Atlas / MCP servers / encreor / RLM Claude

RLM ClaudeCAUTION

mcp/encreor/rlm-claude

Recursive Language Models for Claude Code - Infinite memory solution inspired by MIT CSAIL paper

Verdict
CAUTION
Grade
B
Trust score
89 /100
Exposed tools
14 13r · 1w · 0d
Transport
streamable-http
License
MIT
Stars
39
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Your Claude Code sessions forget everything after /compact. RLM fixes that.

[](https://opensource.org/licenses/MIT) [](https://www.python.org/downloads/) [](https://modelcontextprotocol.io) [](https://github.com/EncrEor/rlm-claude/actions/workflows/ci.yml) [](https://codecov.io/gh/EncrEor/rlm-claude) [](https://pypi.org/project/mcp-rlm-server/)

Français | English | 日本語

The Problem

Claude Code has a context window limit. When it fills up:

  • /compact wipes your conversation history
  • Previous decisions, insights, and context are lost
  • You repeat yourself. Claude makes the same mistakes. Productivity drops.

The Solution

RLM is an MCP server that gives Claude Code persistent memory across sessions:

You: "Remember that the client prefers 500ml bottles"
→ Saved. Forever. Across all sessions.

You: "What did we decide about the API architecture?"
→ Claude searches its memory and finds the answer.

3 lines to install. 14 tools. Zero configuration.

Quick Install

Requirements: Python 3.10+ (download), Claude Code CLI

Via PyPI (recommended)

pip install mcp-rlm-server[all]

The hooks and templates ship inside the package. Since a pip install gives you no repo checkout, ask the package where they landed:

python -m mcp_server --hooks-dir       # e.g. .../site-packages/mcp_server/hooks
python -m mcp_server --templates-dir

Point your `~/.claud

Read from source at commit 392b6526789aOBSERVED · 2026-10-08
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add mcp-rlm-server -- uvx mcp-rlm-server
claude-desktop
{
  "mcpServers": {
    "mcp-rlm-server": {
      "command": "uvx",
      "args": [
        "mcp-rlm-server"
      ]
    }
  }
}
03

Exposed tools (14)

13 read · 1 write · 0 destructive.

ToolRiskDescription
rlm_chunkread
rlm_domainsread
rlm_forgetread
rlm_grepread
rlm_list_chunksread
rlm_peekread
rlm_recallread
rlm_rememberread
rlm_restoreread
rlm_retention_previewread
rlm_retention_runwrite
rlm_searchread
rlm_sessionsread
rlm_statusread
04

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (3 observation(s))
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (4)

MEDIUMInventory / provenance · inv.symlink · CWE-1104
mcp_server/server.py
mcp_server/server.py
Why it matters. link not followed
MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862
streamable-http
Why it matters. a network transport with no auth environment variable found
Fix. require a token
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
install.sh:88
"$SCRIPT_DIR/../../CLAUDE.md"        # Two levels up
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
uninstall.sh:297
"$(cd "$(dirname "$0")" 2>/dev/null && pwd)/../../CLAUDE.md" \

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha 392b6526789afull audit observations/trust-audit/mcp-server/encreor__rlm-claude.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-08392b6526789aCAUTIONB89first audit
06

Questions

What is the RLM Claude MCP server?

Recursive Language Models for Claude Code - Infinite memory solution inspired by MIT CSAIL paper

What tools does RLM Claude expose?

14 in total: 13 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is RLM Claude safe to connect to an agent?

With care. The audit graded it B (89/100) and found 4 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does RLM Claude need?

No credential environment variables were found in its source, so it appears to need none.

How does RLM Claude run?

It speaks streamable-http, so it runs as a service you connect to over the network. It is published on PyPI as mcp-rlm-server.

How current is this page?

The grade is for one exact copy of the source (392b6526789a), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement