Skip to main content
Glama
aaserag1
by aaserag1

๐Ÿง  MindGate MCP (ุจูˆุงุจุฉ ุงู„ุนู‚ู„)

The Unified Local-First Memory & Context Gateway for AI Coding Agents (Antigravity โ€ข OpenCode โ€ข Codex โ€ข Cursor โ€ข Claude)

ุงู„ุชูˆุซูŠู‚ ุจุงู„ู„ุบุฉ ุงู„ุนุฑุจูŠุฉ (README.ar.md)

MindGate (ุจูˆุงุจุฉ ุงู„ุนู‚ู„) is a free, open-source, 100% local-first Model Context Protocol (MCP) server engineered to act as a persistent shared brain across all your AI coding assistants. Hardened out of the box against Node2Shell (CVE-2026-111497), MindGate remembers your architectural decisions, coding conventions, bug root causes, and cross-session handoffs so you never have to repeat your context when switching between Antigravity, OpenCode, Codex, or Cursor.

๐ŸŒŸ Why MindGate?

Every time you switch from one AI coding tool to anotherโ€”or start a fresh sessionโ€”valuable project context is lost. MindGate solves context fragmentation with:

  • 100% Free & Local-First Privacy: Powered by an embedded SQLite database (WAL mode) and FTS5 (BM25) full-text ranking stored locally in ~/.mindgate/mindgate.db. Zero paid API keys, zero cloud subscriptions, and zero data leaving your machine.

  • Seamless Cross-Agent Handoffs: Design your architecture in Antigravity, call log_session_summary, and immediately pick up implementation in OpenCode or Codex with full awareness of touched files and next steps.

  • Project Workspaces + Global Developer Brain: Isolate project-specific architectural memories by workspace while sharing your personal coding preferences and clean-code rules globally across every repository.

  • Built-In Node2Shell (CVE-2026-111497) Hardening: Operates strictly over stdio transport (zero HTTP exposure) and includes an active runtime security guard that verifies patched Node.js versions and disables node:zlib Brotli decompression routines inside the process.

Related MCP server: Sugar Memory

๐Ÿ—๏ธ System Architecture

The diagram below illustrates how MindGate operates as a secure, zero-HTTP memory layer connecting multiple AI agents to a local SQLite + FTS5 knowledge store:

flowchart TB
    subgraph Agents["๐Ÿค– AI Coding Agents & IDEs"]
        direction LR
        AG["๐Ÿš€ Antigravity"]
        OC["๐Ÿ’ป OpenCode"]
        CX["โšก Codex CLI / IDE"]
        OT["๐Ÿ”ง Cursor / Windsurf / Claude"]
    end

    subgraph Transport["๐Ÿ”’ Isolated Zero-HTTP Transport Layer"]
        STDIO["JSON-RPC 2.0 over Stdio\n(No Network Ports / No HTTP Body Parsing)"]
    end

    subgraph MindGate["๐Ÿง  MindGate MCP Server (TypeScript)"]
        direction TB
        GUARD["๐Ÿ›ก๏ธ Node2Shell Security Guard (CVE-2026-111497)\nโ€ข Verifies Patched Runtime (Node >=22.23.4 / >=24.22.1 / >=26.12.1)\nโ€ข Disables node:zlib Brotli Decompression APIs at Runtime"]
        
        subgraph Tools["๐Ÿ› ๏ธ MCP Tools & Resources"]
            direction LR
            T1["remember_decision\nSave Architecture & Fixes"]
            T2["recall_context\nBM25 Context Search"]
            T3["log_session_summary\nCross-Agent Handoff"]
            T4["user_preferences\nGlobal Coding Rules"]
        end

        ENGINE["โš™๏ธ Context Router & Workspace Isolation Engine"]
    end

    subgraph Storage["๐Ÿ’พ Local Storage (`~/.mindgate/mindgate.db` - SQLite WAL)"]
        direction LR
        DB_MEM[("๐Ÿ“Œ Memories Table\n(Decisions & Context)")]
        DB_FTS[("๐Ÿ” FTS5 Virtual Table\n(BM25 Full-Text Index)")]
        DB_SES[("๐Ÿ”„ Sessions Table\n(Agent Handoff Logs)")]
        DB_PREF[("โš™๏ธ Preferences Table\n(Developer Profile)")]
    end

