Atlas / MCP servers / scanadi / AI Memory

AI MemoryCAUTION

mcp/scanadi/ai-memory-1

A production-ready Model Context Protocol (MCP) server for semantic memory management

Verdict
CAUTION
Grade
B
Trust score
89 /100
Exposed tools
25 17r · 5w · 3d
Transport
stdio
License
MIT
Stars
49
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://www.npmjs.com/package/mcp-ai-memory) [](https://opensource.org/licenses/MIT)

A production-ready Model Context Protocol (MCP) server for semantic memory management that enables AI agents to store, retrieve, and manage contextual knowledge across sessions.

📖 System Prompt Available: See SYSTEM_PROMPT.md for a comprehensive guide on how to instruct AI models to use this memory system effectively. This prompt helps models understand when and how to use memory tools, especially for proactive memory retrieval.

Features

Core Capabilities

  • TypeScript - Full type safety with strict mode
  • PostgreSQL + pgvector - Vector similarity search with HNSW indexing
  • Kysely ORM - Type-safe SQL queries
  • Local Embeddings - Uses Transformers.js (no API calls)
  • Intelligent Caching - Redis + in-memory fallback for blazing fast performance
  • Multi-Agent Support - User context isolation
  • Token Efficient - Embeddings removed from responses

Advanced Memory Management

  • Graph Relationships - Rich relationship types (references, contradicts, supports, extends, causes, precedes, etc.)
  • Graph Traversal - BFS/DFS algorithms with depth limits and filtering
  • Memory Decay - Automatic lifecycle management with exponential decay
  • Memory States - Active, dormant, archived, and expired states
  • Preservation - Protect important memories from decay
  • Soft Deletes - Data recovery with deleted_at timestamps
  • Clustering - Automatic memory consolidation
  • Compression - Automatic compression of archived memories

Prerequisites

  • Node.js 18+ or Bun
  • PostgreSQL with pgvector extension
  • Redis (optional - falls back to in-memory cache if not available)

Installation

NPM Package (Recommended for Claude Desktop)

npm install -g mcp-ai-me
Read from source at commit c94ca28a585bOBSERVED · 2026-10-08
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add mcp-ai-memory -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "mcp-ai-memory": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (25)

