kb-memory
rag-kb — Lokaler Agent-Gedächtnisdienst + Multi-Agent-Kollaborationssystem
English | Deutsch
Dieses Repository enthält zwei Subsysteme (ROADMAP):
Subsystem | Kurzbeschreibung | Status |
kb | Lokaler, vollständig kostenloser Agent-Gedächtnis- und Wissensdienst (Kernprodukt, Hauptentwicklungslinie) | v1.0.1 produktionsreif |
agent-orchestra | Taskübergreifendes Multi-Agent-Kollaborationssystem auf Basis des gemeinsamen kb-Taskboards (❄️ Wartungsmodus, eigenes Gerüst) | B1-B3 eingefroren |
Open-Source-Lizenz: Apache-2.0 (inklusive Patentlizenz, kommerziell nutzbar).
kb — Local-First-Agent-Gedächtnis- und Wissensdienst
Windows-Einzelprozess-Dauerbetrieb (python -m kb serve), Doppelprotokoll REST + MCP; stellt Claude Code / Cursor / TraeWork / selbst erstellten Agents das Schreiben von Erinnerungen, das Aufnehmen von Dokumenten und Webseiten, hybride Suche (Vektor + BM25/RRF-Fusion) und RAG-Fragenbeantwortung bereit.
Ohne LLM sind Zugriff und Suche vollständig nutzbar – das Schreiben von Erinnerungen, die Dokumentaufnahme und die hybride Suche hängen von keinem großen Modell ab; nach Konfiguration von lokalem Ollama oder Cloud-API wird die /ask-Fragenbeantwortung automatisch aktiviert.
Related MCP server: mnemostack
Kernfunktionen
Dauerbetrieb im Einzelprozess: Ein
python -m kb servebietet gleichzeitig REST-API- und MCP-Endpunkte, ohne zusätzliche KomponentenHybride Suche: BGE-M3-Vektorsuche + BM25-Keywordsuche, RRF-Fusions-Ranking, chinesische Segmentierung freundlich
Optionale Neubewertung:
KB_RERANK_ENABLED=trueaktiviert bge-reranker-v2-m3-Cross-Encoder-Reranking (standardmäßig aus)Optionaler dritter Pfad:
KB_SPARSE_ENABLED=trueaktiviert den dritten BGE-M3-Sparse-Vektor-Pfad (standardmäßig aus, bei Fehlern automatischer Fallback auf zwei Pfade)
Erinnerungsverwaltung: Schreiben / Aktualisieren / Löschen / Auflisten, unterstützt Filterung nach namespace, tags, type
Multi-Client-/Projektisolierung (v2): Isolationsschlüssel =
(client, project), Identität wird von der Umgebung getragen, nicht von der KI selbst angegeben – client wird automatisch aus MCP clientInfo erkannt (auf Framework-Ebene vertrauenswürdig), project wird von Verbindung/Verzeichnis getragen (Standard = Standard-Bucket dieses Clients); persönliche Erinnerungen sind nur für diesen Client + dieses Projekt sichtbar (Lesen/Ändern/Löschen durch andere wird abgelehnt), geteiltes Dokument-/Webseitenwissen ist für alle Clients sichtbar; Primärschlüssel werden serverseitig generiertZugriffs-Audit: Jeder Schreib-/Lese-/Änderungs-/Lösch-/Such-/Fragevorgang wird als JSON in
logs/agent-audit/<客户端>__<项目>.loggeschrieben (nach client+project getrennte Dateien); Benutzer können abfragen: RESTGET /api/v1/audit?client=<客户端>[&project=<项目>]oder CLIkb audit --client <客户端>Wissensaufnahme: Lokale Dokumente (txt/md/pdf/docx usw.) per Upload oder Pfadimport, Webseiteninhalte werden extrahiert und aufgenommen
Verzeichnisüberwachung: Neu hinzugefügte oder gelöschte Dateien im angegebenen Verzeichnis werden automatisch aufgenommen/bereinigt (
KB_WATCH_DIR)CLI-Werkzeuge:
kb add/search/stats/ask/eval/forget/dedup– direkt im Terminal Schreiben, Suchen, Statistiken und RAG-Fragenbeantwortung ausführenDatenschutz-Guardrail: Sensible namespaces erzwingen lokale Antworten ohne Datenabfluss ins Internet;
/askintelligentes Routing (lokal zuerst, schwierige Fragen optional in die Cloud)Offline verfügbar: Modelle und Daten liegen vollständig lokal; ohne Netzwerk sind Zugriff und Suche voll funktionsfähig
Schnellstart (Windows / Linux / macOS)
Windows PowerShell:
# 1. 创建并激活虚拟环境
python -m venv venv
.\venv\Scripts\Activate.ps1
# 2. 安装依赖
pip install -r requirements.txt
# 3. 启动服务(默认监听 http://127.0.0.1:8000)
python -m kb serveLinux / macOS:
# 1. 创建并激活虚拟环境
python3 -m venv venv
source venv/bin/activate
# 2. 安装依赖
pip install -r requirements.txt
# 3. 启动服务
python -m kb serveWichtig: Der Befehl
kbwird nur in der virtuellen Umgebung installiert. In jedem neuen Terminal muss zuerst die virtuelle Umgebung aktiviert werden (Windows.\venv\Scripts\Activate.ps1, Linux/macOSsource venv/bin/activate), sonst erscheint die Meldungkb:未找到命令. Mitpython -m kb <子命令>lässt sich die Aktivierung umgehen.Alternative Schnellinstallation (ohne virtuelle Umgebung, Python 3.10+):
pip install --user -r requirements.txtund dann mitpython -m kb serveausführen; es wird jedoch empfohlen, bevorzugt venv zur Isolierung der Abhängigkeiten zu verwenden.