    AG <--> STDIO
    OC <--> STDIO
    CX <--> STDIO
    OT <--> STDIO
    STDIO <--> GUARD
    GUARD --> Tools
    Tools --> ENGINE
    ENGINE <--> DB_MEM
    ENGINE <--> DB_FTS
    ENGINE <--> DB_SES
    ENGINE <--> DB_PREF

ASCII Architecture Overview

+-------------------+     +-------------------+     +-------------------+
|    Antigravity    |     |     OpenCode      |     |       Codex       |
+---------+---------+     +---------+---------+     +---------+---------+
          |                         |                         |
          +-------------------------+-------------------------+
                                    |
                     [ JSON-RPC 2.0 via Local STDIO ]
                     (No HTTP Server / No Brotli I/O)
                                    |
                                    v
+-----------------------------------------------------------------------+
|                    MINDGATE MCP SERVER (ุจูˆุงุจุฉ ุงู„ุนู‚ู„)                  |
|                                                                       |
|  +-----------------------------------------------------------------+  |
|  | 1. Node2Shell Security Guard (CVE-2026-111497 Protection)       |  |
|  |    - Validates Runtime Version (Node >=22.23.4 / 24.22.1 / 26)  |  |
|  |    - Hard-Blocks node:zlib Brotli Decompression APIs            |  |
|  +-----------------------------------------------------------------+  |
|                                   |                                   |
|                                   v                                   |
|  +-----------------------------------------------------------------+  |
|  | 2. MCP Tool & Resource Router                                   |  |
|  |    - remember_decision()       - log_session_summary()          |  |
|  |    - recall_context()          - set/get_user_preferences()     |  |
|  |    - list_workspaces()         - delete_memory()                |  |
|  +-----------------------------------------------------------------+  |
|                                   |                                   |
|                                   v                                   |
|  +-----------------------------------------------------------------+  |
|  | 3. Local SQLite Engine (~/.mindgate/mindgate.db - WAL Mode)     |  |
|  |    [Memories] + [FTS5 BM25 Search] + [Sessions] + [Preferences] |  |
|  +-----------------------------------------------------------------+  |
+-----------------------------------------------------------------------+

๐Ÿ›ก๏ธ Node2Shell (CVE-2026-111497) Security Architecture

Node2Shell (CVE-2026-111497) is a critical (CVSS 9.2) out-of-bounds write vulnerability (CWE-787) in the Brotli decompression library bundled with Node.js and system packages. MindGate implements 4 layers of defense-in-depth:

Security Layer

MindGate Implementation

1. Zero-HTTP stdio Transport

MindGate communicates strictly over standard input/output (StdioServerTransport). It never exposes an HTTP server, never uses body-parser, and never makes outbound fetch() requests to untrusted servers.

2. Strict package.json Engine Pinning

Enforces patched runtime versions in engines: Node.js ^22.23.4 || ^24.22.1 || >=26.12.1 or Bun >=1.4.4, rejecting EOL lines such as Node 20.

3. Startup Runtime Version Audit

src/security/node2shellGuard.ts inspects process.versions.node at startup and alerts the developer if an unpatched binary is detected.

4. Runtime node:zlib Brotli Lock

Actively neutralizes zlib.createBrotliDecompress, zlib.brotliDecompress, and zlib.brotliDecompressSync in-process, protecting Linux distributions that dynamically link against unpatched system libbrotli packages.

๐Ÿ› ๏ธ Available MCP Tools

Once connected, your AI coding assistant gains immediate access to the following tools:

Tool Name

Description

Typical AI Trigger

remember_decision

Stores an architectural decision, convention, bug root cause, or context snippet with workspace and tags.

When you establish a project rule or solve a tricky bug.

recall_context

Searches project and global memories via SQLite FTS5 (BM25) and returns the latest session handoff.

At the start of a task or before refactoring core modules.

log_session_summary

Records what was accomplished, modified files (active_files), and pending next_steps.

Before closing Antigravity so OpenCode or Codex can continue seamlessly.

set_user_preference

Saves a global developer preference (e.g., preferred stack, naming conventions, forbidden libraries).

