MemAICAUTION
Long-term memory MCP server for AI agents — one ACID SQLite file, FTS5 BM25 retrieval, nested domains, diagrams and a local curation dashboard
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
MemAI
Long-term memory for agentic coding. One SQLite file, keyword retrieval, MCP. Built for Claude Code.
Agents call MemAI's MCP tools to write memories — facts, decisions, checkpoints, pitfalls, documented flows — during a session and read them back in later ones, which is the state an MCP server's own process does not keep between conversations.
The tools answer any MCP host. What surrounds them targets Claude Code: the hook events that put the store in front of a session, the bundled skills, and the warden subagent that consults it on a session's behalf.
Highlights
- Types, not one blob.
note,reasoning,anti_pattern,checkpoint,
task, diagram — a pitfall is read back by the tool that asks for pitfalls, not found by luck among everything else. A task is a goal and a checklist: items move through todo, doing, done and dropped, each carries its own comments and linked memories, and the task archives itself once every item is closed.
- Domains are paths. A memory filed on
acme/checkout/billingstill answers
a read of acme, and also cross-lists it under the subjects that cut across that tree.
- Keyword retrieval, nothing to download. SQLite FTS5 with BM25 over title,
content, tags and domain. No embedding model, no net
d9cf7ff3f2b5OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add memai-webui -- npx -y [email protected]
{
"mcpServers": {
"memai-webui": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (2)
2 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
_probe | read | |
full | read |
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (7 observation(s))
- Network
- declared (6 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (9)
> **Dashboard:** `http://127.0.0.1:8888` (default port). The MCP server can
const admin = `http://127.0.0.1:${process.env.MEMAI_ADMIN_PORT || '8888'}`;.release-please-manifest.json
import { esc } from '../../core/dom.ts';import { pickMemories } from '../../core/link-picker.js';import { DG_REL_SUGGEST } from '../../core/shared.js';import { confirmModal, failed, openDialog, openDropMenu, promptModal, toast } from '../../core/ui.js';import { FONT_SCALES } from '../../engines/diagram-engine.ts';`http://127.0.0.1:8888` — loopback only; `--host` / `--port` /
Gates applied: no_behavioural_pass.
d9cf7ff3f2b5full audit observations/trust-audit/mcp-server/filipe-soares-de-almeida__memai.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | d9cf7ff3f2b5 | CAUTION | B | 89 | first audit |
Questions
What is the MemAI MCP server?
Long-term memory MCP server for AI agents — one ACID SQLite file, FTS5 BM25 retrieval, nested domains, diagrams and a local curation dashboard
What tools does MemAI expose?
2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is MemAI safe to connect to an agent?
With care. The audit graded it B (89/100) and found 9 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does MemAI need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (d9cf7ff3f2b5), read on 2026-10-11. The repository is watched and re-audited when it changes.