Packageactivev0.2.1

Heartwood Memory

io.github.jermayne36/heartwood-memory

Governed agent recall with signed provenance and policy gates. BUSL-1.1; not OSI open source.

Authentication

None required

License

BUSL-1.1

Unknown facts are omitted here and listed as pending in the profile.

Trust verdict

No blockers found

No blockers found across the assessed dimensions.

assessed on 3 of 4 dimensions · 1 not applicable

MaintenanceActively maintained — last activity 1 days ago.GitHub · as of Jul 17, 2026
Pass
ProvenanceOrigin linked to a public source repository.Official MCP Registry · as of Jul 16, 2026
Pass
Supply chainNo known vulnerabilities in scanned package dependencies (OSV).OSV (Google Open Source Vulnerabilities) · as of Jul 17, 2026
Pass
Manifest integrity

Profile

What this server is — descriptive, not a rating. The verdict above judges it; this describes it.

Classification

CapabilityPending — classifier not yet run

IndustryPending — classifier not yet run

Exposure

ActionsPending — tools not yet classified

AuthenticationNone requiredmcp_registry

Data sensitivityBasicmanifest_probe

Geography

Hosting

Tool surface

Not yet probed — this server's live tool surface hasn't been captured yet, so its tools and measurements aren't available.

Adoption

No adoption signal captured yet for this package.

Connect

pypi package · v0.2.1 · stdio

uvx heartwood-memory

HEARTWOOD_DB_PATHrequired
Path to the local Heartwood SQLite database.
HEARTWOOD_TENANT
Tenant identifier used to isolate memories.
HEARTWOOD_MCP_ALLOWED_TOOLS
Comma-separated MCP tool allowlist; the default is read-only.

Sources

Every verdict and label is attributable to its source and recomputed from our own landed copy, never read live on this page.