Back to search
? Not scanned yet

io.github.Vortx-AI/emem

Author Vortx-AI
Transport streamable_http
Scanned 48d ago

Content-addressed, ed25519-signed memory of every place on Earth. Apache-2.0, no keys for reads.

MCP Registry

Versions

0.0.6
first seen May 19, 2026

Tools 0

No tools indexed yet.

Permissions 4

network Server uses network capabilities via: fetch(), http, httpx, requests, urllib
medium
filesystem Server uses filesystem capabilities via: fs, fs sync ops, glob, open(), os, pathlib, shutil, tempfile
low
shell Server uses shell capabilities via: child_process, spawn(), subprocess
high
env_vars Server uses env_vars capabilities via: os.environ, os.getenv(), process.env
low

Scan Findings 88

medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: torch@2.11.0+cu128 (GHSA-rrmf-rvhw-rf47) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (GHSA-3wxx-q3gv-pvvv) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (GHSA-488g-hw5f-x29p) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (GHSA-7753-xrfw-ch36) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (GHSA-cr7q-2w66-hjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (GHSA-fxc2-8m62-m85x) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (GHSA-j3wr-m6xh-64hg) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (GHSA-r6gp-rff2-p3hf) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (GHSA-wvpx-g427-q9wc) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (PYSEC-2026-1559) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (PYSEC-2026-1560) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (PYSEC-2026-1561) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (PYSEC-2026-1562) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (PYSEC-2026-1563) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (PYSEC-2026-395) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (PYSEC-2026-396) dependency_analyzer · 95%
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15 (PYSEC-2026-397) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27,<1.0 (GHSA-h8pj-cxx2-jfg2) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27,<1.0 (PYSEC-2022-183) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (GHSA-2g6r-c272-w58r) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (GHSA-6qv9-48xg-fc7f) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (GHSA-926x-3r5x-gfhw) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (GHSA-c67j-w6g6-q2cm) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (GHSA-h59x-p739-982c) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (GHSA-pjwx-r37v-7724) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (GHSA-q84m-rmw3-4382) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (GHSA-qh6h-p6c9-ff54) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (PYSEC-2024-45) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (PYSEC-2026-1518) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (PYSEC-2026-1519) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (PYSEC-2026-2193) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (PYSEC-2026-2562) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (PYSEC-2026-2563) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (PYSEC-2026-2564) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<1.0 (PYSEC-2026-373) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (GHSA-3ww4-gg4f-jr7f) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (GHSA-9v9h-cgj8-h64p) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (GHSA-hggm-jpg3-v476) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (GHSA-m959-cc7f-wv43) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (GHSA-q3cj-2r34-2cwc) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (GHSA-r6ph-v2qm-q3c2) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (PYSEC-2017-8) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (PYSEC-2021-62) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (PYSEC-2026-1283) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (PYSEC-2026-1285) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (PYSEC-2026-2141) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (PYSEC-2026-35) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (PYSEC-2026-3553) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41,<51 (PYSEC-2026-3554) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/web/emem-verify-core.js:25 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/web/emem-verify-core.js:334 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/web/emem-verify-core.js:336 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/web/emem-verify-core.js:338 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/web/emem-verify-core.js:340 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/web/emem-verify-core.js:342 entropy_analyzer · 70%
medium
High-entropy string (5.86 bits/char) in Vortx-AI-emem-b522d97/scripts/witness_peers.py:131 entropy_analyzer · 52%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/sdks/emem-langmem/tests/test_signing.py:39 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/sdks/emem-langmem/tests/test_signing.py:42 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/sdks/emem-langmem/tests/test_signing.py:45 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/sdks/emem-langmem/tests/test_signing.py:46 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/sdks/emem-py/tests/test_verify_offline.py:62 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/sdks/emem-py/src/ememdev/verify.py:326 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/sdks/emem-py/src/ememdev/verify.py:327 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/sdks/emem-py/src/ememdev/verify.py:328 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Vortx-AI-emem-b522d97/sdks/emem-py/src/ememdev/verify.py:329 entropy_analyzer · 70%
medium
Buffer.from base64 in Vortx-AI-emem-b522d97/examples/3d-worlds/capture.mjs:216 entropy_analyzer · 75%
medium
Buffer.from base64 in Vortx-AI-emem-b522d97/examples/3d-worlds/capture.mjs:223 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (70) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 17 components sbom_generator · 100%
critical
AWS Access Key ID found in Vortx-AI-emem-b522d97/scripts/scanner_surface.py secret_scanner · 95%
high
Hardcoded Password found in Vortx-AI-emem-b522d97/scripts/scanner_surface.py secret_scanner · 65%
critical
AWS Access Key ID found in Vortx-AI-emem-b522d97/crates/emem-guard/src/module.rs secret_scanner · 95%
critical
AWS Access Key ID found in Vortx-AI-emem-b522d97/crates/emem-guard/src/server.rs secret_scanner · 95%
critical
AWS Access Key ID found in Vortx-AI-emem-b522d97/crates/emem-guard/src/modules.rs secret_scanner · 95%
critical
GitHub Personal Access Token found in Vortx-AI-emem-b522d97/crates/emem-guard/src/modules.rs secret_scanner · 95%
critical
RSA Private Key found in Vortx-AI-emem-b522d97/crates/emem-guard/src/modules.rs secret_scanner · 95%
critical
EC Private Key found in Vortx-AI-emem-b522d97/crates/emem-guard/src/modules.rs secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%