKEN}"
      }
    }
  }
}

Exposed tools (82)

68 read · 13 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`Bad`	read	x
`Cyberpunk`	read	Electric yellow and magenta on black high-contrast glass
`Monochrome`	read	Pure black, white, and gray for minimal editorial focus
`Sakura`	read	Soft cherry-blossom pink with grounded plum surfaces
`Tropical`	read	Bright island greens with coral paradise accents
`a`	read
`arra`	read	ARRA Oracle HTTP helper — 1:1 maw CLI surface for ARRA MCP tools.
`b`	read
`c`	read
`demo`	read	legacy
`echo`	read	Echo input
`echo.say`	read	Echo input
`echo.tool`	read	Echo helper
`echo_tool`	read	Echo
`export`	read	Export ARRA app collections through the local Oracle API.
`hermes_ping`	read	Ping Hermes
`live_watch_tool`	read	Live watch tool
`memory.write`	write	Store a memory
`muninn_search`	read	Search memory.
`ok_tool`	read	x
`oracle_alpha_runtime`	read	Alpha runtime tool
`oracle_ask`	read	Ask Oracle for a grounded answer over memory/search. Returns answer, citations, citationIndexes, warnings, noEvidence, search metadata, and sources.
`oracle_bad_schema`	read	bad schema
`oracle_beta_disabled`	read	Disabled beta tool
`oracle_beta_runtime`	read	Beta runtime tool
`oracle_canvas_inspect`	read	Inspect the canvas plugin.
`oracle_concepts`	read	List all concept tags in the Oracle knowledge base with document counts. Useful for discovering what topics are covered and filtering searches.
`oracle_config_context`	read	tool
`oracle_demo`	read	Demo
`oracle_handoff`	write	Write session context to the Oracle inbox for future sessions to pick up. Creates a timestamped markdown file in ψ/inbox/handoff/. Use at end of sessions to preserve context.
`oracle_inbox`	read	List and preview pending handoff files from the Oracle inbox. Returns files sorted newest-first with previews.
`oracle_learn`	write	Add a new pattern or learning to the Oracle knowledge base. Creates a markdown file in ψ/memory/learnings/ and indexes it.
`oracle_list`	read	List all documents in Oracle knowledge base. Browse without searching - useful for exploring what knowledge exists. Supports pagination and type filtering.
`oracle_mcp_call`	read	MCP-IN: call one tool exposed by an external stdio MCP server.
`oracle_mcp_list_tools`	write	MCP-IN: start an external stdio MCP server and list its advertised tools.
`oracle_mcp_pack`	read	tool
`oracle_missing_plugin`	read	missing plugin
`oracle_profile`	read	List or read code-backed Oracle profiles such as Thor Oracle / Stormforge.
`oracle_read`	read	Read full content of an Oracle document by file path or document ID. Use after oracle_search to retrieve complete file contents. Resolves vault paths, ghq paths, and symlinks server-side.
`oracle_recap`	write	Emit a compact session-start Oracle wake-up context: identity plus top memories by heat/confidence grouped by project.
`oracle_reflect`	read	Get a random principle or learning for reflection. Use this for periodic wisdom or to align with Oracle philosophy.
`oracle_research_note`	read	Store a Thor Stormforge research/dev artifact as searchable learning memory.
`oracle_runtime_after_reload`	read	after
`oracle_runtime_tool`	read	runtime tool
`oracle_schedule_add`	write	Add an appointment or event to the shared schedule. The schedule is per-human (not per-project) and shared across all Oracles.
`oracle_schedule_list`	write	List appointments from the shared schedule. Filter by date, range, or keyword. Defaults to today + 14 days.
`oracle_search`	read	Search Oracle knowledge base using hybrid search (FTS5 keywords + LanceDB vectors). Finds relevant principles, patterns, learnings, or retrospectives. Falls back to FTS5-only if the vector index is unavailable.
`oracle_search_chain`	write	Run iterative vector search over linked results, expanding from the best hit on each hop.
`oracle_session_get`	write	Read the conversation of one session in order, by session id. Returns human/assistant/
`oracle_session_list`	read	List recorded sessions from the jsonl-lens corpus, newest first, with turn counts. Use to
`oracle_session_search`	read	Search what was actually said across all recorded sessions. Answers
`oracle_session_summarize`	write	Write a summary of a session back to the Oracle, so a human can read it in the web UI and
`oracle_stats`	read	Get Oracle knowledge base statistics and health status. Returns document counts by type, indexing status, and vector (LanceDB) connection status.
`oracle_supersede`	read	Mark an old learning/document as superseded by a newer one. Aligns with
`oracle_surface`	read	tool
`oracle_surface_disabled`	read	off
`oracle_surface_http`	read	tool
`oracle_surface_pack`	read	tool
`oracle_switch_off`	read	off
`oracle_switch_on`	read	on
`oracle_thread`	write	Send a message to an Oracle discussion thread. Creates a new thread or continues an existing one. Oracle auto-responds from knowledge base. Use for multi-turn consultations.
`oracle_thread_read`	read	Read full message history from a thread. Use to review context before continuing a conversation.
`oracle_thread_update`	write	Update thread status. Use to close, reopen, or mark threads as answered/pending.
`oracle_threads`	read	List Oracle discussion threads. Filter by status to find pending questions or active discussions.
`oracle_toggle_runtime`	read	Toggle runtime tool
`oracle_trace`	read	Log a trace session with dig points (files, commits, issues found). Use to capture /trace command results for future exploration.
`oracle_trace_chain`	read	Get the full linked chain for a trace. Returns all traces in the chain and the position of the requested trace.
`oracle_trace_distill`	read	Distill a trace into a Thor/Stormforge awakening and optionally promote it to learning memory.
`oracle_trace_get`	read	Get full details of a specific trace including all dig points (files, commits, issues).
`oracle_trace_link`	read	Link two traces as a chain (prev \u2192 next). Creates bidirectional navigation without deleting anything. Use when agents create related traces that should be connected.
`oracle_trace_list`	read	List recent traces with optional filters. Returns trace summaries for browsing.
`oracle_trace_unlink`	destructive	Remove a link between traces. Breaks the chain connection in the specified direction.
`oracle_valid_plugin`	read	Valid plugin tool.
`oracle_verify`	read	Verify knowledge base integrity: compare ψ/ files on disk vs DB index. Detects missing (on disk, not indexed), orphaned (in DB, file gone), and drifted (file changed since last index) documents.
`plugin_sync`	write	Sync plugin surfaces.
`registry_tool`	read	tool
`smoke-orbit`	read	Smoke fixture plugin
`smoke_loader_tool`	read	smoke tool
`surface_tool`	read	Surface tool
`switch_off`	read	off
`switch_on`	read	on
`tenant_probe`	read	probe