Gesundheitscheck nach dem Start:
curl http://127.0.0.1:8000/api/v1/healthzBeim ersten Start wird das lokale Embedding-Modell geladen (standardmäßig BAAI/bge-m3, ca. 2 GB, muss vorab heruntergeladen und zwischengespeichert werden); wenn kein LLM konfiguriert ist, startet der Dienst wie gewohnt;
/askliefert 503 und Konfigurationshinweise zurück.LLM ist standardmäßig deaktiviert (
KB_LLM_MODE=off): Der Dienststart erkennt/lädt/ruft kein großes Modell auf, null VRAM, null Kosten, rein offline; Erinnerungen schreiben, Dokumentaufnahme und hybride Suche sind vollständig nutzbar. Wenn RAG-Fragenbeantwortung (/ask) benötigt wird, konfigurieren Sie wie unten ein lokales oder Cloud-LLM.
LLM konfigurieren (optional, für die /ask-Fragenbeantwortung erforderlich)
KB_LLM_MODE ist standardmäßig off (wird nicht geladen und nicht aufgerufen); vier Stufen:
Stufe | Verhalten |
| LLM wird überhaupt nicht geladen/aufgerufen; Erinnerungszugriff und Suche vollständig nutzbar |
| Nur lokales Ollama (vollständig offline, Datenschutz ohne Abfluss nach außen) |
| Lokal bevorzugt, Cloud-Fallback: Wenn lokales Ollama verfügbar ist, wird lokal verwendet; wenn kein lokales, aber ein Cloud-Schlüssel vorhanden ist, in die Cloud |
| Alles über die Cloud (lokal nur Komprimierung und Datenschutzisolierung) |
Lokales LLM (Ollama):
# 1. 安装并启动 Ollama(Windows 从开始菜单/托盘启动,不要从 AI 沙箱终端拉起)
# 2. 拉取一个适合你电脑的模型(按显存/内存选择,如 qwen3:4b 约 3.2GB、
# qwen3:1.7b 约 1.8GB;国内可用魔搭加速,拉完 ollama cp 改成短名)
ollama pull <你的模型名>
# 3. 在 .env 配置后重启服务:
# KB_LLM_MODE=local # 仅本地
# KB_LLM_MODEL=<你的模型名> # 以 `ollama list` 输出的名称为准
# KB_OLLAMA_BASE_URL=http://localhost:11434Cloud-LLM (beliebiger OpenAI-kompatibler Anbieter, nicht an DeepSeek gebunden): DeepSeek / OpenAI / 通义千问 / 硅基流动 / Moonshot usw. sind möglich, allgemein drei Schlüssel:
# .env
KB_LLM_MODE=auto # 本地优先、云端降级;或 cloud 全云端
KB_LLM_API_KEY=sk-xxx # 服务商 API Key
KB_LLM_BASE_URL=https://api.deepseek.com # 换成你所用服务商的 OpenAI 兼容端点
KB_LLM_CLOUD_MODEL=deepseek-v4-flash # 云端模型名Überprüfung: Das Feld llm von GET /api/v1/healthz – local/cloud bedeutet, das LLM ist bereit, disabled bedeutet nicht aktiviert.
Häufige Probleme: Download des Embedding-Modells schlägt fehl
Bei direkter Verbindung aus dem chinesischen Festland zu
huggingface.cokommt es zu Zeitüberschreitungen. HF-Mirror setzen und neu starten:export HF_ENDPOINT=https://hf-mirror.com # 或写入 ~/.bashrc 永久生效 python -m kb serveDas Modell wird automatisch vom Mirror heruntergeladen und in
~/.cache/huggingface/hub/zwischengespeichert; danach kann es auch ohne Netzwerk offline geladen werden.Modell ist lokal zwischengespeichert, aber kein externes Netzwerk:
kbverwendet Offline-First (zuerst lokalen Cache treffen, nur bei Fehlschlag online gehen); solange das Cache-Verzeichnis vollständig ist, läuft es vollständig offline.
