vector-memory-mcp

The server runs locally by default (127.0.0.1:3271) and does not rely on external APIs for embeddings, enhancing privacy. No 'eval' or obvious malicious patterns were found. Hardcoded credentials are absent. The primary security considerations involve potential manipulation of the `VECTOR_MEMORY_DB_PATH` or `VECTOR_MEMORY_URL` environment variables if an attacker already has local access to the execution environment, which could lead to arbitrary file writes or unintended network requests. CORS is enabled for local development, which should be considered if the server is configured to listen on public interfaces (not default). Dependencies are well-known, and native modules are explicitly handled.