# io.github.SAIHM-Admin/saihm-mcp-server-pro (npm · @saihm/mcp-server-pro)

Sovereign encrypted memory for AI agents. Sealed on your machine. Start free: say Join SAIHM.

- Trust score: 77/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@saihm/mcp-server-pro`: 77/100 (this document), [markdown](https://verifymcp.io/servers/saihm-admin-saihm-mcp-server-pro/saihm-mcp-server-pro.md), [page](https://verifymcp.io/servers/saihm-admin-saihm-mcp-server-pro/saihm-mcp-server-pro)

## Channel facts

- Registry: `npm`
- Package: `@saihm/mcp-server-pro`
- Version: `0.3.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (99 of 103), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (99 of 103), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 97/100
  - Source repository is publicly reachable at the declared URL.
  - Cryptographically verified build provenance (signed, bound to SAIHM-Admin/saihm-mcp-server-pro).
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 0 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 82/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 869 tokens (~96/item across 9 items; 9 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (33% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add saihm-admin-saihm-mcp-server-pro -- npx -y @saihm/mcp-server-pro
```

### Codex

```bash
codex mcp add saihm-admin-saihm-mcp-server-pro -- npx -y @saihm/mcp-server-pro
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "saihm-admin-saihm-mcp-server-pro": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@saihm/mcp-server-pro"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add saihm-admin-saihm-mcp-server-pro --command npx --arg -y --arg @saihm/mcp-server-pro
```

### Hermes

```yaml
mcp_servers:
  saihm-admin-saihm-mcp-server-pro:
    command: "npx"
    args: ["-y", "@saihm/mcp-server-pro"]
```

### Other

```json
{
  "mcpServers": {
    "saihm-admin-saihm-mcp-server-pro": {
      "command": "npx",
      "args": [
        "-y",
        "@saihm/mcp-server-pro"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 77, +72)

- [security improvement] Install scripts: unverified → pass
- [security improvement] Provenance: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [security] The attested source repository moved: SAIHM-Admin/saihm-mcp-server-pro
- [functional improvement] Schema quality: unverified → 100
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] License: unverified → pass
- [functional] First check of Schema quality: pass
- [functional] First check of Tool coverage: 33
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 100
- [functional] First check of Schema quality: good
- [functional] Capabilities: Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet.
- [functional] Tool coverage: Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.
- [functional] Schema quality: Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional] Licence: Apache-2.0
- [functional] Package version: 0.2.1 → 0.3.0

### 2026-08-01 (score 5, 0)

- [security] Stability: Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.
- [functional] Tool coverage: Tool coverage not yet verified: our sandbox run of this package did not complete, so we have no tool definitions to assess.
- [functional] Capabilities: Protocol version not yet verified: our sandbox run of this package did not complete, so we never saw its MCP handshake.
- [functional] Schema quality: Schema quality not yet verified: our sandbox run of this package did not complete, so we have no schema to assess.

### 2026-07-31 (score 5, −1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 6, −34)

- [security regression] Install scripts: pass → unverified
- [security regression] Known CVEs: partial → unverified
- [security regression] Provenance: pass → unverified
- [security] The attested source repository moved: SAIHM-Admin/saihm-mcp-server-pro
- [functional regression] License: pass → unverified
- [functional regression] Maintenance: pass → unverified
- [functional regression] Dependency health: partial → unverified
- [functional] Licence: Apache-2.0

### 2026-07-29 (score 40)

First indexed and scored.

## MCP tools (9)

### `saihm_remember` (~87 tokens)

Remember

Store information to SAIHM persistent encrypted memory (sealed client-side). Pass an existing cellId to update it. Use this when an agent or user wants a fact, decision, or context to persist across sessions.

Input parameters:

- `cellId` (string): Existing cell id (hex) to update; omit to create a new cell
- `content` (string, required): Information to remember

Output parameters:

- `cellId` (string)
- `commitmentHash` (string)
- `seq` (string)
- `shardId` (string)

### `saihm_recall` (~205 tokens)

Recall

Retrieve and decrypt your memories (opened client-side). Optional keyword filter. Use this at the start of a session or whenever past context is needed. Can ALSO read one specific cell another agent shared TO you — pass sharerPinnedAgentIdHashHex + sharerRecord + cellId (read-only; the sharer must have shared it with you).

