LLMnesia MCP server + installer: search your own AI chat history from Claude Desktop, Claude Code, Cursor, Codex, and other MCP clients. Local-first, one command to set up.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio
verified
reported
listed in the official MCP registry counts 5 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
corpus_status
-
get_conversation
-
list_recent
-
save_conversation
-
search_conversations
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v0.1.0 · analyzer v33 · 4w ago
danger signals1
- dynamic code execution new Function() package/dist/mcp.js :2924
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 4
filesystem 3
- fs package/dist/chunk-OBJD6H4A.js :33
import { readFileSync } from "fs"; - fs package/dist/cli.js :18
import { chmod, mkdir, readFile, rm, stat, writeFile } from "fs/promises"; - fs package/dist/llmnesia-claude-host.mjs :32
import { chmod, mkdir, readdir, readFile, rename, stat, writeFile } from "node:fs/promises";
shell / exec 1
- shell package/dist/cli.js :17
import { execFile } from "child_process";
tool registrations 5
- search_conversations package/dist/mcp.js :21395
- get_conversation package/dist/mcp.js :21441
- list_recent package/dist/mcp.js :21466
- corpus_status package/dist/mcp.js :21493
- save_conversation package/dist/mcp.js :21505
install hooks 1
- prepack package/package.json :44
npm run build
declared dependencies 11
- @modelcontextprotocol/sdk@^1.29.0
- @llmnesia/claude-code-host@*
- @llmnesia/shared-types@*
- @types/node@^22.13.0
- chokidar@^4.0.3
- fast-uri@^3.1.5
- tsup@^8.3.5
- tsx@^4.19.2
- typescript@^5.8.2
- vitest@^3.2.4
- zod@^3.23.8