Agents an kb anbinden (clientunabhängig)
Übergeben Sie die Integrationsspezifikation von kb an den KI-Client (TraeWork / Claude Code / Cursor / selbst erstellte Agents), damit diese wissen, wie sie Erinnerungen lesen und schreiben, nach welcher Identitätskonvention sie vorgehen und wie sie das Audit abfragen. Zwei Wege, wählen Sie einen davon:
Skill (empfohlen, kann automatisch ausgelöst werden) – optionaler, unabhängiger Schritt: Das
skills/kb-memory/SKILL.mdim Repository ist ein clientunabhängiger Skill im offenen Anthropic-Format. Nach der Installation im Benutzer-Skills-Verzeichnis des von Ihnen verwendeten Clients wird der Skill in jeder Projektsitzung dieses Clients beim Lesen/Schreiben von Erinnerungen / RAG-Fragenbeantwortung / Audit-Abfragen automatisch erkannt und ausgelöst. Installation = einfach das Verzeichnisskills/kb-memorydorthin kopieren (es gibt ein Skript, manuelles Kopieren ist ebenfalls möglich, keine Abhängigkeiten erforderlich); Aktualisierung (erneutes Überschreiben), Deinstallation sowie Nutzungshinweise nach der Installation finden Sie inscripts/README.md.Das Nichtinstallieren beeinträchtigt den kb-Dienst nicht: Der Skill ist nur eine „Prompt-Verpackung“ für KI-Clients und hat nichts mit Installation und Start des Dienstes zu tun – überspringen Sie diesen Schritt, der Dienst läuft normal weiter; Sie können jederzeit über die reinen Text-Prompts aus Methode 2 anbinden; die Skill-Installation ist einmalig, bei Bedarf und unabhängig ausführbar; sie wird nicht automatisch mit
kb serveausgelöst und schreibt keine Dateien außerhalb der Verzeichnisse Ihres Clients.Reiner-Text-Prompt (Fallback, universell für jeden Client): Den gesamten Abschnitt aus
docs/AGENT_PROMPT.mdkopieren und dem Agent einfügen; keine Skill-Mechanik nötig.
Sind
.trae-cn/skills/.claude/skills/.cursor/skillsein von allen Clients anerkannter „Standard“? – Nein. Diese sind lediglich die benutzerbezogenen Konventionsverzeichnisse der jeweiligen Clients:SKILL.mdselbst ist ein einheitliches offenes Anthropic-Format, aber „in welches Verzeichnis installiert wird und ob automatisch ausgelöst wird“, entscheidet jeder Client selbst; der Unterstützungsgrad ist unterschiedlich:
Client | Benutzerbezogenes Skills-Verzeichnis | Automatisches Laden |
TraeWork |
| Automatische Erkennung |
Claude Code |
| Von höheren Versionen unterstützt |
Cursor |
| Wird schrittweise übernommen |
Andere / selbst erstellte Agents | Keine einheitliche Konvention | Muss manuell geladen werden oder nicht unterstützt |
Es gibt kein einheitliches Verzeichnis, dem „alle Clients folgen“; wenn Ihr Client Skills nicht unterstützt, gibt es immer Methode 2 als Fallback (
AGENT_PROMPT.mdeinfügen, reiner Text für jeden Client nutzbar). Installationsmethode, Verzeichnisunterschiede und Lademechanismen der Clients sowie gegenseitige Referenzbeziehungen: Details finden Sie inscripts/README.md(hier nicht wiederholt).
MCP-Einbindung
MCP-Endpunkt (streamable HTTP): http://127.0.0.1:8000/mcp/
Claude Code: Dieses Repository enthält bereits ein projektweites .mcp.json; beim Start von Claude Code in diesem Verzeichnis wird es automatisch eingebunden;
es kann auch global hinzugefügt werden:
claude mcp add --transport http kb http://127.0.0.1:8000/mcp/Cursor / TraeWork und andere MCP-fähige Clients: Fügen Sie in der MCP-Konfiguration folgendes JSON hinzu
(Cursor in ~/.cursor/mcp.json oder Projekt-.cursor/mcp.json; TraeWork unter Einstellungen MCP-Server hinzufügen):
{
"mcpServers": {
"kb": {
"type": "http",
"url": "http://127.0.0.1:8000/mcp/"
}
}
}Nach der Einbindung verfügbare MCP-Tools: write_memory / search_memory / read_memory /
update_memory / delete_memory / add_document / add_webpage / ask_kb.
Nach Aktivierung der
KB_API_KEY-Authentifizierung müssen MCP-Clients in der Verbindungskonfigurationheadershinzufügen (Authorization: Bearer <key>); die.mcp.json-Vorlage im Repository enthält keinen echten Schlüssel (JSON unterstützt keine Kommentare); die Konfiguration finden Sie in USER_GUIDE §5.2.
