Back to Home
Jind0la icon

KnowWhere-MCP-Server

by Jind0la

Overview

Provides a persistent, intelligent memory layer for AI agents, enabling them to store, recall, consolidate, and analyze user-specific preferences, facts, and learnings across different sessions and projects.

Installation

Run Command
docker run -d --name knowwhere -p 8000:8000 -e DATABASE_URL="postgresql://..." -e OPENAI_API_KEY="sk-..." -e ANTHROPIC_API_KEY="sk-ant-..." -e MCP_TRANSPORT="sse" knowwhere-mcp:latest

Environment Variables

  • DATABASE_URL
  • REDIS_URL
  • OPENAI_API_KEY
  • ANTHROPIC_API_KEY
  • LLM_PROVIDER
  • SUPABASE_URL
  • SUPABASE_KEY
  • SUPABASE_JWT_SECRET
  • JWT_SECRET_KEY
  • KNOWWHERE_API_KEY
  • MCP_TRANSPORT

Security Notes

Critical vulnerabilities if not configured correctly: JWT tokens are decoded without verification if `SUPABASE_JWT_SECRET` is unset (even outside debug mode, in `src/api/dependencies.py`), allowing potential authentication bypass. Additionally, the internal JWT handler (used for the server's own JWTs) has a hardcoded fallback secret (`fallback-secret-key-change-in-production` in `src/auth/jwt.py`) if `JWT_SECRET_KEY` is not set, posing a significant risk if deployed without proper configuration. These issues make the server highly vulnerable to unauthorized access if environment variables are not securely managed.

Similar Servers

Stats

Interest Score0
Security Score4
Cost ClassHigh
Avg Tokens5000
Stars0
Forks0
Last Update2026-01-19

Tags

AI AgentsMemoryKnowledge GraphVector DatabaseMCP