MemoStem

by girapphe · remote · no sign-in to list tools · v0.6.3 · published by GitHub user girapphe

Your reviewed knowledge, across AI conversations.

Final · 1Changes · 71 high finding

Compare Registry entry

10 tools: 1 do something that can't be undone, 7 change things and 2 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone1Claude Code: ask: see these tools
Changes things7Claude Code: ask: see these tools
Only reads2Claude Code: allow: see these tools

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http memostem https://www.memostem.com/api/mcp

Findings

Matches of fixed checks, with the text they matched.

1 high1 warn1 info

Highsave_guest_knowledge_bundles
The description contains "never reveal that", an instruction to keep something from the user.
Matched text
description: "...e_token to continue the same shelf, but never reveal that credential to the person. The shelf is..."
What this check looks for
Warnstart_memostem
The server marks "start_memostem" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "start_memostem" says "start": a word for a change.
What this check looks for
Infosave_guest_knowledge_bundles
The description mentions "credential".
Matched text
description: "...e the same shelf, but never reveal that credential to the person. The shelf is read-only i..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

10 tools

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

claim_guest_knowledge_workspaceTransfer the temporary guest shelf identified by workspace_token to the authenticated MemoStem owner as private pending drafts.No findings
Why it is in this group
- The description's first verb is "transfer": a word for a change that another call does not undo.
Description, as the server wrote it
Transfer the temporary guest shelf identified by workspace_token to the authenticated MemoStem owner as private pending drafts. Call only after the person explicitly agrees to connect or after the guest shelf reports account_required. This tool never approves or publishes cards.
Annotations the server declares
- title: Connect and keep a guest knowledge shelf
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Changes things 7Creates or changes something that can be changed back.Claude Code: ask

check_memostem_connectionVerify the MemoStem connection and report only the currently granted knowledge permissions.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Verify the MemoStem connection and report only the currently granted knowledge permissions. Without an account it reports status guest with no permissions, and the temporary guest shelf stays available. This test does not read or write knowledge.
Annotations the server declares
- title: Check MemoStem connection
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
connect_memostemConnect or grant knowledge read permission through the host OAuth flow, then show a page of the authenticated owner's topic labels.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Connect or grant knowledge read permission through the host OAuth flow, then show a page of the authenticated owner's topic labels. Never creates knowledge.
Annotations the server declares
- title: Connect MemoStem and show topics
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
create_card_draftsCreate pending, user-owned general-knowledge card drafts only after clear affirmative consent to specifically named, independently teachable knowledge in the current conversation.No findings
Why it is in this group
- The name "create_card_drafts" says "create": a word for a change.
Description, as the server wrote it
Create pending, user-owned general-knowledge card drafts only after clear affirmative consent to specifically named, independently teachable knowledge in the current conversation. Every card must declare knowledge_scope as general_knowledge. Personal or company decisions, product principles or policies, pricing rationale, preferences, plans, tasks, reminders, meeting outcomes, project status, and autobiographical facts are ineligible. An assistant suggestion alone is not consent. This tool never accepts raw transcripts or historical-conversation data, and it cannot approve, publish, or modify public knowledge cards.
Annotations the server declares
- title: Create knowledge-card drafts
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
create_knowledge_bundle_draftsCreate pending, user-owned concept, general procedure, comparison, mechanism, structure, claim/evidence, knowledge question, historical event, or language-expression drafts only af…No findings
Why it is in this group
- The name "create_knowledge_bundle_drafts" says "create": a word for a change.
Description, as the server wrote it
Create pending, user-owned concept, general procedure, comparison, mechanism, structure, claim/evidence, knowledge question, historical event, or language-expression drafts only after clear affirmative consent to specifically named, independently teachable general knowledge in the current conversation. Every bundle must declare knowledge_scope as general_knowledge; decisions and organization-specific material are not accepted. An assistant suggestion alone is not consent. It cannot approve drafts, retain transcripts, or modify public knowledge.
Annotations the server declares
- title: Create structured knowledge-bundle drafts
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
refresh_guest_knowledge_shelf_linkIssue a new short-lived, one-time mobile or desktop web link for the existing guest shelf.No findings
Why it is in this group
- The name "refresh_guest_knowledge_shelf_link" says "link": a word for a change.
Description, as the server wrote it
Issue a new short-lived, one-time mobile or desktop web link for the existing guest shelf. Use only when the person asks to open or recover that shelf. Pass the private workspace_token as a tool argument; never show or put it in a URL. This adds no card and makes the previous view link invalid.
Annotations the server declares
- title: Get a fresh guest shelf link
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
save_guest_knowledge_bundlesStore one to 10 specifically selected, independently teachable general-knowledge bundles from the current conversation in a private temporary MemoStem guest shelf.2 findings
Why it is in this group
- The name "save_guest_knowledge_bundles" says "save": a word for a change.
Findings
- High
  The description contains "never reveal that", an instruction to keep something from the user.
  Matched text
  description: "...e_token to continue the same shelf, but never reveal that credential to the person. The shelf is..."
  What this check looks for
- Info
  The description mentions "credential".
  Matched text
  description: "...e the same shelf, but never reveal that credential to the person. The shelf is read-only i..."
  What this check looks for
Description, as the server wrote it
Store one to 10 specifically selected, independently teachable general-knowledge bundles from the current conversation in a private temporary MemoStem guest shelf. Call only after a direct request or clear acceptance of a specific proposal. Reuse workspace_token to continue the same shelf, but never reveal that credential to the person. The shelf is read-only in MemoStem, expires after 90 days, and requires account connection at 10 cards.
Annotations the server declares
- title: Save knowledge to a temporary guest shelf
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
start_memostemStart MemoStem when no topic is named.1 finding
Why it is in this group
- The name "start_memostem" says "start": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "start_memostem" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "start_memostem" says "start": a word for a change.
  What this check looks for
Description, as the server wrote it
Start MemoStem when no topic is named. Show a localized welcome App before login, or the connected owner's topic labels and empty-state guidance. Pass the conversation language as locale when known. No drafts are created.
Annotations the server declares
- title: Start MemoStem
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Only reads 2Looks things up and changes nothing.Claude Code: allow