REST-Endpunkte im Überblick
Methode | Pfad | Beschreibung |
POST |
| Erinnerung schreiben |
GET |
| Erinnerungsliste, unterstützt Filterung nach |
GET |
| Einzelne Erinnerung lesen |
PATCH |
| Inhalt oder Tags aktualisieren |
DELETE |
| Einzelne Erinnerung löschen |
POST |
| Hybride Suche |
POST |
| Dokumentaufnahme: multipart-Feld |
GET |
| Liste der aufgenommenen Dokumente (nach source aggregiert) |
DELETE |
| Alle Datensätze dieses Dokuments nach source löschen |
POST |
| Webseitenaufnahme |
POST |
| RAG-Fragenbeantwortung |
GET |
| Gesundheitscheck und Dienststatistiken |
GET |
| Statistiken zur Erinnerungs-Governance: |
GET |
| Governance-Konfiguration: Schalter und Parameter für Abklingen + Frische (nur lesen) |
POST |
| Nach Aktivieren der semantischen Deduplizierung ( |
Erinnerungs-Governance (Deduplizierung/Abklingen/Frische) ist standardmäßig deaktiviert, null Verhaltensänderungen; Verwendung siehe USER_GUIDE §3.5.
Beispiel:
# 写入一条记忆
curl -X POST http://127.0.0.1:8000/api/v1/memories `
-H "Content-Type: application/json" `
-d '{"content": "用户偏好深色主题", "tags": ["偏好"]}'
# 混合检索
curl -X POST http://127.0.0.1:8000/api/v1/search `
-H "Content-Type: application/json" `
-d '{"query": "用户界面偏好", "top_k": 5}'
# RAG 问答(需配置 LLM)
curl -X POST http://127.0.0.1:8000/api/v1/ask `
-H "Content-Type: application/json" `
-d '{"question": "用户喜欢什么主题?"}'Konfigurationsparameter im Überblick
Alle Konfigurationen werden über Umgebungsvariablen mit KB_-Präfix oder über die Datei .env bereitgestellt; die vollständigen Schlüsselnamen finden Sie in .env.example
(nach dem Kopieren in .env ausfüllen; .env ist durch gitignore abgedeckt, echte Schlüssel nur auf dem lokalen Rechner aufbewahren, auf keinen Fall einchecken).
Konfiguration | Standardwert | Beschreibung |
|
| LLM-Modus: |
| leer | Gerät für das Embedding-Modell: leer=automatische Erkennung, explizit |
|
| Im serve-Modus überwachtes Verzeichnis; Dateiänderungen werden automatisch aufgenommen; leere Zeichenkette oder |
|
| Wurzelverzeichnis der Laufzeitdaten (ChromaDB, Laufzeitstatus usw.) |
|
| Listening-Adresse für REST und MCP |
|
| Embedding-Modell |
| leer | Lokaler Ollama-Modellname (Standard leer=nicht konfiguriert; bei |
|
| Ollama-Endpunkt |
| leer | Cloud-LLM (optional): beliebiger OpenAI-kompatible Anbieter (DeepSeek / OpenAI / 通义 / 硅基流动 usw.), nur in die lokale |
|
| Parameter für Dokeumentsegmentierung |
| leer | Kommagetrennte sensible namespaces; bei Treffer wird lokale Antwort erzwungen, ohne Datenabfluss ins Internet |
| leer | leer=keine Authentifizierung (lokale Schleife ohne Reibung); nicht leer=Bearer/X-API-Key-Authentifizierung aktiviert; orchestra-Clients senden automatisch den Header |
|
| Feinranking der Suche (A3.5): fusierte Kandidaten werden per CrossEncoder neu bewertet, standardmäßig aus |
|
| Dritter Sparse-Pfad (A3.5): BGE-M3-Sparse-Vektoren + invertierter Index nehmen an der RRF-Fusion teil, standardmäßig aus |
CLI-Schnellübersicht (ohne Dienststart)
python -m kb add "记忆内容" --tags 偏好 --client TraeWork # 写入(project 缺省自动取当前目录名)
python -m kb search "查询词" --client TraeWork # 混合检索(只回本客户端+本项目的 memory)
python -m kb stats # 统计:类型分布 / 访问热度 / 陈旧分布
python -m kb ask "问题" --client TraeWork # 终端 RAG 问答(LLM 不可用时输出检索命中)
python -m kb audit --client TraeWork --days 7 # 查某客户端/项目存过/读过什么
python -m kb eval --file tests/eval_zh_50.jsonl # 检索质量评测(Recall@1/@5 + MRR)
python -m kb forget --stale --days 90 # 清理超期未命中记忆
python -m kb dedup --threshold 0.92 # 语义去重
kb askverbindet sich direkt mit der lokalen Dienstlogik (nicht über HTTP); empfohlen, wennservegestoppt ist, um Schreibkonkurrenz zweier Prozesse auf die Datenbank zu vermeiden.
agent-orchestra — Multi-Agent-Kollaborationssystem (experimentell)
Mehrere KI-Assistenten (verschiedene TraeWork-Aufgaben / Claude-Code-Sitzungen, Modelle können unterschiedlich sein) entwickeln über das gemeinsame kb-Taskboard kollaborativ: Die Koordinator-KI zerlegt Karten und verteilt sie, die Worker-KI übernimmt Karten und führt sie aus (eine Karte pro Runde) und schreibt Ergebnisse zurück; der Koordinator prüft und lässt den Workflow weiterlaufen.
