AI & Memory MCP Server

Memdocs

Name: Memdocs
Author: Smart-AI-Memory

Git-native project memory for AI assistants with enterprise-grade audit compliance

Scan found nothing by Smart-AI-Memory1Apache-2.0PythonIntermediatestdio

Install

Claude Code

claude mcp add memdocs -- uvx memdocs

Cursor

{
  "mcpServers": {
    "memdocs": {
      "command": "uvx",
      "args": [
        "memdocs"
      ]
    }
  }
}

VS Code

{
  "mcp": {
    "servers": {
      "memdocs": {
        "command": "uvx",
        "args": [
          "memdocs"
        ]
      }
    }
  }
}

Windsurf

{
  "mcpServers": {
    "memdocs": {
      "command": "uvx",
      "args": [
        "memdocs"
      ]
    }
  }
}

Claude Desktop

{
  "mcpServers": {
    "memdocs": {
      "command": "uvx",
      "args": [
        "memdocs"
      ]
    }
  }
}

Safety Report

43% Scan found nothing

Scanned 5 months ago

3 passed 4 warnings

Security

Authentication

details

Weak auth signals: env_required

Warning

CORS Policy

details

stdio transport — CORS not applicable

N/A

Rate Limiting

details

Rate limiting detected: rate_limit_middleware, requests_per

Pass

Known CVEs

details

1 deps with known issues (medium)

Warning

Code Quality

Dependency Audit

details

1 deps with known issues (medium)

Warning

Dangerous Patterns

details

No dangerous code patterns detected

Pass

License

details

License: Apache-2.0

Pass

Community

Maintenance Status

details

Last commit 8 months ago

Warning

Learn about our security methodology →

Compatibility

Claude CodeFull support

Tested

CursorFull support

Tested

VS CodeFull support via Copilot

Tested

WindsurfFull support

Tested

Claude DesktopFull support

Tested

Frequently Asked Questions

What is Memdocs?

Git-native project memory for AI assistants with enterprise-grade audit compliance

Is Memdocs safe to use?

We cannot tell you that, and nobody scanning at this scale can. What we did in March 2026 was shallow-clone Memdocs and run five keyword searches over its source: auth identifiers, CORS configuration, rate-limit identifiers, the dependency manifest against a hardcoded list of 18 known-vulnerable packages, and unguarded eval/exec calls. None of them matched. A text search cannot follow a variable, judge intent, or tell you what a server does once it is running, so "nothing matched" is not "safe". What the scan does and does not cover is written out at /mcp/security.

What are alternatives to Memdocs?

Similar MCP servers include Context7, Cognee, Hindsight. Each serves a similar purpose but may differ in features, language, and compatibility.