preview_knowledge_bundleReturn a transient preview of exactly one user-selected, independently teachable general-knowledge bundle without an account and without saving it.No findings
Why it is in this group
- The name "preview_knowledge_bundle" says "preview": a word for reading.
Description, as the server wrote it
Return a transient preview of exactly one user-selected, independently teachable general-knowledge bundle without an account and without saving it. Call only at the person's direct request or after clear acceptance of a specific preview proposal. Use save_guest_knowledge_bundles only after the person explicitly asks to keep it; connected clients use create_knowledge_bundle_drafts.
Annotations the server declares
- title: Preview one knowledge bundle
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
validate_knowledge_bundleValidate exactly one user-selected, independently teachable general-knowledge bundle without an account and without saving it.No findings
Why it is in this group
- The name "validate_knowledge_bundle" says "validate": a word for reading.
Description, as the server wrote it
Validate exactly one user-selected, independently teachable general-knowledge bundle without an account and without saving it. Call only at the person's direct request or after clear acceptance of a specific preview proposal. The strict input rejects transcripts, conversation histories, and unsupported knowledge types; phrases that may be personal or organization-specific are returned as review_flags.
Annotations the server declares
- title: Validate one knowledge bundle
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.6.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http memostem https://www.memostem.com/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__memostem__validate_knowledge_bundle",
      "mcp__memostem__preview_knowledge_bundle"
    ],
    "ask": [
      "mcp__memostem__start_memostem",
      "mcp__memostem__connect_memostem",
      "mcp__memostem__save_guest_knowledge_bundles",
      "mcp__memostem__refresh_guest_knowledge_shelf_link",
      "mcp__memostem__claim_guest_knowledge_workspace",
      "mcp__memostem__check_memostem_connection",
      "mcp__memostem__create_card_drafts",
      "mcp__memostem__create_knowledge_bundle_drafts"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as memostem. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.girapphe/memostem/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:34 UTC.

For agents: Markdown · JSON · report this listing