MCP servers · by job

Memory & knowledge MCP servers

330 MCP servers that give an agent long-term memory, notes and a knowledge base. 69 are SAFE, 83 CAUTION and 178 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Memory & knowledge MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/memory/page/10

Verdicts · 330 servers

✓SAFE69!CAUTION83✕BLOCK178

Transports

A server can list more than one transport.

Tool risk

108

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 10 tools.

Servers with no destructive tools →

330 memory & knowledge servers

217–240 of 330 · ranked by trust score, then stars

mnemo

n24q02m/mnemo

✕BLOCK F

Persistent AI memory with hybrid search and embedded sync. Open, free, unlimited.

★ 12Not listed in sourcestreamable-http

kai

Aurite-ai/kai

✕BLOCK F

🧠 Kai is a context engineering platform. It's persistent memory for AI coding copilots. Teach it once, surface context automatically. MCP server for Claude Code.

★ 81 destructivestdio

www-project-agent-memory-guard

OWASP/www-project-agent-memory-guard

✕BLOCK F

OWASP Foundation web repository

★ 1835 readstdio

Sverklo

sverklo/sverklo

✕BLOCK F

Repo memory for coding agents. Local-first MCP for Claude Code, Cursor, Windsurf, and Codex CLI: symbol graph, blast radius, diff-aware review, and git-pinned decisions. MIT; no API keys or code upload.

★ 812 destructivestdio

Enquire

oomkapwn/enquire-mcp

✕BLOCK F

The #1 Obsidian MCP for AI memory — freshness-aware, cited, local-first and read-only by default. Dataview, Bases, PDFs, every agent.

★ 345 writestdio

Lorekit

mthines/lorekit

✕BLOCK F

Free, open source, local & remote, persistent memory for your AI coding agents.

★ 185 destructivestreamable-http

Inference Gateway CLI

inference-gateway/cli

✕BLOCK F

A Git-first CLI coding agent that turns ideas, issues, and tasks into real code changes. It can run remotely from your mobile phone or automate your computer.

★ 78 readstreamable-http

AgentChat

shy2593666979/agentchat

✕BLOCK F

AgentChat 是一个基于 LLM 的智能体交流平台,内置默认 Agent 并支持用户自定义 Agent。通过多轮对话和任务协作,Agent 可以理解并协助完成复杂任务。项目集成 LangChain、Function Call、MCP 协议、RAG、Memory、HITL、Skill、Milvus 和 ElasticSearch 等技术,实现高效的知识检索与工具调用,使用 FastAPI 构建高性能后端服务。

★ 9022 readstdio

Search Scrape

devshero/search-scrape

✕BLOCK F

A unified web extraction and stateful automation engine for AI. Replaces heavy testing frameworks with token-optimized browser control, deep research, and HITL.

★ 707 read

Curion

geanatz/curion

!CAUTION F

Curion is a project-local memory layer for AI coding agents, published as an MCP server for Claude Code, Codex, OpenCode, and other MCP clients.

★ 3311 readstdio

rocky

poggufanz/rocky

!CAUTION F

A blind alien engineer who listens to your terminal, never forgets, and makes sure you still understand your own code.

★ 21 destructive

Shodh-Memory

varun29ankus/shodh-memory

✕BLOCK F

Local, LLM-free memory for AI agents. A single offline Rust binary — deterministic and auditable — that learns from use, forgets the irrelevant, and strengthens what matters. No cloud, no API keys.

★ 3018 destructivestdio

Task Orchestrator

jpicklyk/task-orchestrator

✕BLOCK F

Server-enforced workflow discipline for AI agents. An MCP server providing persistent work items, dependency graphs, quality gates, and actor attribution. Schemas define what agents must produce — the server blocks the call if they don't. Works with any MCP-compatible client.

★ 2076 readstdio

Context Sync

intina47/context-sync

✕BLOCK F

Local persistent memory store for LLM applications including continue.dev, cursor, claude desktop, github copilot, codex, antigravity, etc.

★ 1903 writestdio

Context Lattice

sheawinkler/contextlattice

✕BLOCK F

The local-first intelligence layer that gives AI agents durable continuity, explainable retrieval, portable context, and verified learning across harnesses.

★ 1531 readstreamable-http

Dense-Mem

markhuangai/dense-mem

!CAUTION F

Self-hosted AI agent memory server with MCP, evidence provenance, typed claims, conflict detection, embeddings, recall, PostgreSQL, and pgvector

★ 396 readstreamable-http

Nextcloud

cbcoutinho/nextcloud-mcp-server

!CAUTION F

Nextcloud MCP Server

★ 3732 writestdio

NeuronDB

neurondb/neurondb

✕BLOCK F

NeuronDB PostgreSQL extension: vector similarity search (HNSW, IVFFlat), embeddings, kNN, ML in SQL, and hybrid full-text + vector retrieval.

★ 511 read

MemTether

MemTether/MemTether

✕BLOCK F

Cross-client AI memory hub — one physical SQLite, many clients. File-level pointers, REST API, Web Dashboard, MCP. Zero cloud. Dual-timeline governance. PyPI: memtether

★ 2Not listed in sourcestdio

prjct-cli

prjct-app/cli

✕BLOCK F

The agentic harness for AI coding agents — intelligence is rented, the harness is owned. Runs the full work cycle: intent briefs, bounded RAG context from real code intelligence, persistent memory, preventive guardrails, and performance evals. One CLI + MCP server, SQLite inside. Claude Code, Codex,

★ 11 destructive

Cuba-Memorys

leandropg19/cuba-memorys

✕BLOCK F

Persistent memory MCP server for AI agents — Rust, 19 tools, knowledge graph, Hebbian learning, episodic memory, contradiction detection, prospective triggers, Bayesian calibration, zero-config Docker setup.

★ 29Not listed in sourcestdio

Infona Oss

infona-ai/infona-oss

✕BLOCK F

Messy CSV, JSON, or text → one LLM schema pass → deterministic rows into Neo4j → ask in English (Cypher).

★ 63 destructivestdio

Vault

zycaskevin/vault-agent-memory

✕BLOCK F

Local-first memory governance for AI agents: shared, reviewable, auditable memory via SQLite and MCP.

★ 501 write

Vault for LLM

zycaskevin/vault-for-llm

✕BLOCK F

Local-first memory governance for AI agents: shared, reviewable, auditable memory via SQLite and MCP.

★ 501 write

Other jobs

By risk

Questions

How do you decide which servers are memory & knowledge servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which memory & knowledge MCP servers rank highest on trust?
Graphiti (getzep/graphiti), Memory Bank (alioshr/memory-bank-mcp) and Knowledge Graph Memory (shaneholloman/mcp-knowledge-graph), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many memory & knowledge servers only read?
88 of the 330 declare tools that all only read; 108 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.