# 前置:kb serve 已运行。开一个新 TraeWork 任务,粘贴以下引导语即可唤醒一个 worker:
venv\Scripts\python.exe orchestra\board.py new-worker worker-1Die vollständige Verwendung (wie der Koordinator Karten zerlegt, wie mehrere Worker parallel arbeiten, Kollaborationsdisziplin und bekannte Einschränkungen) finden Sie in Benutzerhandbuch, Abschnitt 4.
Verzeichnisstruktur
kb/ kb 服务源码(config / models / embedder / storage / bm25 / retriever /
service / llm / ingest / watcher / api / mcp / cli + reranker / sparse / eval)
tests/ kb 验收测试(339 项,含 eval_zh_50.jsonl 检索评测数据集)
orchestra/ 多 Agent 协作系统(board.py CLI + 协议三件套 + skill + 245 项测试)
docs/ 设计文档、节点计划、用户使用手册
kb_data/ kb 运行数据(gitignore)
_archive/ 旧学习项目归档(仅保留历史,禁止参考)Weitere Dokumentation
Benutzerhandbuch (Einstieg für menschliche Benutzer): docs/USER_GUIDE.md
KI-Übergabedokument (Einstieg für KI-Assistenten): PROJECT.md (Projektstatus / Fortschritts-Board / Übergabeanleitung)
Designdokument (Anforderungen, Architektur, API, Meilensteine):
docs/superpowers/specs/2026-08-23-kb-memory-service-design.mdP2-Logging-Design:
docs/superpowers/specs/2026-08-24-logging-design.mdP2-Roadmap:
docs/superpowers/plans/2026-08-24-p2-roadmap.mdKnoten-Entwicklungsplan:
docs/superpowers/plans/2026-08-23-kb-dev-nodes.mdKI-Kollaborationsrichtlinien:
AGENTS.md
Available Tools
8 toolsadd_documentA
导入本地文档(PDF/DOCX/MD/TXT 及 Office 格式)切分入库; 返回 {"source": 文件名, "chunks": 块数};文件不存在或格式不支持时 返回 {"error": "FILE_NOT_FOUND" | "UNSUPPORTED_FORMAT", "message": 原因}。 project/client:仅用于审计归类;文档 chunk 为共享知识,所有客户端可检索。 client:来源客户端(可选,缺省从 clientInfo 自动识别)。 English: Import a local document (PDF/DOCX/MD/TXT and Office formats), split and ingest it; returns {"source": filename, "chunks": count}; when the file is missing or the format is unsupported returns {"error": "FILE_NOT_FOUND" | "UNSUPPORTED_FORMAT", "message": reason}. project/client: audit bucketing only; document chunks are shared knowledge, searchable by all clients.
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | ||
| client | No | ||
| project | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and largely meets it: it discloses the split-and-ingest side effect, the two error modes with exact error codes, and the shared-knowledge behavior. It does not mention permissions or idempotency, but it is still substantially transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the verb, formats, and return contract, and the bilingual duplication is structured rather than rambling. It is longer than necessary because of the translation, but every section carries useful information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given there is no output schema, the description supplies the return shape and error contract. Given there are no annotations, it also discloses the shared-knowledge side effect. A small gap remains around path qualification and prerequisites, but the agent has enough context to call the tool and interpret results.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does add useful meaning for project/client: audit bucketing only and optional client auto-detection from clientInfo. However, the required path parameter is never explicitly described, and its format is only implied by 'local document' and FILE_NOT_FOUND.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific action: import and ingest a local document. It names supported formats, states the exact return shape, and contrasts naturally with the sibling add_webpage by requiring a local path.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description tells the agent this is for local files, that project/client are audit-only, and that ingested chunks become shared knowledge searchable by all clients. It does not explicitly name alternatives or state when not to use it, but the local-file requirement and the presence of add_webpage imply the boundary.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
add_webpageA
抓取网页正文并切分入库;返回 {"source": url, "chunks": 块数}; 抓取/正文提取失败时返回 {"error": "WEB_FETCH_FAILED", "message": 原因}。 project/client:仅用于审计归类;web chunk 为共享知识,所有客户端可检索。 client:来源客户端(可选,缺省从 clientInfo 自动识别)。 English: Fetch a webpage body and ingest it after splitting; returns {"source": url, "chunks": count}; on fetch/body-extraction failure returns {"error": "WEB_FETCH_FAILED", "message": reason}. project/client: audit bucketing only; web chunks are shared knowledge, searchable by all clients.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | ||
| client | No | ||
