Back to Home
PStryder icon

MemoryGate

Verified Safe

by PStryder

Overview

MemoryGate provides durable memory-as-a-service for AI agents, combining structured storage, semantic search, OAuth-based authentication, and lifecycle controls for retention and archiving.

Installation

Run Command
uvicorn app.main:asgi_app --host 0.0.0.0 --port 8080

Environment Variables

  • DATABASE_URL
  • OPENAI_API_KEY
  • PSTRYDER_DESKTOP
  • PSTRYDER_DESKTOP_SECRET
  • PSTRYDER_DESKTOP_REDIRECT_URIS
  • GOOGLE_CLIENT_ID
  • GOOGLE_CLIENT_SECRET
  • GITHUB_CLIENT_ID
  • GITHUB_CLIENT_SECRET
  • OAUTH_REDIRECT_BASE
  • FRONTEND_URL
  • REQUIRE_MCP_AUTH

Security Notes

The server implements strong authentication mechanisms including OAuth 2.0 + PKCE, API keys with bcrypt hashing, and an ASGI middleware to protect MCP endpoints, preventing unauthorized access and OpenAI API usage. Rate limiting and security headers are configured by default. However, a high-severity timing attack vulnerability exists in `oauth_discovery.py` for `OAUTH_CLIENT_SECRET` comparison (not using `secrets.compare_digest`), which could potentially aid in credential disclosure via side-channel attacks. Previous critical issues like in-memory OAuth state storage and API key prefix collisions appear to be resolved. No 'eval' or other obviously malicious patterns were found.

Similar Servers

Stats

Interest Score36
Security Score7
Cost ClassHigh
Avg Tokens300
Stars7
Forks1
Last Update2026-01-17

Tags

AI MemoryMCP ServerSemantic SearchOAuth 2.0Postgres