Input parameters:

- `cellId` (string): The shared cell id to read. Required when reading a shared cell.
- `query` (string): Filter your OWN memories by keyword (empty = all). Ignored when reading a shared cell.
- `sharerPinnedAgentIdHashHex` (string): Read a cell shared TO you: the SHARER's agentIdHash (hex), pinned out-of-band. When set, sharerRecord and cellId are also required.
- `sharerRecord` (object): The SHARER's published identity record (hex fields). Required with sharerPinnedAgentIdHashHex.

Output parameters:

- `count` (number)
- `memories` (array)

### `saihm_forget` (~72 tokens)

Forget (GDPR erasure)

Cryptographically erase a memory (GDPR Art. 17): destroys the endpoint-side wrapped DEK so the cell can never be decrypted again. Use this only to permanently and irreversibly delete a memory by its cell id.

Input parameters:

- `id` (string, required): Memory cell id (hex) to erase

### `saihm_status` (~53 tokens)

Status

Show operator-observable session status (no plaintext): tier, shards, sharing, BFSI, custody. Use this to check the identity, custody, storage, and sharing state of the current SAIHM session.

Output parameters:

- `activeShardCount` (number)
- `activeSharingContracts` (number)
- `agentIdHash` (string)
- `bfsi` (number)
- `custody` (string)
- `snapshotEpoch` (string)
- `tier` (string)

### `saihm_share` (~133 tokens)

Share

Share a cell with another agent, end-to-end authenticated. Pin the grantee's agentIdHash out-of-band. Use this to grant another agent access to a specific memory.

Input parameters:

- `cellId` (string, required): The cell to share
- `expiryEpoch` (string): Optional expiry as a UNIX-epoch count (decimal string)
- `recipientPinnedAgentIdHashHex` (string, required): The grantee's agentIdHash (hex), pinned out-of-band
- `recipientRecord` (object, required): The grantee's published identity record (hex fields)
- `scope` (string): Access scope (default read)

### `saihm_revoke_share` (~67 tokens)

Revoke share

Revoke a prior share grant to a recipient for a cell. Use this to withdraw a grantee's access.

Input parameters:

- `cellId` (string, required): The shared cell id
- `recipientHex` (string, required): The grantee's agentIdHash (hex) to revoke

### `saihm_governance_propose` (~84 tokens)

Propose (governance)

Submit a gSAIHM governance proposal. Scope MUST be 'emission_param' or 'protocol_upgrade'. Use this to open a protocol governance vote.

Input parameters:

- `paramKey` (string): Parameter key (when scope=emission_param)
- `proposedValue` (string): Proposed value as string
- `scope` (string, required): Governable scope

### `saihm_governance_vote` (~65 tokens)

Vote (governance)

Cast a vote on an open gSAIHM governance proposal. Use this to approve or reject an open proposal by its proposalId.

Input parameters:

- `approve` (boolean, required): true = approve, false = reject
- `proposalId` (string, required): Hex proposalId

### `saihm_join` (~103 tokens)

Join SAIHM (activate free memory)

Activate free SAIHM persistent memory for this agent. Call this when the user asks to join, sign up for, or set up SAIHM. It self-generates a sovereign memory key on this device and starts a one-time human approval — the tool returns a URL and short code for the user to open and enter. After the user approves, call saihm_join again to finish; the memory tools then work. No payment and no website visit.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/saihm-admin-saihm-mcp-server-pro/saihm-mcp-server-pro#diagnostics

## Score history

- 2026-08-03: 77
- 2026-08-02: 77
- 2026-08-01: 5
- 2026-07-31: 5
- 2026-07-30: 6
- 2026-07-29: 40

## Links

- npm package: https://www.npmjs.com/package/@saihm/mcp-server-pro
- Socket report: https://socket.dev/npm/package/@saihm/mcp-server-pro
- Repository: https://github.com/SAIHM-Admin/saihm-mcp-server-pro
- Website: https://saihm.coti.global/
- Changelog RSS feed: https://verifymcp.io/servers/saihm-admin-saihm-mcp-server-pro/saihm-mcp-server-pro/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/saihm-admin-saihm-mcp-server-pro/saihm-mcp-server-pro/changelog.json
- HTML version of this page: https://verifymcp.io/servers/saihm-admin-saihm-mcp-server-pro/saihm-mcp-server-pro