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (9 observation(s))
Network: declared (11 observation(s))
Shell: declared (3 observation(s))
Dependencies: not all pinned
Secrets in source: found

Findings (25)

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

catalog/arra-oracle.yaml:4

#   1. Copy this file to ~/.docker/mcp/catalogs/arra-oracle.yaml

Why it matters. touches a credential store

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

catalog/arra-oracle.yaml:5

#   2. Add `arra-oracle: { ref: "" }` under `registry:` in ~/.docker/mcp/registry.yaml

Why it matters. touches a credential store

MEDIUMInventory / provenance · inv.binary · CWE-1104

frontend/src-tauri/icons/icon.icns

icon.icns

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319

frontend/src/components/PnaGuide.tsx:4

<div className="pna-beacon pointer-events-none fixed left-[165px] top-[52px] z-50 grid -translate-x-1/2 justify-items-center gap-2" aria-hidden="true">

MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319

frontend/src/components/PnaGuide.tsx:15

<div className="pna-beacon fixed left-[147px] top-[10px] z-50 w-[330px] max-w-[calc(100vw-2rem)]">

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

Dockerfile:74

CMD bun -e "const r=await fetch('http://127.0.0.1:47778/api/health');process.exit(r.ok?0:1)"

MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321

tests/workers/federation-proxy.test.ts:5

const token = '0123456789abcdef0123456789abcdef';

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

oracle_trace_unlink

Why it matters. 1 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWInventory / provenance · inv.hidden_file · CWE-1104

.env.production.example

.env.production.example

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.maw-engine

.maw-engine

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.suspicious_name · CWE-1104

tests/mcp/http-proxy-rethrows-payload-errors.test.ts

http-proxy-rethrows-payload-errors.test.ts

Why it matters. member named after an attack tool

Fix. remove or justify

LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

tests/indexer/reindex-hardening.test.ts:29

exec(h.dbPath, "UPDATE indexing_jobs SET status = 'done'");

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table