
Research
/Security News
60 Malicious Ruby Gems Used in Targeted Credential Theft Campaign
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
@nova-mcp/mcp-nova
Advanced tools
AI Memory System for Claude & Cursor - Stop losing context. Start saving tokens.
Local AI memory with proactive behavior. Save 26-87% on tokens.
AI memory system using Model Context Protocol (MCP). Compatible with Claude Desktop, Claude Code, Cursor, and MCP-enabled applications. 100% local storage.
MCP Nova is completely FREE for everyone - personal, commercial, or enterprise use. MIT licensed. No hidden costs, no premium tiers, no restrictions.
silent: true
help({ ai_mode: true })
reveals complete AI capabilitiesnova-memory.config.js
for project-specific settingsmemory({ action: "versions", entity_name: "X" })
shows evolutionWithout Nova | With Nova v0.3.0 |
---|---|
❌ Repeat context every session | ✅ AI automatically maintains context |
❌ Manual searches & copy-paste | ✅ Proactive search triggers |
❌ Lost project details | ✅ Project-isolated memory |
❌ No memory across tools | ✅ Seamless workflow integration |
Validated Token Savings: 26-87% depending on usage pattern
# Standard installation
npm install -g @nova-mcp/mcp-nova
# Silent installation (recommended)
npm install -g @nova-mcp/mcp-nova --silent
# Minimal output installation
npm install -g @nova-mcp/mcp-nova --no-progress --no-audit
Add to config file:
%APPDATA%\Claude\claude_desktop_config.json
~/Library/Application Support/Claude/claude_desktop_config.json
~/.config/Claude/claude_desktop_config.json
{
"mcpServers": {
"mcp-nova": {
"command": "mcp-nova"
}
}
}
# Windows (recommended)
claude mcp add mcp-nova node "%APPDATA%\npm\node_modules\@nova-mcp\mcp-nova\nova-memory-mcp.mjs"
# macOS (recommended)
claude mcp add mcp-nova node "/usr/local/lib/node_modules/@nova-mcp/mcp-nova/nova-memory-mcp.mjs"
# Linux
claude mcp add mcp-nova mcp-nova
# Alternative: Find your npm global path
# npm config get prefix
Create .cursor/mcp.json
in your project:
{
"mcpServers": {
"mcp-nova": {
"command": "mcp-nova"
}
}
}
Create nova-memory.config.js
in your project root:
module.exports = {
project: {
projectPath: __dirname,
projectName: "My Project"
},
ai: {
proactive_search: true,
entity_detection: true,
silent_operations: true,
search_mode: "smart" // smart, precise, fast, balanced
},
database: {
path: ".nova/project-memory.db"
}
};
Restart your application to load MCP Nova.
You: "I need to implement user authentication"
AI: *Automatically searches memory*
"Found 3 auth patterns. Your UserService uses JWT with 30-min TTL..."
You: "Fix the database timeout error"
AI: *Auto-searches error solutions*
"Found previous fix: increased timeout to 30s, also connection pooling..."
All 9 tools work invisibly in the background:
// AI can operate without showing output to user
memory({ action: "store", content: "...", silent: true })
board({ action: "create", title: "...", silent: true })
quick({ action: "save", content: "...", silent: true })
You: "The PaymentService needs refactoring"
AI: *Detects 'PaymentService' → searches automatically*
"PaymentService found - uses Stripe API v2, here's the refactor plan..."
You: "Update AuthenticationService security"
AI: *Searches AuthenticationService history*
"Critical: Found security alert - migrate from BCrypt to Argon2..."
help({ ai_mode: true })
// Returns complete schemas with:
// - All proactive triggers
// - Entity detection patterns
// - Silent operation examples
// - Command recognition rules
Tool | Purpose | AI Features |
---|---|---|
memory | Smart storage + versioning | Silent storage, auto-deduplication, entity evolution |
board | Task management | Background task sync, AI-aware priorities |
workflow | Development phases | Silent task creation, auto-phase detection |
quick | Speed shortcuts | One-command AI operations, background saves |
relationships | Knowledge graph | Silent relationship mapping, dependency detection |
analysis | Pattern insights | Background analysis, conflict detection |
project | Multi-project support | Auto project switching, isolated contexts |
settings | Preferences | AI-optimized defaults, silent config updates |
help | Interactive guide | AI mode access, complete schema exploration |
You: "UserService uses JWT tokens with 30min TTL"
AI: "Saved! Version 1 of UserService tracked"
You: "UserService now uses refresh tokens with 7-day TTL"
AI: "Version 2 created! UserService authentication evolved"
You: "Show UserService evolution"
AI: "UserService versions:
- v2: Uses refresh tokens with 7-day TTL (current)
- v1: Uses JWT tokens with 30min TTL (previous)"
// Query version history
memory({ action: "versions", entity_name: "UserService" })
You: "CacheService uses Redis"
AI: "Saved!"
You: "CacheService uses Redis" // Exact same info
AI: "Duplicate detected - no new version needed"
mcp-nova --version
# Interactive reset with backup
nova-memory-reset
# Skip confirmation
nova-memory-reset --yes
Current Release (v0.3.0):
🤝 Contributing: We welcome contributions! Please open an issue to discuss proposed changes or improvements.
Coming in v1.0:
MIT License - 100% FREE for everyone!
Made with ❤️ by Jagdeep Singh
⭐ Star us on GitHub if MCP Nova saves you time and tokens!
FAQs
AI Memory System for Claude & Cursor - Stop losing context. Start saving tokens.
We found that @nova-mcp/mcp-nova demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.