MCP servers · by job

Memory & knowledge MCP servers

330 MCP servers that give an agent long-term memory, notes and a knowledge base. 69 are SAFE, 83 CAUTION and 178 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Memory & knowledge MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/memory/page/11

Verdicts · 330 servers

✓SAFE69!CAUTION83✕BLOCK178

Transports

A server can list more than one transport.

Tool risk

108

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 10 tools.

Servers with no destructive tools →

330 memory & knowledge servers

241–264 of 330 · ranked by trust score, then stars

willow-mcp

willow-memory/willow-mcp

!CAUTION F

Agent-neutral MCP server with persistent memory (SOIL + Postgres KB) and a sandboxed task queue. Manifest-based ACL; works with any stdio MCP client.

★ 35 writestdio

statelessagent

rerecoy123/statelessagent

✕BLOCK F

🧠 Provide local-first persistent memory for AI coding workflows, indexing notes to deliver relevant context in new sessions.

★ 1Not listed in sourcestdio

Pensyve

major7apps/pensyve

✕BLOCK F

Universal memory runtime for AI agents

★ 951 destructivestdio

memory-os-cli

yonro/memory-os-cli

✕BLOCK F

XMemo: user-owned Memory OS for AI agents. Public client (@xmemo/client), MCP distribution, Skills and plugins.

★ 121 writestdio

SOAT — open-source infrastructure for production-ready AI ag

ttoss/soat

✕BLOCK F

SOAT — open-source infrastructure for production-ready AI agents.

★ 41 destructive

prax

lodsb/prax

✕BLOCK F

A self-hosted library for the papers and web pages one person reads: hybrid search, a graph whose links cite their sentence, and an MCP interface for agents

★ 39 write

MARM

lyellr88/marm-systems

✕BLOCK F

Local-first 3-in-1 AI memory layer & MCP server for Claude Code, Codex, Grok, Gemini, VS Code and Cursor. Fuses session history, codebase indexing & concept graphs in SQLite. Enables zero-cloud, privacy-first context & instant recall, supports multi-agent swarms.

★ 41011 readstdio

SuperLocalMemory

qualixar/superlocalmemory

✕BLOCK F

Open-source governed, local-first memory control plane for AI agents and teams. arXiv:2608.08253

★ 2273 readstdio

neo-agent-brain

neomjs/neo-agent-brain

✕BLOCK F

Point a cross-model AI engineering team at your own codebases. The Agent OS keeps named AI maintainers' identity, memory and review across labs alive between sessions — the Brain Neo.mjs runs on itself. Multi-tenant: onboarding a codebase is a config entry, not a fork.

★ 1140 readstdio

Engram

patdolitse/engram

✕BLOCK F

Local-first AI memory you can see, edit, and override — portable across Claude Code, Codex, Cursor, Windsurf, and other MCP coding tools.

★ 162Not listed in sourcestdio

Piia-Engram

patdolitse/piia-engram

✕BLOCK F

Local-first AI memory you can see, edit, and override — portable across Claude Code, Codex, Cursor, Windsurf, and other MCP coding tools.

★ 162Not listed in sourcestdio

Remindb

radimsem/remindb

✕BLOCK F

An agentic memory database that cuts session tokens by 82–99%. One portable SQLite file — your agent's memory, anywhere.

★ 1291 writestreamable-http

Roampal

roampal-ai/roampal

✕BLOCK F

Memory that learns what works.

★ 1271 destructivestdio

Synorive

arturoaeriform174/Synorive

✕BLOCK F

Search your files by meaning and fact-check the web, fully offline.

★ 026 readstdio

Beever Atlas

beever-ai/beever-atlas

✕BLOCK F

Your First LLM-Wiki Conversation Knowledge Base

★ 4482 writestdio

platform

GCTRL-TECH/platform

✕BLOCK F

Governed graph-native agent memory: knowledge extraction, fusion, hybrid RAG, scoped access tokens. A push for data sovereignty.

★ 76 readstdio

cachly — experience for coding agents (MCP server)

cachly-dev/cachly-mcp

✕BLOCK F

Solve it once. From then on, your AI knows. Experience for coding agents over MCP, EU-hosted. 124 MCP tools.

★ 25 destructivestdio

llm-wiki-compiler

atomicstrata/llm-wiki-compiler

✕BLOCK F

The knowledge compiler. Raw sources in, interlinked wiki out. Inspired by Karpathy's LLM Wiki pattern.

★ 2,1824 writestdio

lense

adeelahmad/lense

✕BLOCK F

Lens: intelligence for your agent. Safe, secure and cost-effective. A self-hosted, cited knowledge graph and MCP server for your agents, from a Raspberry Pi to the cloud.

★ 05 readstreamable-http

whitemagic

lbailey94/whitemagic

✕BLOCK F

Local-first, governed memory and session continuity for AI coding agents, over MCP - verifiable handoffs via signed continuity receipts. Rust, MIT, no telemetry by default.

★ 0Not listed in sourcestdio

Vestige

samvallad33/vestige

✕BLOCK F

Cognitive deterministic memory transaction security kernel for agents, that traces backwards to find the root cause and not the lookalike

★ 639Not listed in sourcestdio

Axon

ali-kamali/axon.mcp.server

✕BLOCK F

Transform your codebase into an intelligent knowledge base for AI-powered development with Cursor IDE, Google AntiGravity, and MCP-enabled assistants

★ 16622 readstdio

eklavya

ProjectAJ14/eklavya

✕BLOCK F

Learn while your agent works. A Claude Code plugin that quizzes you on the concepts behind the code it just wrote — local knowledge graph, spaced repetition, optional commit gate.

★ 101 destructivestdio

engram

the-long-ride/engram

✕BLOCK F

Engram - file-system-based memory management system for AI agents that grows with you & your teams, across agents, projects, and devices.

★ 64 write

Other jobs

By risk

Questions

How do you decide which servers are memory & knowledge servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which memory & knowledge MCP servers rank highest on trust?
Graphiti (getzep/graphiti), Memory Bank (alioshr/memory-bank-mcp) and Knowledge Graph Memory (shaneholloman/mcp-knowledge-graph), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many memory & knowledge servers only read?
88 of the 330 declare tools that all only read; 108 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.