Is Memory MCP server safe?

The component reads files from disk.

const current = await fs.readFile(lockPath, "utf-8").catch(() => null);

const data = await fs.readFile(this.memoryFilePath, "utf-8");

Why it matters: Usually legitimate, but worth confirming it can't be steered into reading sensitive files.

Fix: Confirm which files are read and that paths cannot be influenced by untrusted input to reach sensitive locations.

The component writes or deletes files on disk.

await fs.unlink(breakerPath).catch(ignoreError);

await fs.unlink(lockPath);

await fs.unlink(breakerPath).catch(ignoreError);

await fs.unlink(lockPath).catch(ignoreError);

await fs.unlink(lockPath).catch(ignoreError);

await fs.writeFile(tempFilePath, lines.join("\n") + "\n", mode === undefined ? undefined : { mode });

await fs.unlink(tempFilePath).catch(() => { });

Why it matters: Usually legitimate, but worth confirming the paths can't be controlled by untrusted input.

Fix: Confirm which files are written/deleted and that paths cannot be influenced by untrusted input.

package.json has a 'prepare' script (runs on git/local installs and before publishing).

"prepare": "npm run build",

Why it matters: Usually a build step, but confirm it doesn't fetch or run remote code.

Fix: Usually a legitimate build step; confirm it only builds and does not fetch or execute remote code.

An MCP tool surface (manifest or tool definitions) was found.

const server = new McpServer({

server.registerTool("create_entities", {

server.registerTool("create_relations", {

server.registerTool("add_observations", {

server.registerTool("delete_entities", {

server.registerTool("delete_observations", {

server.registerTool("delete_relations", {

server.registerTool("read_graph", {

server.registerTool("search_nodes", {

server.registerTool("open_nodes", {

Why it matters: Just context — review which tools it offers and their permissions.

Fix: Review the declared MCP tools and their permissions.