| project | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral disclosure burden. It clearly specifies success return shape, failure error code, project/client's audit-only role, and that web chunks are shared knowledge searchable by all clients, while also noting client auto-detection.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The main action and return behavior are front-loaded and the structure is logical, but the content is duplicated across Chinese and English sections, making it longer than strictly necessary. Each sentence does not fully earn its place because of the near-verbatim repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no annotations and no output schema, the description provides crucial invocation details: success/error returns, parameter roles, and sharing semantics. Minor gaps remain around url parameter documentation and any size/format constraints, but the core usage context is sufficiently complete for an agent to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 0% description coverage, so the description must compensate. It explains that client is optional and defaults from clientInfo, and that project/client are audit-only, but it does not describe the url format or project individually beyond the grouped statement.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('抓取网页正文并切分入库' / 'Fetch a webpage body and ingest it after splitting') with a clear resource: a webpage. This distinguishes it from siblings like add_document and write_memory, which handle documents and memory respectively.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for ingesting web pages into shared knowledge, and clarifies that project/client are only for audit bucketing. However, it does not explicitly compare against alternatives like add_document, nor state when one should choose this tool over them.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ask_kbA
基于知识库的 RAG 问答(检索 → 上下文拼装 → 护栏生成),返回 answer 与 sources; v2:检索按当前 (client, project) 隔离 memory(doc/web 共享),并写 ask 存取审计; client:来源客户端(可选,缺省从 clientInfo 自动识别); LLM 不可用时返回 {"error": "LLM_DISABLED", "message": 配置指引}。 English: Knowledge-base RAG Q&A (retrieve → build context → guarded generation), returning answer and sources; v2: retrieval isolates memory by the current (client, project) (doc/web shared); an ask access-audit is emitted; client: source client (optional; auto-detected from clientInfo when omitted); returns {"error": "LLM_DISABLED", "message": setup guidance} when the LLM is unavailable.
| Name | Required | Description | Default |
|---|---|---|---|
| client | No | ||
| project | No | ||
| question | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden, and it is notably forthcoming: it discloses the retrieve-to-generation pipeline, retrieval scoping by (client, project) with doc/web memory shared, an emitted ask access-audit, client auto-detection from clientInfo, and the exact shape of the LLM-unavailable error response. These are concrete behavioral traits beyond a basic read, especially the audit side effect and error contract.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The core purpose is front-loaded and the content is logically segmented into pipeline, v2 behavior, client semantics, and error handling. However, the entire description is duplicated in Chinese and English, which roughly doubles the length without adding information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and sparse input schema, the description covers the important operational details: return shape (answer and sources), memory scoping, the audit side effect, and LLM-unavailable error handling. It does not specify the exact structure of sources or how the current (client, project) is fully resolved, but these are minor relative to what is disclosed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must add parameter meaning, and it does so only partially. It clearly explains client (optional, auto-detected from clientInfo) and indirectly ties project to memory isolation, but it does not define project's role directly nor describe the expected form/content of the required question parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a concrete action and resource: 'Knowledge-base RAG Q&A' / '基于知识库的 RAG 问答', with a described pipeline and return values (answer and sources). It is far from a tautology, but it does not explicitly contrast itself with sibling tools such as search_memory or read_memory.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'Knowledge-base RAG Q&A' and the memory-isolation note imply use for natural-language questions grounded in the KB rather than for memory CRUD or document ingestion. However, the description offers no explicit when-to-use, when-not-to-use, or alternative-tool guidance, so an agent must infer the decision.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_memoryA
按 ID 删除一条记忆;成功返回 {"ok": true},记录不存在返回 {"error": "NOT_FOUND"}; 非 (client, project) 归属返回 {"error": "FORBIDDEN"}。 client:来源客户端(可选,缺省从 clientInfo 自动识别)。 English: Delete a memory by ID; returns {"ok": true} on success and {"error": "NOT_FOUND"} when it does not exist; non-(client, project) owners get {"error": "FORBIDDEN"}.
