OpenLore — security grade SAFE, quality 62/100

Security audit verdict: SAFE · quality 62/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by clay-good · MCP Server · ★ 313

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is OpenLore safe to install? View the security audit →

About OpenLore

openlore [!NOTE] has been renamed to . The npm package is now and the CLI command is . Existing projects: rename your directory to and reinstall (). See docs/RENAME-TO-OPENLORE.md for the full migration checklist. Persistent architectural memory and structural cognition for AI coding agents. openlore turns any evolving codebase into a navigable knowledge graph backed by OpenSpec living specifications. It maintains persistent architectural context across agent sessions: graph structure, specs, decisions, drift state, and semantic retrieval — so agents start each task already oriented instead of re-discovering the system from file reads. Value Scorecard — does it pay for itself? OpenLore only earns its place if an agent with it reaches a correct answer for less total cost than the same agent without it. We measure that inequality and publish it — wins and losses. Numbers are from the Spec 14 agent benchmark (, sonnet, N=4 medians, pinned SHAs, isolating each arm), measured 2026-06-01. ✅ h

adragentic-workflowsai-agentscall-graphcode-navigationcodebase-analysiscoding-agentsdead-code-detectiondeveloper-toolsinfrastructure-as-code

Quick Facts

Stars313
Forks40
LanguageTypeScript
CategoryMCP Server
LicenseMIT
Quality Score62.2842942305622/100
Open Issues4
Last Updated2026-09-29
Created2026-01-31
Platformsmcp, node
Est. Tokens~24k

Compatible Skills

These tools work well together with OpenLore for enhanced workflows:

  • mex — semantic(0.27)+complementary+same_lang+similar_pop+shared_platform (60%)
  • graph-memory — semantic(0.18)+complementary+same_lang+similar_pop+shared_platform (56%)
  • cli — semantic(0.18)+complementary+rare_topics+same_lang+similar_pop+shared_platform (56%)
  • ai-codex — semantic(0.17)+complementary+same_lang+similar_pop+shared_platform (56%)
  • Ix — semantic(0.18)+complementary+rare_topics+same_lang+similar_pop+shared_platform (56%)

OpenLore alternative? Top 6 similar tools

Looking for a OpenLore alternative? If you're comparing OpenLore with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • enola by enola-labs · ⭐ 256

    Architecture intelligence for AI coding agents - deterministic, cross-repository code analysis through MCP.

  • roam-code by Cranot · ⭐ 517

    Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 comman

  • octocode by Muvon · ⭐ 477

    Structural code intelligence for AI agents — semantic search, knowledge graphs, and a built-in MCP server in o

  • django-orm-lens by FROWNINGdev · ⭐ 76

    Django ER diagrams, N+1 detection, schema drift & migration-risk linting — in VS Code, a CLI and an MCP server

  • rustchain-mcp by Scottcjn · ⭐ 117

    MCP server for autonomous agent economies: wallets, signed RTC micropayments, bounty discovery, BoTTube video

  • codesearch by flupkede · ⭐ 85

    Multi-repo semantic code search MCP server in Rust — hybrid vector + BM25 retrieval, tree-sitter AST chunking,

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular TypeScript Agent Tools

Frequently Asked Questions

What is OpenLore?

OpenLore is Deterministic, local-first memory and guardrails for AI coding agents with no LLM in the hot path.. It is categorized as a MCP Server with 313 GitHub stars.

What programming language is OpenLore written in?

OpenLore is primarily written in TypeScript. It covers topics such as adr, agentic-workflows, ai-agents.

How do I install or use OpenLore?

You can find installation instructions and usage details in the OpenLore GitHub repository at github.com/clay-good/OpenLore. The project has 313 stars and 40 forks, indicating an active community.

What license does OpenLore use?

OpenLore is released under the MIT license, making it free to use and modify according to the license terms.

What are the best alternatives to OpenLore?

The top alternatives to OpenLore on Agent Skills Hub include enola, roam-code, octocode. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools