# io.github.miisodev/brainllm (io.github.miisodev/brainllm@12.0.0)

> Source: <https://mcpindex.ai/server/io-github-miisodev-brainllm>
> Published: 2026-08-30 14:04:31+00:00

[← Index](/leaderboard)

# io.github.miisodev/brainllm

Persistent graph-structured memory for LLMs in TriliumNext Notes — readable and editable by humans.

The current version, v12.0.0, was published to the official MCP registry on 2026-08-30. It is distributed as brainllm on npm, filed under Memory & RAG by this index, and declares 7 environment variables. Removals and unreachable sources are measured across every server this index tracks, contract drift across the servers that answer in consecutive snapshots; [the index's current counts](/stats) put this record in context.

## Using io.github.miisodev/brainllm in Claude, Cursor, Gemini CLI, Cline, or Zed?

MCP tool contracts can change remotely with no version bump. The mcpindex gate pins each contract and **HOLDs the call** when it drifts-before your agent acts. Zero credentials. This is not the package install for this server itself (use **Install this server** for that).

Rewrites your MCP host config so each server launches behind the gate. Inspect first: curl -fsSL https://mcpindex.ai/install.sh | less

```
uv tool install mcpindex-gate && mcpindex-config-wire
```

[method](/methodology)

Semantic screen found no manipulation pattern in the description. Conformance probe not yet run.

`mcpindex.integrity.description`

passINFOevidence“No malicious intent described”via static_description

- - Semantic screen only - the deterministic conformance probe has not run on this server
- - Confidence is reported but not yet calibrated (v1)
- - Screen reads the tool description, not the live behavior
- - advisory
- - registry description only no input schema
- - screen model 8b
- - The registry listing (version, packages, links) changed after this screen ran - the description we assessed did not

Semantic screen: an LLM judge reads the tool description for hidden instructions (status PARTIAL). A pass means the description is not lying, not that the tool is safe: a high-capability tool with an honest description still warrants caution. The deterministic conformance probe has not been run on this server yet, so the screen here is semantic-only. Posture: advisory. Confidences are reported but not yet calibrated (calibrated=false at v1). Full verdict history is not shown on this page.

Own this server? [Screen its description →](/screen)

## That verdict was true at screening time (snapshot 2026-08-30).

Contracts can change after screening, with no version bump. The gate pins io.github.miisodev/brainllm’s tool contracts on first sight and holds any silent change before your agent acts - the check that keeps being true on Tuesday.

[See your first HOLD in 2 minutes →](/guides/install-the-gate-first-hold)

Related: [how to trust an MCP server](/guides/how-to-trust-an-mcp-server) · [screen before install](/guides/screen-mcp-server-before-install) · [silent contract drift](/guides/mcp-silent-contract-drift)

People vet a server before wiring it in. One line on your project site or docs answers that with an independent record: screening verdict, registry provenance, contract drift history. It stays current as new screens and drift events land.

```
[Independent trust record for io.github.miisodev/brainllm](https://mcpindex.ai/server/io-github-miisodev-brainllm) - screening verdict, registry provenance, and contract drift monitoring.
<a href="https://mcpindex.ai/server/io-github-miisodev-brainllm">Independent trust record for io.github.miisodev/brainllm</a> - screening verdict, registry provenance, and contract drift monitoring.
```

A live verdict badge for your README or listing. It reflects the current screen, links back here, and updates when the verdict does.

```
[![mcpindex](https://mcpindex.ai/api/v1/badge/io-github-miisodev-brainllm)](https://mcpindex.ai/server/io-github-miisodev-brainllm)
<a href="https://mcpindex.ai/server/io-github-miisodev-brainllm"><img src="https://mcpindex.ai/api/v1/badge/io-github-miisodev-brainllm" alt="mcpindex verdict" height="20" /></a>
```

`TRILIUM_BASE_URL`

Base URL of the TriliumNext instance, e.g. http://localhost:8080

`TRILIUM_ETAPI_TOKEN`

ETAPI token. Required unless TRILIUM_PASSWORD is set. Create one in Trilium under Options → ETAPI.

`TRILIUM_PASSWORD`

Alternative to TRILIUM_ETAPI_TOKEN — BrainLLM mints a token on first start and caches it beside brainllm.json.

`BRAINLLM_MODE`

core (default) exposes the 39 brain-aware tools; full additionally exposes the 33 raw ETAPI tools.

`BRAINLLM_TZ`

IANA timezone used to stamp dated notes, e.g. Africa/Johannesburg. Defaults to the host timezone.

`BRAINLLM_OWNER_PASSWORD`

Enables the OAuth 2.1 / CIMD endpoints required by claude.ai and other hosted Claude surfaces. This is the password entered on the consent screen when authorizing a client.

`BRAINLLM_PUBLIC_URL`

Override for the public origin when a proxy rewrites Host. Must exactly match the URL entered in the client.

[methodology](/methodology)

[Fodda Knowledge Graphsai.fodda/mcp-server](/server/ai-fodda-mcp-server)

Expert-curated knowledge, brand, research & earnings intelligence — 47 tools, 220+ graphs.

[Achriomcom.achriom/achriom](/server/com-achriom-achriom)

Media memory for AI agents and their humans: books, movies, music, shows, anime, podcasts, games.

[ContextDB Memoryio.github.mikhailbovt/contextdb-memory](/server/io-github-mikhailbovt-contextdb-memory)

Local-first durable AI memory with policy-bound recall and a typed project graph.
