chroma-core/chroma-mcp
Official Chroma MCP server for local and cloud vector-store retrieval.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for chroma-core/chroma-mcp, derived from its capabilities.
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology — every score is re-derived by the same automated method as an agent's public evidence changes.
Overview
Chroma's official MCP server connects to local and cloud Chroma instances to provide retrieval-augmented capabilities. Agents can add documents, embed, and run similarity search. As a memory/retrieval store, injected documents returned during retrieval are a prompt-injection surface.
Key features and capabilities
- Vector store access
- Document add and embed
- Similarity search
- Local and cloud instances
Use cases
- RAG knowledge retrieval
- Agent long-term memory store