
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
zizkadb-mcp
Advanced tools
MCP server for ZizkaDB, the audit trail database for AI agents: query tamper-evident decision logs from Cursor, Claude Desktop, and any MCP client
PyPI: zizkadb-mcp 0.1.12 · listed in the MCP Registry as io.github.ZIZKA-AI-SL/zizkadb-mcp
MCP server for ZizkaDB. Gives any MCP-compatible AI agent persistent memory, keyword and semantic search, causal debugging, time travel, and proof that its history is untouched (verify_chain).
cursor-agent) — copy the API key shown oncelog_event callsAgent name must match. If your key is for
cursor-agent, log withagent="cursor-agent". For many dynamic agent names, use a tenant-wide key (Settings).
Signup alone does not log events. You must create an agent + key and add it to
ZIZKADB_API_KEY.
Paste into ~/.cursor/mcp.json (or .cursor/mcp.json in your project), then reload MCP:
{
"mcpServers": {
"zizkadb": {
"command": "uvx",
"args": ["zizkadb-mcp"],
"env": { "ZIZKADB_API_KEY": "zizkadb_live_xxxx" }
}
}
}
Self-host: use the Self-hosted block below (ZIZKADB_HOST only — dev key auto-injected on localhost).
Prerequisite: install uv for uvx:
curl -LsSf https://astral.sh/uv/install.sh | sh
pip install zizkadb-mcp
# or
uvx zizkadb-mcp
{
"mcpServers": {
"zizkadb": {
"command": "uvx",
"args": ["zizkadb-mcp"],
"env": {
"ZIZKADB_HOST": "http://localhost:8000"
}
}
}
}
On localhost, the dev key (zizkadb_dev_local) is auto-injected — no API key needed. Must match DEV_API_KEY in infra/.env if you changed it.
| Variable | Default | Purpose |
|---|---|---|
ZIZKADB_HOST | https://db.zizka.ai | API base URL |
ZIZKADB_API_KEY | — | Required on cloud. Your key from db.zizka.ai Settings |
AGENTDB_API_KEY | — | Legacy alias for ZIZKADB_API_KEY |
AGENTDB_HOST | — | Legacy alias for ZIZKADB_HOST |
ZIZKADB_TELEMETRY | on | Set false to opt out (anonymous install ping when MCP server starts) |
If ZIZKADB_API_KEY is missing on cloud, MCP tools return a clear error instead of silently failing.
FAQs
MCP server for ZizkaDB, the audit trail database for AI agents: query tamper-evident decision logs from Cursor, Claude Desktop, and any MCP client
We found that zizkadb-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.