17 read · 5 write · 3 destructive. Blast radius: 3 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
conversation-contextreadLoad conversation history and context
last_nreadNumber of recent messages to load
limitreadMaximum number of memories to load
load-contextreadLoad relevant context for a task
max_memoriesreadMaximum number of memories to include
memory-summaryreadGenerate a summary of memories for a topic
memory_batchwriteBATCH BULK MULTIPLE IMPORT - Store multiple memories at once for efficiency. Keywords: batch, bulk, multiple, import, mass store, save many, store all, bulk import, batch save
memory_batch_deletedestructiveBATCH DELETE BULK REMOVE - Delete multiple memories at once. Keywords: batch delete, bulk remove, mass delete, delete many, remove all, clear multiple
memory_consolidatewriteCONSOLIDATE MERGE CLUSTER DEDUPLICATE - Group and merge similar memories to reduce redundancy. Keywords: consolidate, merge, cluster, deduplicate, group, combine, compress, organize
memory_decay_statusreadDECAY STATUS LIFECYCLE STATE - Get decay status and lifecycle information for a memory including state, decay score, and preservation status. Keywords: decay, status, lifecycle, state, age, freshness, preservation, expiry
memory_deletedestructiveDELETE REMOVE FORGET ERASE - Delete a specific memory by ID. Keywords: delete, remove, forget, erase, clear, purge, discard, eliminate, destroy memory, remove fact, forget information
memory_get_relationsreadGET RELATIONS SHOW LINKS - Get all relationships for a specific memory. Keywords: get relations, show links, list connections, view relationships, find associations
memory_graph_analysisreadGRAPH ANALYSIS CONNECTIVITY DEGREE - Analyze graph connectivity for a memory including degree metrics and relation type distribution. Keywords: graph analysis, connectivity, degree, network metrics, connections count
memory_graph_searchreadGRAPH RELATED CONNECTED NETWORK - Search memories and traverse relationships to find connected information. Keywords: graph, related, connected, network, relationships, linked, associated, traverse connections
memory_preservereadPRESERVE PROTECT KEEP PIN - Preserve a memory from decay, optionally until a specific date. Keywords: preserve, protect, keep, pin, save, retain, bookmark, favorite
memory_relatewriteRELATE LINK CONNECT ASSOCIATE - Create a relationship between two memories. Keywords: relate, link, connect, associate, join, bind, reference, attach
memory_statsreadSTATS STATUS INFO METRICS - Get database statistics, counts, and health metrics. Keywords: stats, status, info, metrics, statistics, counts, summary, overview, database info
memory_storewriteSTORE SAVE REMEMBER CREATE - Store new information, facts, preferences, conversations, or knowledge. Use after searching to avoid duplicates. Keywords: save, remember, store, record, memorize, learn, retain, persist, create memory, add knowledge, save fact, store preference, remember conversation
memory_traversereadTRAVERSE EXPLORE GRAPH WALK - Traverse memory graph using BFS/DFS from a starting memory. Includes filtering by relation types, memory types, tags, and depth limits. Keywords: traverse, explore, graph, walk, navigate, follow, path, connections, network
memory_unrelatedestructiveUNRELATE UNLINK DISCONNECT - Remove a relationship between two memories. Keywords: unrelate, unlink, disconnect, detach, unbind, separate
memory_updatewriteUPDATE MODIFY EDIT CHANGE - Update existing memory metadata, tags, confidence, or importance. Keywords: update, modify, edit, change, revise, amend, alter, adjust, correct, fix, improve memory, update fact, change information
session_idreadThe session ID to load
taskreadThe task to load context for
topicreadThe topic to summarize
user_contextreadUser context to filter memories
04

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (6 observation(s))
Network
none-observed
Shell
none-observed
Dependencies
not all pinned
Secrets in source
found

Findings (8)

MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321
.github/workflows/ci.yml:105
MEMORY_DB_URL: postgresql://postgres:postgres@localhost:5432/mcp_ai_memory_test
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
memory_batch_delete, memory_delete, memory_unrelate
Why it matters. 3 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/database/migrations/002_current.ts:2
import type { Database } from '../../types/database.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/database/migrations/003_fix_embeddings.ts:2
import type { Database } from '../../types/database.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/database/migrations/004_regenerate_embeddings.ts:2
import { EmbeddingService } from '../../services/embedding-service.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/database/migrations/004_regenerate_embeddings.ts:3
import type { Database } from '../../types/database.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/database/migrations/004_regenerate_embeddings.ts:4
import { extractTextForEmbedding } from '../../utils/text-extraction.js';
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@modelcontextprotocol/sdk, @types/node-cache, @xenova/transformers, bullmq, dotenv, ioredis, kysely, node-cache
Why it matters. 18 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha c94ca28a585bfull audit observations/trust-audit/mcp-server/scanadi__ai-memory-1.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-08c94ca28a585bCAUTIONB89first audit
06

Questions

What is the AI Memory MCP server?

A production-ready Model Context Protocol (MCP) server for semantic memory management

What tools does AI Memory expose?

25 in total: 17 read-only, 5 that write, and 3 that can delete or overwrite (memory_batch_delete, memory_delete, memory_unrelate). Every one is listed on this page with its risk.

Is AI Memory safe to connect to an agent?

With care. The audit graded it B (89/100) and found 8 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 3 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does AI Memory need?

No credential environment variables were found in its source, so it appears to need none.

How does AI Memory run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as mcp-ai-memory at 2.0.0.

How current is this page?

The grade is for one exact copy of the source (c94ca28a585b), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement