MCP, MCP server
Junto Memory
The memory component of the Junto multi-agent coordination system.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
INSTALL_REMOTE_SCRIPT
Why this grade
- INSTALL_REMOTE_SCRIPT Medium
Fetches a script from the network and runs it (a pipe to a shell, or an install hook with a URL).
docs/junto-complete-reference.md, line 491
| bun | Plugin only | Required to run the junto-inbox plugin. Install: `curl -fsSL https://bun.sh/install | bash` |
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
contrib/context-report/junto-context-report.py, line 114
return subprocess.run(["tmux", *args], capture_output=True, text=True, timeout=10)
contrib/orchestrator/brain.py, line 122
result = subprocess.run(
contrib/orchestrator/brain.py, line 129
win_result = subprocess.run(
Show more
contrib/orchestrator/brain.py, line 281
result = subprocess.run(
contrib/orchestrator/brain.py, line 305
result = subprocess.run(cmd, capture_output=True, text=True)
contrib/orchestrator/claude-spawn.py, line 79
result = subprocess.run(
contrib/orchestrator/claude-spawn.py, line 88
result = subprocess.run(
contrib/orchestrator/claude-spawn.py, line 102
subprocess.run(
Install and update
Serious
install fetches a script from the network. The docs document an installer that pipes a download into a shell.
INSTALL_REMOTE_SCRIPT INSTALL_DOCUMENTED_INSTALLER
docs/junto-complete-reference.md, line 491
| bun | Plugin only | Required to run the junto-inbox plugin. Install: `curl -fsSL https://bun.sh/install | bash` |
docs/junto-complete-reference.md, line 838
curl -fsSL https://tailscale.com/install.sh | sh
docs/phase2-acceptance.md, line 56
curl -fsSL https://tailscale.com/install.sh | sh
Show more
docs/workjunto-pilot-setup.md, line 96
curl -fsSL https://tailscale.com/install.sh | sh
requirements.txt, line 2
mcp[cli]>=1.0.0,<2
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
CLAUDE.md, line 75
curl -s http://localhost:8080/health
setup.sh, line 41
if curl -sf http://localhost:8080/health > /dev/null 2>&1; then
setup.sh, line 79
echo " curl http://localhost:8080/health # Health check"
Show more
start.sh, line 20
if curl -s --max-time 2 "$CHROMA_URL" > /dev/null 2>&1; then
watchdog.sh, line 19
if curl -sf --max-time 5 "$HEALTH_URL" > /dev/null 2>&1; then
contrib/hooks/recall_prompt_hook.py, line 101
resp = json.load(urllib.request.urlopen(req, timeout=timeout))
contrib/orchestrator/dispatcher.py, line 74
response = requests.post(url, json=payload, headers=headers, timeout=30)
contrib/runner/junto-runner.py, line 121
with urllib.request.urlopen(req, timeout=timeout) as resp:
contrib/runner/junto-runner.py, line 131
with urllib.request.urlopen(url, timeout=timeout) as resp:
contrib/runner/junto-runner.py, line 288
def fetch(self, params, cursor):
contrib/runner/junto-runner.py, line 338
def fetch(self, params, cursor):
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
librarian.py, line 36
ANTHROPIC_API_KEY = os.getenv("ANTHROPIC_API_KEY", "")
setup.sh, line 25
# Check for .env
setup.sh, line 26
if [ ! -f "$SCRIPT_DIR/.env" ]; then
Show more
setup.sh, line 27
echo "Creating .env from template..."
setup.sh, line 28
cp "$SCRIPT_DIR/.env.example" "$SCRIPT_DIR/.env"
setup.sh, line 29
echo "IMPORTANT: Edit .env to set your MongoDB password before continuing."
setup.sh, line 30
echo " nano $SCRIPT_DIR/.env"
contrib/migrate_normalize_projects.py, line 90
# .env.example - not a real credential. See README.md's MONGO_PASSWORD note.
contrib/migrate_normalize_projects.py, line 91
f"mongodb://mcp_orch:{os.environ.get('MONGO_PASSWORD', 'changeme')}@mongodb:27017/mcp_orchestrator?authSource=admin",
contrib/backup/backup-mongo.sh, line 15
# MONGO_USER, MONGO_PASSWORD - read from the MCP project's .env by default
contrib/orchestrator/brain.py, line 30
MONGO_PASSWORD = os.getenv("MONGO_PASSWORD", "")
contrib/orchestrator/brain.py, line 33
ANTHROPIC_API_KEY = os.getenv("ANTHROPIC_API_KEY", "")
contrib/ui/app.py, line 36
MONGO_PASSWORD = os.getenv("MONGO_PASSWORD", "")
contrib/ui/app.py, line 495
api_key = os.getenv("ANTHROPIC_API_KEY", "")
scripts/restore_oplog_backlog_20260807.py, line 53
pw = os.environ.get("MONGO_PASSWORD") or os.environ.get("MONGO_INITDB_ROOT_PASSWORD")
src/shared_memory/auth.py, line 99
TUNNEL_REQUIRES_KEY = os.getenv("JUNTO_TUNNEL_REQUIRES_KEY", "true").lower() in (
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read. the file cap was reached before every file was read.
OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED
uv.lock, line 1
version = 1
src/shared_memory/tools/sessions.py, line 1
"""Session management tools - start and end Claude sessions."""
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 9b1e91532ec6. requests shell access. The manifest names this permission. install fetches a script from the network. The docs document an installer that pipes a download into a shell. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read.
Date and source
Date checked:
github.com
Commit graded: 9b1e91532ec640ace160bf9f94c375d42344ea67
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.