Is io.github.magnusmage/cohort-mcp safe to use?

io.github.magnusmage/cohort-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.

How do I install io.github.magnusmage/cohort-mcp?

io.github.magnusmage/cohort-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.magnusmage/cohort-mcp?

io.github.magnusmage/cohort-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is io.github.magnusmage/cohort-mcp actively maintained?

io.github.magnusmage/cohort-mcp is actively maintained - last commit was 3 days ago.

io.github.magnusmage/cohort-mcp

cohort-mcp

Shared AI memory for teams: a git vault of markdown, human-approved, injection-safe, local-only.

65/wk GitHub npm

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 3d ago

Works with most clients

Transport: stdio, sse

0 tools

Grade F

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.github.magnusmage/cohort-mcp is an MCP server that shared AI memory for teams: a git vault of markdown, human-approved, injection-safe, local-only. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 59/100 on MCPpedia's security, maintenance and efficiency rubric.

Writing

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-magnusmage-cohort-mcp": {
      "args": [
        "-y",
        "cohort-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-magnusmage-cohort-mcp)](https://mcppedia.org/s/io-github-magnusmage-cohort-mcp)

Read me

What io.github.magnusmage/cohort-mcp does

Shared AI memory for teams: a git vault of markdown, human-approved, injection-safe, local-only.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y 'cohort-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

59/100across 5 weighted dimensions

How we score →

0255075100

−41

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked cohort-mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.magnusmage/cohort-mcp safe to use?: io.github.magnusmage/cohort-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
How do I install io.github.magnusmage/cohort-mcp?: io.github.magnusmage/cohort-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.magnusmage/cohort-mcp?: io.github.magnusmage/cohort-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is io.github.magnusmage/cohort-mcp actively maintained?: io.github.magnusmage/cohort-mcp is actively maintained - last commit was 3 days ago.

Similar servers

Others in writing

View all →

io.github.xberg-io/crawlberg92

Scrape, crawl, and map websites to Markdown or JSON via local CLI.

196 5

io.github.shuji-bonji/pdf-writer-mcp91

Create and edit PDFs: text, Markdown, tables, metadata and pages, with Japanese font embedding.

Wechatsync91

一键同步文章到多个内容平台，支持今日头条、WordPress、知乎、简书、掘金、CSDN、typecho各大平台，一次发布，多平台同步发布。解放个人生产力

6.6k 5

io.github.docling-project/docling-rs91

Documents to Markdown for agents: PDF layout, tables and OCR, Office, HTML, scans. docling in Rust.

MCP Security Weekly

Get CVE alerts and security updates for io.github.magnusmage/cohort-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Writing

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-magnusmage-cohort-mcp": {
      "args": [
        "-y",
        "cohort-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-magnusmage-cohort-mcp)](https://mcppedia.org/s/io-github-magnusmage-cohort-mcp)

Read me

What io.github.magnusmage/cohort-mcp does

Shared AI memory for teams: a git vault of markdown, human-approved, injection-safe, local-only.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y 'cohort-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

One markdown vault on GitHub. Every teammate's AI reads and writes the same memory,
regardless of account, plan, or platform, and a human approves every change.

Quickstart · How it works · What's inside · The engine · Security · Full docs

Why Cohort

Your team's AI assistants each start every session blank. What one teammate's assistant learned (the decision you made, the fact you pinned, the thread you left open) is invisible to everyone else's. Paste the same context again and again, or lose it.

Cohort gives the team one shared memory. A single git repository holds your facts, decisions, and open threads in plain markdown. Each teammate's AI reads a bounded slice at the start of a session and proposes updates at the end, and a human approves every change before it lands. There is no hosted server and no account with us: the repo is the product, and it lives in your own GitHub.

How it works

Load. At session start, your AI pulls a bounded, verified-first slice of the vault, fenced as data and never as instructions.
Propose. At session end, it proposes new records. Every write passes a local gate (secret and PII scan, injection linter, contradiction check) and is held for a human.
Approve. A human verifies the record from the terminal. Only then does it become trusted memory. Git is the only transport, and the vault stays yours.

See it

What's inside

The vault, the engine, and the moat are free and open under Apache-2.0 and run fully on your own machine. Cohort runs entirely against your own GitHub repo: the maintainers never receive your vault, your sessions, or any telemetry. Cohort reads and writes your vault locally, under your control, with a human approving every write, and that processing happens on your machine, not ours.

The engine

cohort-mcp is a local stdio Model Context Protocol server, the client-neutral engine any MCP client can run. It loads bounded, fenced context and runs human-approved writebacks through a server-enforced

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

59/100across 5 weighted dimensions

How we score →

0255075100

−41

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked cohort-mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.magnusmage/cohort-mcp safe to use?: io.github.magnusmage/cohort-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
How do I install io.github.magnusmage/cohort-mcp?: io.github.magnusmage/cohort-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.magnusmage/cohort-mcp?: io.github.magnusmage/cohort-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is io.github.magnusmage/cohort-mcp actively maintained?: io.github.magnusmage/cohort-mcp is actively maintained - last commit was 3 days ago.