Product

Memory MCP

A persistent memory server for any MCP-compatible AI agent. Transcripts, searchable memories, a knowledge graph and a relationship ledger, all in one local file. No cloud.

Linux only. Windows is coming soon. macOS is not tested. Please check this before you buy.

€135one-off

No subscription, pay once
All 0.x updates included
14-day refund, see the refund policy

Buy now, €135

The price includes any applicable tax.

What you get

Local-first

Everything lives in a single SQLite file on your own device. No cloud component, no telemetry and no account.

Encrypted at rest

Memories, transcripts, reflections and observations are sealed with AES-256-GCM before they touch disk, so a copied database or backup holds ciphertext.

Personas

Give each agent its own persona and memory. Scope memories by user when a persona is shared, and let an agent keep a working or personal relationship with its user.

Nothing silently overwritten

Corrections refute the old claim and add a new one. Forgetting archives a memory instead of erasing it. Commitments and repairs are tracked the same way.

You stay in control

Per-user consent categories, an audit log of every read and write, and diagnostics that are off unless you turn them on.

Works with your client

Standard MCP over stdio, with HTTP available, and 74 tools. Point any MCP-compatible agent at it.

What it stores

Four kinds of data, each with its own purpose.

Kind	What it is
Transcripts	The raw, verbatim conversation record. Append-only.
Memories	Distilled facts, preferences, summaries and events, found again with hybrid search and de-duplicated automatically.
Knowledge graph	Named entities, typed relations and free-text observations.
Relationship ledger	What the agent believes about the user, itself and the relationship, each claim linked to its evidence.

Security and privacy

Content is encrypted at rest by default with AES-256-GCM.
The key store sits in its own directory with restrictive file permissions. There is deliberately no passphrase, so the server can open its own memory on every start.
No telemetry, and no licence server. The software never phones home to check your licence or look for updates.

The default embedding model is downloaded once on first run, then it works fully offline.
Diagnostics are opt-in, and contain only aggregate counts and version strings, never your content.
Using an external embeddings API is an explicit choice you make. It is not the default.

The full detail is in the privacy policy.

What you need

Python 3.11 or newer.
An internet connection while installing and on first run. Installation pulls its dependencies, and the first run downloads a one-time embedding model of about 50 MB. After that it runs fully offline.
Developed and tested on Linux. Windows support is coming soon. macOS has not been tested.

To be clear: this is not a self-contained offline installer. It needs the internet once, at setup, and then it does not.

Honest limitations

We would rather you know these before you buy.

Back up your encryption keys. The key folder lives apart from the database, and an encrypted backup cannot be read without it. Your data and keys never leave your machine, so we cannot recover them for you.
Encrypted content cannot be keyword-searched. Recall uses semantic (meaning-based) search, which is the trade-off for encryption at rest.
The relationship safety check is a pattern list, not a semantic classifier. A sufficiently different phrasing can slip past it. It is a safeguard, not a guarantee.
De-duplication, decay and contradiction flagging are heuristics. They are not verified understanding.
It is built for one local user. It is not a multi-tenant system, and user scoping is bookkeeping, not authorisation.
File-permission hardening is tested on Linux only.

Getting started

After purchase you download the package from your order, and you can re-download it at any time. Install it with pip using the step-by-step instructions included, then register it once, globally: add the full path of the memory-mcp command inside the environment you installed it into to your client's user-level (global) MCP settings, not to a single project or session. If it is only added to one session, your other sessions start without it and cannot reach your memory. Registered globally, every session in every folder shares the same memory:

{
  "mcpServers": {
    "memory": {
      "command": "memory-mcp"
    }
  }
}

Your download also includes an Agent Manual, written to your AI agent. It covers installing and connecting, the rules for every turn, all 74 tools, triggers, hooks and skills, and comes with a rulebook skill and reference hooks for Claude Code.

Updates arrive by re-downloading from your order. The software never checks for them itself.

Questions first? Get in touch.