Security & Testing

arrowmem.ca

ArrowMem Guard is a security diagnostic MCP server that checks exposed services and self-hosted model server hardening, loopback reachability, and alert relay enrollment from locally produced diagnostic output.

1 endpoint14 known toolsFirst detected October 9, 2026Last detected October 9, 2026

ENDPOINT 1

https://mcp.arrowmem.ca/mcp

No auth detected

MCP server metadata

Name: arrowmem-public
Version: 0.1.0

Capabilities

tools

Known tools 14

check_exposed_services

ArrowMem Guard's machine security sweep, given diagnostic output your own machine (or AI tool) already produced locally - this tool never reaches your machine or network, it only reasons over what you send it.

Potential side effects

check_ollama_hardening

Checks whether a self-hosted model server install still matches the hardening guide's defaults, given the diagnostic output your own machine (or AI tool) already produced locally - this tool never reaches your machine or network, it only reasons over what you send it.

Potential side effects

check_ollama_loopback

Checks one thing: whether your self-hosted model server is reachable from outside the machine.

Inferred read-only

disable_alert_relay

Ends this API key's ArrowMem Guard alert relay enrolment.

Inferred read-only

enrol_alert_relay

Enrols this API key in the ArrowMem Guard alert relay (the watchdog page and the family 'Is It Really Me' check).

Inferred read-only

get_arrowbridge_info

ArrowBridge, the local-first / own-hardware half of ArrowMem's privacy design - what it does today and what is still planned, not live.

Inferred read-only

get_data_dignity_standard

The Data Dignity Standard (v0.

Inferred read-only

get_hardening_guide

The full, live-tested procedure for hardening a self-hosted model server (mesh-only reachability, loopback-only bind, unique per-install credentials, disk encryption, a doctor script).

Inferred read-only

get_org_info

ArrowMem Inc.

Inferred read-only

get_privacy_model

ArrowMem's privacy and security architecture: zero retention, client-side encryption, processing-location disclosure, and how the business is funded without reading user content.

Inferred read-only

get_verified_business_facts

Looks up hand-verified facts about a local business by name and city: legal name, locations, published prices (each with its source URL and the date it was verified), hours, an ownership statement, the audit date, and what is not yet verified.

Inferred read-only

inventory_ai_agents

Lists every AI tool configuration on this machine and every tool each one exposes at the config level, plus which agent hosts could not be checked and why.

Inferred read-only

list_packs

The specific government disability-claim packs that run inside ArrowMem, and how the optional cross-device sync tier works.

Inferred read-only

rotate_alert_relay

Replaces part of this API key's ArrowMem Guard alert relay enrolment.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.arrowmem-public]
url = "https://mcp.arrowmem.ca/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "arrowmem-public": {
      "type": "http",
      "url": "https://mcp.arrowmem.ca/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: arrowmem-public
Remote MCP URL: https://mcp.arrowmem.ca/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "arrowmem-public": {
      "url": "https://mcp.arrowmem.ca/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "arrowmem-public": {
      "type": "http",
      "url": "https://mcp.arrowmem.ca/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "arrowmem-public",
  "transport": "streamable-http",
  "url": "https://mcp.arrowmem.ca/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for arrowmem.ca was fetched 2026-10-10T05:00:02.186Z.

Trust status Neutral

arrowmem.ca is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.