| Name | Required | Description | Default |
|---|---|---|---|
| client | No | ||
| project | No | ||
| record_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It does well by specifying success and error return shapes, including NOT_FOUND and FORBIDDEN ownership restrictions. It could further disclose that the deletion is permanent and irreversible, but the core behavioral surface is covered.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded with the core operation and return values. The bilingual repetition adds some length but is acceptable given multilingual context. No filler or irrelevant details are present.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple delete tool with no output schema and no annotations, the description covers the main operation, the three return states, the ownership restriction, and the optional client parameter. Minor gaps remain around project semantics and explicit irreversibility, but overall an agent has enough to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It adds useful meaning for client by saying it is the source client and optional, defaulting from clientInfo. It does not explain project beyond its role in ownership, and record_id is only implicitly described as 'by ID'. Partial compensation but not full.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action: deleting a memory by ID. It uses a specific verb and resource, and the tool name itself distinguishes it from siblings like write_memory and read_memory. However, it does not explicitly contrast itself with sibling tools, so it stops short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage: use this tool to delete a memory by ID. It does not provide explicit when-to-use versus when-not-to-use guidance, nor does it mention alternatives such as update_memory for modifying existing memories. The context is clear but implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
read_memoryA
按 ID 读取单条记忆完整内容;记录不存在返回 {"error": "NOT_FOUND"}; 非 (client, project) 归属的 memory 返回 {"error": "FORBIDDEN"};共享知识可读。 client:来源客户端(可选,缺省从 clientInfo 自动识别)。 project:项目归属(可选,缺省=该客户端默认桶)。 English: Read the full content of a single memory by ID; returns {"error": "NOT_FOUND"} when absent; a memory not owned by the (client, project) returns {"error": "FORBIDDEN"}; shared knowledge is readable.
| Name | Required | Description | Default |
|---|---|---|---|
| client | No | ||
| project | No | ||
| record_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It transparently discloses NOT_FOUND and FORBIDDEN error responses, ownership rules, that shared knowledge is readable, and the default behavior for optional client/project parameters. This gives the agent a strong behavioral model without needing to invoke the tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded with the core action and error semantics. It includes bilingual text that duplicates the same information, adding minor redundancy, but the content remains well-organized and scannable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-by-ID tool with no output schema, the description adequately covers error scenarios, ownership, and optional parameter defaults. It doesn't detail the success response shape, but 'full content of memory' conveys the expected return. Overall, enough for an agent to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It explains that client is optional and auto-detected from clientInfo, and project defaults to the client's default bucket. record_id is self-explanatory as the ID. This adds meaningful semantics beyond the bare schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description states a specific action: read the full content of a single memory by ID. It distinguishes itself from search_memory (which searches rather than reads a single record) and other sibling write/update/delete tools. The error cases further clarify the scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly implies when to use: when you have a memory ID and want its full content. It explains optional client/project defaults and ownership constraints. However, it doesn't explicitly name alternatives or state when not to use this tool versus search_memory.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_memoryA
混合检索记忆与知识(向量语义 + BM25 关键词,RRF 融合); 返回命中列表,每项含 id/content/score/type/source。 v2:个人记忆(memory)只返回归属当前 (client, project) 的; 共享知识(doc/web chunk)所有客户端可见。top_k 小于 1 时返回 {"error": "INVALID_ARGUMENT", "message": 原因}。 client:来源客户端(可选,缺省从 clientInfo 自动识别)。 English: Hybrid retrieval over memories and knowledge (vector semantics + BM25 keywords, RRF-fused); returns a hit list, each item having id/content/score/type/source. v2: memory records only return those owned by the current (client, project); shared knowledge (doc/web chunks) is visible to all clients. Returns {"error": "INVALID_ARGUMENT", "message": reason} when top_k is less than 1. client: source client (optional; auto-detected from clientInfo when omitted).
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | ||
| top_k | No | ||
| client | No | ||
| project | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With zero annotations, the description carries the full burden and delivers substantially: hybrid retrieval mechanism, RRF fusion, response item fields, ownership scoping, the INVALID_ARGUMENT error contract for top_k < 1, and client auto-detection from clientInfo. It does not cover every possible trait (auth, rate limits), but the core behavioral contract an agent needs before calling is well disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core function and every sentence conveys a distinct fact, but the full bilingual duplication doubles the length for any single-language reader. The top_k error contract and client parameter note are appended after the main body rather than integrated with a parameter section, making the structure slightly scattered.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 4-parameter hybrid-retrieval tool with a bare schema and no annotations, the description covers nearly everything an agent needs: retrieval method, return fields, scope behavior, error contract, and the client shortcut. The remaining gaps — a semantic definition of top_k and a dedicated project explanation — are minor because the parameter names are reasonably self-descriptive and the default of 5 is present in the schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It does well for client (optional, auto-detected from clientInfo), partially for top_k (only the error condition is stated; no explicit 'maximum number of results' definition), and not at all for project, which appears only inside the ownership scoping rule rather than as a parameter definition. This is meaningful but incomplete compensation for a fully undocumented schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource pair — '混合检索记忆与知识' / 'Hybrid retrieval over memories and knowledge' — and specifies the mechanism (vector + BM25 keywords, RRF-fused) and result shape (hits with id/content/score/type/source). This clearly distinguishes it from the CRUD memory siblings (write/read/update/delete_memory) by positioning it as cross-source retrieval, and the v2 scope rule further differentiates personal memory from shared knowledge.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage through the v2 scoping rule (personal memory only for current client/project, shared knowledge visible to all) and the error contract, but it never explicitly states when to choose search_memory over read_memory or ask_kb. There are no 'use X instead' statements or exclusions. An agent can infer this is the retrieval/search tool among its siblings, but the guidance remains implicit rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_memoryA
按 ID 更新记忆内容(变更后自动重新嵌入);记录不存在返回 {"error": "NOT_FOUND"}; 非 (client, project) 归属返回 {"error": "FORBIDDEN"}; 内容为空串或纯空白时返回 {"error": "INVALID_ARGUMENT", "message": 原因}。 client:来源客户端(可选,缺省从 clientInfo 自动识别)。 English: Update a memory's content by ID (auto re-embed on change); returns {"error": "NOT_FOUND"} when absent; non-(client, project) owners get {"error": "FORBIDDEN"}; empty content returns {"error": "INVALID_ARGUMENT", "message": reason}.
