github Python analyzed cd4a4a0

willow-memory/willow-mcp

v2.33.0
github

Agent-neutral MCP server with persistent memory (SOIL + Postgres KB) and a sandboxed task queue. Manifest-based ACL; works with any stdio MCP client.

maintainer
willow-memory
licence
Apache-2.0
first seen
2026-08-21
last seen
2026-09-10
releases · 30d
73
short id

willow-memory/willow-mcp is an MCP server distributed on github, maintained by willow-memory, tracked here since August 2026. It has shipped 126 releases (currently 2.33.0) and exposes 152 tools. Tools include agent_clear, agent_dispatch_result, agent_route, agent_seed_mirror, code_graph_explain, code_graph_impact, and 146 more. Its composite risk grade is D — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 3 review prompts — dangerous code, exfiltration combo and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 152 tools appear to reach filesystem, shell / exec, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-10: 8 tools added.

full security breakdown →
tools 20 of 152
  • agent_clear
  • agent_dispatch_result
  • agent_route
  • agent_seed_mirror
  • code_graph_explain
  • code_graph_impact
  • code_graph_index
  • code_graph_search
  • code_graph_suggest
  • code_graph_walk
  • commitment_acknowledge
  • commitment_ingest
  • commitment_list
  • commitment_surface
  • context_expire
  • context_get
  • context_list
  • context_save
  • diagnostic_summary
  • dispatch_accept
All 152 tools →
release cadence · 90d 123 releases
06-13 00:00 07-27 00:00 now
recent releases last 10
version date src
2.33.0 2026-09-10 pypi
2.32.0 2026-09-10 pypi
2.31.1 2026-09-10 pypi
2.31.0 2026-09-09 pypi
v2.31.0 2026-09-09 github
2.30.1 2026-09-09 pypi
v2.30.1 2026-09-09 github
2.30.0 2026-09-09 pypi
v2.30.0 2026-09-09 github
2.29.0 2026-09-09 pypi

view all →