chat-recall is answering right now. Last checked 14 min ago. 261 installs a week from npm. Last commit 14 Oct 2026.
One searchable history across every AI coding tool, with secret scanning and a shared task board.
We read the source, 2 d ago · rules ccca72095570
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
return execFileSync(file, args, {
{ name: 'slack-webhook-url', regex: '(?:https?://)?hooks.slack.com/(?:services|workflows|triggers)/[A-Za-z0-9+/]{43,56}', severity: 'medium' },
import { readFileSync, writeFileSync, mkdirSync, mkdtempSync, rmSync, chmodSync, unlinkSync, readdirSync, statSync } from 'node:fs';
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
**Do not paste secrets.** Session transcripts and `.npmrc`/`.env` files
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 14 min ago.
claude mcp add chat-recall --transport http https://chatrecall.dev/mcp
{
"mcpServers": {
"chat-recall": {
"url": "https://chatrecall.dev/mcp"
}
}
}
[mcp_servers.chat-recall]
url = "https://chatrecall.dev/mcp"
{
"mcpServers": {
"chat-recall": {
"url": "https://chatrecall.dev/mcp"
}
}
}
{
"mcpServers": {
"chat-recall": {
"url": "https://chatrecall.dev/mcp"
}
}
}
This one needs environment variables set before it will start:
CHAT_RECALL_SERVER (Server to sync to. Defaults to the hosted service at https://chatrecall.dev; set it to your own instance to self-host. Self-hosting is free for one person.), CHAT_RECALL_MCP_PROFILE (Which tools to register: "lean" (default, 28 tools — tool choice degrades as the list grows) or "full" (all 63 tools, plus recall_help — a directory of the rest; 4 code-intelligence tools register only with the codeindex companion on PATH). Every tool works when called by name either way.), CHAT_RECALL_NO_DAEMON (Set to 1 to load the whole server inside each session. By default every session with the same profile and server shares one background daemon, and each session is a thin relay onto it — the engine is loaded once per machine instead of once per session. Turn it off for a sandbox with no writable runtime directory.), CHAT_RECALL_DAEMON_IDLE_SECS (Seconds with no session attached before the shared daemon exits and returns its memory. Default 900. Set 0 to keep it resident.).
The author declared them in the registry entry; get the values from the project itself.
This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://chatrecall.dev/mcp | streamable-http | sign-in | 237 ms | 14 min ago |
Find every leaked secret on your machine — API keys in .env files, shell history, and configs.
Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.
Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval
Keychain-backed secret broker: an AI agent can use your keys, but no tool ever returns one.
Accessibility compliance for AI coding tools. WCAG 2.2 reviews with shared evidence.
BridgeGuard MCP Server - Cross-chain bridge security audit tools for AI coding agents. Scan bri...
Offline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.
Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.
Answers built from our own checks of this server.