KKuzumem McpYet another memory system for agents. This one with a coding project focus. My hobby project for learning TypeScript, Graph Databases and MCP. Vibe code 75% so bugs might ensue. Would love some userfeedback and feel free to pitch in with the development. Support both SSE and stdio and the servers are end-to-end tested. Cline and Cursor work with stdio atleast based on my testing. Stack: TypeScript KuzuDB Model-Context-Protocol support (no official SDK yet)

Remove the -y/--yes auto-confirm flag from MCP server launch arguments. This flag bypasses user confirmation prompts and allows unattended execution of potentially dangerous operations.

Likely FP if the matched text is an isolated flag (-y or --yes) in documentation describing command-line options, not in an actual MCP config.

Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.

Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.