Agent Memory MCP
Markdown memory for AI agents.
Connector by xultrax-web · GitHub account verified by the MCP Registry
Install
Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/xultrax-web-agent-memory-mcp
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 14 read · 7 write · 1 delete · 2 not yet classified
- Secrets
- None asked for
- Install scripts
- Not scanned yet
- Runs as
- Node.js package
Tools by what they do 24
Read from the source code; the running server may list different tools.
Read 14 · Look things up without changing anything.
auditcheck_actiondoctorfind_backlinksfind_relatedget_memorylist_memorieslist_ruleslog_eventsrelevant_memoriessearch_memoriesstats
Show 2 more tools
validate_receiptverify_memory
Write 7 · Create, change, send or run things.
initrestore_memorysave_memorysave_rulesync_pullsync_pushsync_status
Delete 1 · Delete, drop, revoke or wipe things.
delete_memory
Not yet classified 2 · We could not tell from the name and description.
emit_companionsrotate_key
Secrets and settings it asks for
Other settings (environment variables or headers).
AGENT_MEMORY_DIRAGENT_MEMORY_LOGAGENT_MEMORY_SCOPE
Tools (24)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
auditv0.11.4 · operational health report for the rule store. Surfaces: rule count by severity, stale rules (last_verified > 90 days or null), pattern conflicts (two rules sharing an enforce_on category AND an identical regex pattern), recent check_action denials, and recent unreceipted destructive ops. Default returns pretty-printed text; pass {format: 'json'} for structured output. Run daily-ish · the report is fast and gives the operator a single view of what's drifting.
check_actionv0.11.3 · the protocol enforcement point. Pass a proposed action description + its category; the server matches against rule memories (type=rule) and either: - APPROVES: returns a short-lived Compliance Receipt (HMAC-signed, 60s default) the agent can pass to destructive tools (e.g. delete_memory) as proof of compliance. - DENIES: returns structured hard_violations (severity:hard rules that block) and/or soft_warnings (severity:soft rules that warn but allow). Tier 1 (deterministic) matches the action against rule.matches regexes + rule.enforce_on category filter. Works on every MCP clien…
delete_memoryMove a memory to .trash/ (soft delete). The file is removed from the index but recoverable via restore_memory until you manually empty .trash/. Receipt REQUIRED and bound to THIS memory: first call check_action({action: 'delete memory <name>', action_type: 'deletions'}) — using that EXACT action string — to obtain a fresh Compliance Receipt, then pass it as `receipt`. The receipt must carry {action_type: 'deletions'} AND the matching action_hash for 'delete memory <name>', and is single-use — it cannot be replayed to delete a different memory or the same one twice.
doctorCheck storage integrity. Reports orphan files (on disk but not indexed), dangling index entries (no file), unreadable files, and invalid types. Pass rebuild-index=true to reconstruct MEMORY.md from disk.
emit_companionsRegenerate companion rule files from the current rule memories. Writes one or more of: AGENTS.md (universal cross-tool standard, Linux Foundation), CLAUDE.md (Claude Code's 5-level hierarchy), .cursor/rules/*.mdc (Cursor's MDC format · hard rules get alwaysApply:true, soft rules become description-driven), .gemini/instructions.md (Gemini CLI). Default writes ALL four targets. Use `targets` to filter. Output dir resolves from `out_dir`, then AGENT_MEMORY_COMPANION_DIR env, then process.cwd().
find_backlinksList memories that link to the given memory via [[wiki-link]] syntax in their bodies. Useful for building a 'what references this' view.
find_relatedSurface memories related to a given one. Ranks by combining: outbound [[wiki-links]], inbound backlinks, shared tags, same type, and content similarity (name + description). Use this to navigate the memory graph by association rather than by exact lookup.
get_memoryFetch a single memory by name.
