
Product
Introducing Socket Scanning for VS Code Marketplace Extensions
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
@memoro/mcp-server
Advanced tools
Local MCP connector for Memoro — lets Claude Desktop, Claude Code and other local MCP clients read and write your personal Memoro memory. Requires Memoro to already be installed and running at least once.
Local MCP connector for Memoro — a personal AI memory layer that lives on your own computer, never on our servers. See github.com/circassian1977-byte/memoro.
This package does not work on its own. It connects to an already-installed, already-run copy of Memoro on the same machine — install Memoro first.
Add this to your MCP client config (e.g. Claude Desktop's claude_desktop_config.json):
{
"mcpServers": {
"memoro": {
"command": "npx",
"args": ["-y", "@memoro/mcp-server"]
}
}
}
Restart your client. If Memoro is installed and has been run at least once, the connector finds it automatically.
Once connected, your AI can read and write durable "status cards" about your projects, decisions and preferences — so you stop re-explaining the same context every time you switch AI tools.
ISC
FAQs
Local MCP connector for Memoro — lets Claude Desktop, Claude Code and other local MCP clients read and write your personal Memoro memory. Requires Memoro to already be installed and running at least once.
The npm package @memoro/mcp-server receives a total of 19 weekly downloads. As such, @memoro/mcp-server popularity was classified as not popular.
We found that @memoro/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.