When you state a coding habit that applies to all projects.

get_user_preferences

Retrieves all saved developer preferences and coding standards.

When bootstrapping or writing code in any workspace.

list_workspaces

Lists all active project workspaces along with memory and session counts.

When auditing stored project contexts.

delete_memory

Deletes an outdated or superseded memory entry by id.

When an architectural decision is replaced.

๐Ÿš€ Quick Start & Installation

1. Prerequisites

  • A patched Node.js runtime (v22.23.4+, v24.22.1+, or v26.12.1+) or Bun (v1.4.4+).

2. Clone & Build

git clone https://github.com/your-username/mindgate-mcp.git
cd mindgate-mcp
npm install
npm run build

Generate ready-to-paste configuration snippets for your installed tools:

node dist/index.js init

๐Ÿ”Œ Connecting Your AI Coding Tools

1. Antigravity / Claude Desktop / Cursor

Add the following entry to your MCP configuration file (or use npx -y mindgate-mcp once published to npm):

{
  "mcpServers": {
    "mindgate": {
      "command": "node",
      "args": ["/absolute/path/to/mindgate-mcp/dist/index.js"],
      "env": {
        "MINDGATE_DEFAULT_WORKSPACE": "my-project"
      }
    }
  }
}

2. OpenCode (opencode.json)

Add MindGate to ~/.config/opencode/opencode.json or your project's opencode.json:

{
  "mcp": {
    "mindgate": {
      "type": "local",
      "command": ["node", "/absolute/path/to/mindgate-mcp/dist/index.js"],
      "enabled": true
    }
  }
}

3. Codex CLI (~/.codex/config.toml)

Add the following block to your ~/.codex/config.toml:

[mcp_servers.mindgate]
command = "node"
args = ["/absolute/path/to/mindgate-mcp/dist/index.js"]

๐Ÿ“‚ Repository Structure

mindgate-mcp/
โ”œโ”€โ”€ package.json                  # Package manifest & Node2Shell engine constraints
โ”œโ”€โ”€ tsconfig.json                 # Strict TypeScript compiler configuration
โ”œโ”€โ”€ README.md                     # English documentation & architecture diagrams
โ”œโ”€โ”€ README.ar.md                  # Arabic documentation & architecture diagrams
โ”œโ”€โ”€ LICENSE                       # MIT Open-Source License
โ””โ”€โ”€ src/
    โ”œโ”€โ”€ index.ts                  # Main MCP server entrypoint & CLI init helper
    โ”œโ”€โ”€ security/
    โ”‚   โ””โ”€โ”€ node2shellGuard.ts    # Runtime CVE-2026-111497 (Node2Shell) guard & zlib lock
    โ””โ”€โ”€ db/
        โ””โ”€โ”€ memoryStore.ts        # Local SQLite WAL + FTS5 BM25 storage engine

๐Ÿค Contributing & License

Released under the MIT License. Built for the open-source developer communityโ€”contributions, issues, and feature requests (such as local vector embeddings via Transformers.js or a local Web UI) are warmly welcome!

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    A
    maintenance
    Gives AI coding agents persistent, local-first memory so they can store, semantically search, and recall decisions, preferences, error patterns, and cross-project guidelines directly during a session. It also optionally queues tasks for autonomous execution against that same memory.
    -
  • F
    license
    Not graded
    quality
    A
    maintenance
    Provides AI coding agents with a local-first persistent memory layer they can read and write during sessions, storing decisions, preferences, error patterns, and research per project or globally. Enables semantic and keyword search, formatted context recall, and cross-project guideline surfacing without API keys or cloud storage.
    -
  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables AI coding agents to read and write persistent, local-first memory so project decisions, preferences, and cross-project guidelines survive across sessions and can be retrieved by semantic search. Optionally also exposes a task queue for autonomous execution that draws on the same stored context.
    -
  • F
    license
    Not graded
    quality
    A
    maintenance
    Gives AI coding agents a local-first persistent memory they can read and write directly during sessions, storing decisions, preferences, error patterns, and guidelines in per-project and global SQLite stores. Enables semantic and keyword retrieval of relevant context across sessions so agents start work already knowing a codebase's conventions and history.
    -