{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:30:32.722Z","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem","markdownUrl":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem.md","server":{"slug":"vortx-ai-emem","name":"emem, the verifiable memory protocol for the physical world","registryName":"io.github.Vortx-AI/emem","description":"Shared, verifiable memory for machines and AI. Encode where data lives; decode with any AI.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"ghcr-io-vortx-ai-emem","type":"oci","identifier":"ghcr.io/vortx-ai/emem","withdrawn":false,"url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem","version":"latest","transport":"streamable-http","scoredAt":"2026-11-05T08:53:26.474Z"},"score":{"total":10,"tier":"low","status":"scored","weekDelta":0,"history":[{"date":"2026-11-05","total":10},{"date":"2026-11-04","total":10},{"date":"2026-11-03","total":10},{"date":"2026-11-02","total":10},{"date":"2026-11-01","total":10},{"date":"2026-10-31","total":10},{"date":"2026-10-30","total":10},{"date":"2026-10-29","total":10},{"date":"2026-10-28","total":10},{"date":"2026-10-27","total":10},{"date":"2026-10-26","total":10},{"date":"2026-10-25","total":10},{"date":"2026-10-24","total":10},{"date":"2026-10-23","total":10},{"date":"2026-10-22","total":10},{"date":"2026-10-21","total":10},{"date":"2026-10-20","total":10},{"date":"2026-10-19","total":10},{"date":"2026-10-18","total":10},{"date":"2026-10-17","total":10},{"date":"2026-10-16","total":10},{"date":"2026-10-15","total":10},{"date":"2026-10-14","total":10},{"date":"2026-10-13","total":10},{"date":"2026-10-12","total":10},{"date":"2026-10-10","total":10},{"date":"2026-10-04","total":10},{"date":"2026-10-03","total":10},{"date":"2026-10-02","total":10},{"date":"2026-10-01","total":10}]},"categories":[{"name":"Supply Chain Security","score":0,"verdict":"unverified","reasons":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.","Install-script risk not yet assessed.","Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"ecosystem_unsupported"}},{"code":"cve.inconclusive","args":{"reason":"no_sbom_attached"}},{"code":"installscript.inconclusive","args":{"reason":"no_install_concept"}},{"code":"dephealth.inconclusive","args":{"reason":"no_sbom_attached"}}]},{"name":"Provenance & Transparency","score":48,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (Apache-2.0).","Actively maintained (last published 5 days ago).","Publishes a security disclosure policy (SECURITY.md)."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"Apache-2.0"}},{"code":"maintenance.recent","args":{"age_days":"5"}},{"code":"disclosure.present","args":{}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema quality not yet verified: our sandbox could not run this package, so we have no schema to assess."],"codes":[{"code":"schema.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: our sandbox could not run this package, so we have no schema to compare."],"codes":[{"code":"stability.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: our sandbox could not run this package, so we have no tool definitions to assess."],"codes":[{"code":"toolquality.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan."],"codes":[{"code":"toolsafety.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Protocol version not yet verified: our sandbox could not run this package, so we never saw its MCP handshake."],"codes":[{"code":"cap.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]}],"inconclusive":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.","Install-script risk not yet assessed.","Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.","Schema quality not yet verified: our sandbox could not run this package, so we have no schema to assess.","Stability not yet verified: our sandbox could not run this package, so we have no schema to compare.","Tool coverage not yet verified: our sandbox could not run this package, so we have no tool definitions to assess.","Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan.","Protocol version not yet verified: our sandbox could not run this package, so we never saw its MCP handshake."],"malware":[],"components":[{"slug":"emem","type":"remote","identifier":"https://emem.dev/mcp","withdrawn":false,"score":87,"current":false,"url":"https://verifymcp.io/servers/vortx-ai-emem/emem","markdownUrl":"https://verifymcp.io/servers/vortx-ai-emem/emem.md"},{"slug":"ghcr-io-vortx-ai-emem","type":"oci","identifier":"ghcr.io/vortx-ai/emem","withdrawn":false,"score":10,"current":true,"url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem","markdownUrl":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem.md"}],"facts":[{"label":"Registry","value":"oci"},{"label":"Package","value":"ghcr.io/vortx-ai/emem"},{"label":"Version","value":"latest"},{"label":"Transport","value":"streamable-http"}],"install":{"available":true,"bundleSha256":null},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T08:53:26.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":"no_attestation","reasonLabel":"No attestation published","discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-09-29","recent":[{"id":"chg_01a1911f-5986-7a81-ab70-59f0ffdd1c4c","kind":"check.reason","summary":"Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a1911f-5986-7a81-ab70-59f0ffdd1c4c"},{"id":"chg_01a1911f-5989-78f6-bf47-13fabb828f6e","kind":"check.reason","summary":"Capabilities (Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a1911f-5989-78f6-bf47-13fabb828f6e"},{"id":"chg_01a1911f-5989-725c-a7b1-ca88e8661d22","kind":"check.reason","summary":"Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a1911f-5989-725c-a7b1-ca88e8661d22"},{"id":"chg_01a1911f-5989-7e97-b187-713cf8f4a3ba","kind":"check.reason","summary":"Tool coverage (Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a1911f-5989-7e97-b187-713cf8f4a3ba"},{"id":"chg_01a1911f-598b-7d2e-a072-8e49f5d03522","kind":"check.reason","summary":"Schema quality (Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a1911f-598b-7d2e-a072-8e49f5d03522"},{"id":"chg_01a18bfc-5f9b-71de-a4a9-e7bbc4bbb056","kind":"check.reason","summary":"Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a18bfc-5f9b-71de-a4a9-e7bbc4bbb056"},{"id":"chg_01a18bfc-5fa0-734a-addc-a7dad7b06511","kind":"check.reason","summary":"Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a18bfc-5fa0-734a-addc-a7dad7b06511"},{"id":"chg_01a18bfc-5fa1-7eaf-aa25-5ec9fd9c42fd","kind":"check.reason","summary":"Capabilities (Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a18bfc-5fa1-7eaf-aa25-5ec9fd9c42fd"},{"id":"chg_01a18bfc-5fa2-7524-813d-88710df0d50c","kind":"check.reason","summary":"Tool coverage (Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a18bfc-5fa2-7524-813d-88710df0d50c"},{"id":"chg_01a18bfc-5fa3-7956-9a13-bc092d086112","kind":"check.reason","summary":"Schema quality (Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a18bfc-5fa3-7956-9a13-bc092d086112"},{"id":"chg_01a186d7-c83a-7554-8fb0-79f286b4b99d","kind":"check.reason","summary":"Tool coverage (Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a186d7-c83a-7554-8fb0-79f286b4b99d"},{"id":"chg_01a186d7-c83b-7730-80d1-5e9207873b9c","kind":"check.reason","summary":"Schema quality (Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a186d7-c83b-7730-80d1-5e9207873b9c"},{"id":"chg_01a186d7-c839-7e79-9de3-52a3cffd6c4d","kind":"check.reason","summary":"Capabilities (Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a186d7-c839-7e79-9de3-52a3cffd6c4d"},{"id":"chg_01a186d7-c839-7468-81c7-3d2c33c976da","kind":"check.reason","summary":"Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a186d7-c839-7468-81c7-3d2c33c976da"},{"id":"chg_01a186d7-c837-78c3-a491-f83d85927785","kind":"check.reason","summary":"Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a186d7-c837-78c3-a491-f83d85927785"},{"id":"chg_01a181ac-2a14-7002-b493-c5163d2315a8","kind":"check.reason","summary":"Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a181ac-2a14-7002-b493-c5163d2315a8"},{"id":"chg_01a181ac-2a14-7771-acaf-388cabbc6e1e","kind":"check.reason","summary":"Capabilities (Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a181ac-2a14-7771-acaf-388cabbc6e1e"},{"id":"chg_01a181ac-2a10-7033-b7bf-111414477eb8","kind":"check.reason","summary":"Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a181ac-2a10-7033-b7bf-111414477eb8"},{"id":"chg_01a181ac-2a15-7000-ae50-2fa146289099","kind":"check.reason","summary":"Tool coverage (Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a181ac-2a15-7000-ae50-2fa146289099"},{"id":"chg_01a181ac-2a15-7921-be4c-ede80d5277e9","kind":"check.reason","summary":"Schema quality (Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem#chg-chg_01a181ac-2a15-7921-be4c-ede80d5277e9"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem/changelog.json"},"links":{"html":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem","markdown":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem.md","changelogJson":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem/changelog.json","changelogRss":"https://verifymcp.io/servers/vortx-ai-emem/ghcr-io-vortx-ai-emem.xml","external":[{"label":"GitHub Container Registry","href":"https://ghcr.io/vortx-ai/emem"},{"label":"Repository","href":"https://github.com/Vortx-AI/emem"},{"label":"Website","href":"https://emem.dev/"}]}}