Add ArrowMem plugin - #581
Open
ArrowMem-inc wants to merge 5 commits into
Open
ArrowMem-inc wants to merge 5 commits into
ArrowMem-inc wants to merge 5 commits into
Conversation
The previous pin, 8646b90, contained only .mcp.json and LICENSE. The README was added two commits later, so a reviewer fetching the pinned tree got no setup instructions and no tool list at all. 08c18ca carries .mcp.json, LICENSE and README.md, verified public and reachable on origin/main before pinning. Its README lists all six free tools, including check_ollama_loopback, and names both key-gated tools. validate-catalog.py and generate-plugin-index.py --check both pass. The regenerated index changes one line, this plugin's sha; no other entry moved.
…claim The previous pin, 08c18ca, told readers the hardening guide needs a paid subscription. It is free, and that subscription cannot be bought today. 942e326 fixes the README against the live endpoint proven tool by tool (nine free, one paid) and adds inventory_ai_agents, which the old README omitted.
The source repo README named only one paid tool (check_exposed_services) though a second, enrol_alert_relay, has existed for a while. 51f9141 fixes that and corrects the "one tool needs a key" line to say two. Free tool count and README content otherwise unchanged. validate-catalog.py and generate-plugin-index.py --check both pass. The regenerated index changes one line, this plugin's sha; no other entry moved. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RBpPekyXRYD3QP6Xa3JMsX
Author
|
Refreshed 2026-09-09: the source pin moves to 51f91418361026290f4f51c14d1a4b5bf4a5ac7d, whose README names all nine free tools and both key-gated tools (which stay outside this listing). Catalog entry and plugin index regenerated with the repo's own scripts; validate-catalog and generate-plugin-index --check both pass. The PR body above is corrected to match. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this PR does
Adds a new plugin: ArrowMem, a remote MCP server for people running their own local AI models. Nine free tools: an Ollama loopback-exposure check that returns the complete fix on failure, the full Ollama hardening guide, a hardening check against that guide, an inventory of the MCP servers configured on the user's own machine, ArrowMem's privacy and security architecture, a local-model explainer, the open Data Dignity Standard, org information, and the assistant pack list. MCP-only: no skills, commands, agents, hooks, or LSP servers.
51f91418361026290f4f51c14d1a4b5bf4a5ac7dOwnership
sourcerepo is published under our official org (or I've explained why not below).Checklist
.grok-plugin/marketplace.json(valid JSON, kebab-casename).sha, and that commit is public + reachable..grok-plugin/plugin-index.json(python3 scripts/generate-plugin-index.py).python3 scripts/validate-catalog.pypasses locally.python3 scripts/generate-plugin-index.py --checkpasses locally.homepage+ cleardescriptionset; local plugins includeREADME.md+.grok-plugin/plugin.json.Security
curl | bash, remote-code download/exec, orpostinstallRCE..env, or env vars.https://mcp.arrowmem.ca/mcponly. That is the ArrowMem MCP server itself; the plugin is a config pointing at it and calls nothing else.Notes for reviewers
The plugin repo contains a
.mcp.json, a README, and a license, nothing executable. All tools are read-only: they return documents or a check result, and none write to, modify, or install anything on the user's machine.