Back to Home
AerionDyseti icon

vector-memory-mcp

by AerionDyseti

Overview

A local-first semantic memory server for AI assistants to store and retrieve context through semantic search.

Installation

Run Command
bunx @aeriondyseti/vector-memory-mcp

Environment Variables

  • VECTOR_MEMORY_DB_PATH
  • VECTOR_MEMORY_MODEL

Security Notes

The `MemoryRepository` directly interpolates user-provided `id` strings into LanceDB `where` clauses (e.g., `id = '${id}'`). The MCP tool schemas define `id` as a generic `string`, without validation for UUID format or sanitization. This pattern is vulnerable to SQL-like injection attacks if a malicious MCP client provides a crafted `id` string (e.g., `' OR 1=1 --`) potentially leading to unauthorized data access, modification, or deletion within the local database. Additionally, `JSON.parse` is used on metadata retrieved from the database; while generally safe, it could pose a risk if malicious JSON is somehow stored.

Similar Servers

Stats

Interest Score33
Security Score3
Cost ClassLow
Stars2
Forks0
Last Update2025-12-02

Tags

MCPAI MemoryVector SearchLocal EmbeddingsRAG