npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

@hlsitech/memorify

v0.2.0

Published

Pair AI coding clients with Memorify (MCP gateway) — device-flow pairing, no secrets pasted into chats

Vulnerabilities

Powered byPowered by Snyk
  • 0High
  • 0Medium
  • 0Low

Links

Git

Maintainers

hlsitech1hlsitech1

Keywords

mcpmodel-context-protocolclaudecursorwindsurfcopilotagent-memory

Readme

@hlsitech/memorify

Pair AI coding clients (Claude Code, Cursor, Windsurf, VS Code, Codex, Gemini CLI, …) with a Memorify MCP gateway using a device-code flow: you approve the agent in your browser, so no secret is ever typed or pasted into a chat.

npx @hlsitech/memorify pair

The package name matters. The unscoped memorify package on npm belongs to an unrelated third party — always use @hlsitech/memorify.

What it does

  1. Detects installed MCP clients (or use --client cursor,claude-code).
  2. Requests a pairing code from https://memorify.dev, opens the approval page, and waits for you to approve.
  3. Writes the MCP server entry into each client's config (owner-only permissions, previous file backed up once as <file>.memorify.bak). An unparseable config is never overwritten.

Other commands: memorify whoami, memorify clients, memorify mcp (a stdio⇄HTTP bridge for stdio-only clients such as Claude Desktop).

Prefer no token at all?

Clients that support OAuth for remote MCP servers don't need this CLI:

claude mcp add --transport http memorify https://memorify.dev/mcp
# then run /mcp in Claude Code and choose Authenticate

Security model

  • Tokens are scoped, read-only by default, short-lived, and revocable from your dashboard.
  • The CLI only talks to https://memorify.dev. A custom --host requires --allow-custom-host because that server would receive your token. Every URL returned by the server must be https and on the same origin.
  • The browser is opened without a shell, so a hostile URL cannot inject commands.
  • Tokens are read from MEMORIFY_TOKEN or ~/.memorify/credentials.json (mode 600) — there is no --token flag, because command-line arguments are visible to other processes.
  • Releases are published from GitHub Actions with npm provenance, so you can verify the package was built from this repository.

Config files written by this tool contain a live token. Don't commit them (the CLI adds project-local files to .git/info/exclude when it can).

Reporting vulnerabilities

See SECURITY.md.

License

MIT. The hosted Memorify service is proprietary; only this CLI is open source.