initInstall a starter guardrail pack — sensible hard/soft rules (protect main, block rm -rf, no prod data destruction, no curl|sh, flag secrets) — and emit them to every tool's companion files. Zero-config protection on day one. Pass force=true to overwrite same-named rules. Pair with `agent-memory install-hooks` so hard rules actually block tool calls.
list_memoriesList stored memories, optionally filtered by type and/or tags. Paginated.
list_rulesList every active rule memory with severity, scope, and staleness markers (>90 days since last_verified). Use this to audit which rules are currently constraining the agent.
log_eventsRead recent entries from the audit event log (.events.jsonl). Returns the last N events, optionally filtered by action.
relevant_memoriesFind memories relevant to a query and return their FULL content (not summaries). Designed for LLM ingestion — call this when the assistant needs context on a topic and the memory index alone isn't specific enough. Returns up to `max` memories as a markdown document.
restore_memoryRestore a memory from .trash/ back into the active store. Picks the most recent trash entry for the name.
rotate_keyRotate the receipt-signing key material (HMAC and/or Ed25519). Generates fresh keys and INVALIDATES every outstanding Compliance Receipt. Use after a suspected key leak — e.g. the .keyring was ever committed or synced. Optional `mode`: 'hmac' | 'ed25519' | 'both' (default 'both').
Show 9 more tools
save_memorySave (or update) a memory. Memories are markdown files with YAML frontmatter, stored at the resolved memory dir. Use a short kebab-case name; the description is what's shown in the index and used for search ranking.
save_ruleSave (or update) a rule memory · the 'memory as constraint' wedge. Rules constrain agent behavior, not just store facts. Severity 'hard' = must obey; 'soft' = prefer to obey. Rules auto-project out to AGENTS.md (read by Claude Code, Codex CLI, Cursor, Aider, Devin, Copilot, Gemini CLI, Windsurf, and Amazon Q natively) when AGENT_MEMORY_AUTO_EMIT_DIR is set, or via the emit_companions tool on demand.
search_memoriesFuzzy search across name, description, and body. Tolerates typos, word-order shifts, and partial matches. Returns top matches with relevance scores (0-100) and body-context snippets. Use this for human-readable browsing.
statsDashboard of memory-store state: counts per type, total size, largest memory, audit-log size, trash count.
sync_pullPull memory updates from the configured git remote (fast-forward only). Run at the start of a session to get memories saved on other machines. Refuses to pull if there are uncommitted local changes.
sync_pushCommit any local memory changes and push to the configured git remote. Auto-generates a timestamped commit message if none provided. Use at the end of a session to make memories available on your other machines.
sync_statusReport the git-sync state of the memory store: remote URL, branch, local uncommitted files, commits ahead/behind origin. Use this before opening a new session to know if you have stale memories from another machine.
validate_receiptValidate a CRP 1.1 (Ed25519) Compliance Receipt issued by ANOTHER agent-memory server using that server's published public key — no shared secret (the federation primitive). Checks signature, expiry, and required caveats. Pass `receipt` (object or JSON string) and `public_key` (inline PEM or a file path; the issuer gets theirs via `agent-memory export-pubkey`).
verify_memoryRe-evaluate a memory's claims against signals in its content. Extracts URLs, dates, and file paths from the body; flags stale-date signals on project-type memories; returns type-specific verification heuristics for the LLM or operator to act on. Pairs with the audit_stale prompt.
Signals
- Stars
- 1
- Forks
- 0
- Open issues
- 0
- Last commit
- Jun 27, 2026 (4 months ago)
- Last release
- Jun 4, 2026 (4 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
io.github.xultrax-web/agent-memory-mcp- Version
- 0.15.0
- Auth
- No auth
- Packages
- npm @xultrax-web/agent-memory-mcp
- License
- MIT
- Repository
- github.com/xultrax-web/agent-memory-mcp
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
Cite this page
Agent Memory MCP. Agent Mart. https://agentmart.dev/connectors/xultrax-web-agent-memory-mcp (last updated 2026-10-24)