F

npm:nan-forget

https://www.npmjs.com/package/nan-forget
55/100 · MCP Trust Grade · checked 2h ago · MCP 0.6.8

What it offers — 13 tools · Developer Tools

memory_save

IMPORTANT: You MUST call this tool proactively whenever you learn a decision, preference, fact, or context worth remembering across sessions. Do NOT w

memory_search

IMPORTANT: Call this DURING the conversation whenever you encounter a topic that may have prior context — auth, deployment, testing, architecture, too

memory_get

Get a specific memory by its ID. Use when you have a memory ID from search results and need the full content.

memory_update

Update an existing memory. Use to correct, refine, or add tags to a memory.

memory_archive

Archive a memory (soft delete). The memory is never truly deleted — just hidden from search. Use when a decision is reversed or information is outdate

memory_consolidate

Consolidate aging memories into compact long-term entries. Clusters related memories by topic, summarizes them (LLM if available, deterministic fallba

memory_clean

Run garbage collection on memories. Archives decayed (unused) memories, removes expired ones, deduplicates near-identical entries, and syncs MEMORY.md

memory_stats

Show memory statistics: active/archived counts, breakdown by type and project. Use to check memory health and understand what you remember.

memory_health

Check if nan-forget services are running (Ollama, REST API). Call this at the start of each session to verify everything is ready. If services are dow

memory_start

Start all nan-forget services (Ollama, REST API). Only call this after the user confirms they want services started. Starts Ollama and the REST API.

memory_sync

IMPORTANT: Call this ONCE at the start of every session. Lightweight handshake — checks if services are running, reports how many memories are availab

memory_checkpoint

Call this BEFORE telling the user a task is done. Captures the full problem→solution context as a structured memory for future sessions. Use after: bu

memory_compress

Compress local .md memory files that have been persisted to the DB. Replaces redundant files with minimal stubs to keep context window clean. Call aft

Spec / packaging20%100
Security (OWASP MCP)30%15
Maintenance / popularity20%100
Tool hygiene15%70
Transparency / provenance15%90

Findings

FAILMCP01 Prompt-injection / hidden-instruction markup found in package source.
WARNMCP08 References sensitive file paths / environment secrets.
INFO Static analysis of npm package nan-forget@0.6.8 (stdio server — no remote endpoint). Reliability/behavioral signals require running it; not measured.
Grade another server

We re-grade npm:nan-forget on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.

Share this report card

A 1200×630 card with the grade + audit — drop it in a post, Slack, or your repo.

MCP Trust report card — npm:nan-forget grade F
Share on X Open card image

Embed this grade

A live badge — it re-verifies itself and shows current stability. Static scorecards can't. Paste it in your README or site to show users you're independently audited.

MCP Trust Grade F · wmcp.sh
[![MCP Trust Grade F](https://wmcp.sh/mcp/grade/npm%3Anan-forget/badge.svg)](https://wmcp.sh/mcp/grade/npm%3Anan-forget)
<a href="https://wmcp.sh/mcp/grade/npm%3Anan-forget"><img src="https://wmcp.sh/mcp/grade/npm%3Anan-forget/badge.svg" alt="MCP Trust Grade F · wmcp.sh"></a>

Agents: check this before connecting

Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:

https://wmcp.sh/mcp/trust
How this grade is computed. An open, independent rubric — Spec conformance (20%), Security mapped to the OWASP MCP Top 10 (30%), Reliability (20%), Tool hygiene (15%), Transparency (15%) — run by connecting to the server and inspecting its real MCP surface. The grade is free and identical whether or not the operator pays. v1 uses static + spec signals from a single connection; continuous uptime, real latency, and annotation-truthing (declared readOnly vs observed behavior) layer on via the wmcp.sh proxy.