| Name | Required | Description | Default |
|---|---|---|---|
| client | No | ||
| content | Yes | ||
| project | No | ||
| record_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the burden of behavioral disclosure. It usefully reveals that content is auto-re-embedded on change, and it documents the main error responses (NOT_FOUND, FORBIDDEN, INVALID_ARGUMENT) and the optional client defaulting from clientInfo. Some detail around ownership determination and success return is missing, but the core behavior is well covered.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the primary purpose and includes important error behavior. However, it duplicates the same content in Chinese and English, which adds length without adding new information; the English section is mostly a redundant translation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that there is no output schema, the description does not specify what a successful response looks like, and the project parameter remains ambiguous. It covers primary errors and behavior well, but for a mutation tool with no structured annotations or output schema, a bit more detail would be needed for full completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It adds meaningful semantics for the client parameter by explaining it is optional and auto-detected from clientInfo, and content/record_id are reasonably inferable from the main action. However, the project parameter is essentially unexplained beyond the ownership error mention.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool updates a memory's content by ID, which is a specific verb+resource action. It inherently distinguishes itself from siblings like write_memory, read_memory, and delete_memory by referencing an existing record via ID.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The update-by-ID behavior implies when to use it, and the error conditions provide some context for expected failures. However, there is no explicit statement about when to prefer this tool over write_memory or other alternatives, so usage guidance is only implied.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
write_memoryA
写入一条记忆短文本(事实/笔记/摘要),可选标签与归属项目;返回 {"id": 记录ID}。 内容为空串或纯空白时返回 {"error": "INVALID_ARGUMENT", "message": 原因}。 v2(2026-08-30):身份由环境承载——client 自动从 MCP 握手 clientInfo 识别 (TraeWork / Claude Code / Cursor),project 为项目/任务归属(连接配置声明, 可空=该客户端默认桶);记录主键由服务端生成。共享知识(add_document/add_webpage) 所有客户端可见。 English: Write a memory short text (fact/note/summary) with optional tags and project; returns {"id": record_id}. Returns {"error": "INVALID_ARGUMENT", "message": reason} when content is empty or blank. v2: identity comes from the environment — client is auto-detected from the MCP clientInfo handshake (TraeWork / Claude Code / Cursor), project is the project/task bucket (declared in the connection config; empty = this client's default bucket). The record primary key is generated server-side. Shared knowledge (add_document/add_webpage) is visible to all clients.
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | ||
| client | No | ||
| content | Yes | ||
| project | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and does it well: it discloses the success return format ({"id": ...}), the error case for empty/blank content, how identity is derived from the MCP handshake, that the primary key is server-generated, and that shared knowledge is separately namespaced. This is far more transparent than typical tool descriptions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The key purpose and return format are front-loaded, and the v2 notes are useful. However, the description duplicates nearly all information in Chinese and English, roughly doubling the length. The structure is organized but not optimally concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a write tool with no output schema and no annotations, the description is quite complete: it covers return values, validation errors, identity/resolution, key generation, and boundary with shared knowledge tools. Minor missing pieces are explicit guidance on when to prefer read/update/delete siblings and any permission requirements.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It explains content as the memory text, tags as optional, project as the project/task bucket with empty meaning default, and client as auto-detected from MCP clientInfo. This adds real meaning beyond the bare schema, though it does not specify tag element constraints or content length limits.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a clear verb and resource: '写入一条记忆短文本' (write a memory short text) with optional tags and project, and specifies the return shape. It also distinguishes itself from add_document/add_webpage by noting that shared knowledge is visible to all clients, which implies this tool is for non-shared memory.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides context on when the tool is appropriate by explaining the client/project identity model and contrasting shared knowledge tools (add_document/add_webpage) as visible to all clients. It does not explicitly state 'when not to use' or name alternatives for read/update/delete, but the context is clear enough for an agent to choose correctly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
TDQS
Each tool targets a distinct resource and action: CRUD operations for memories are clearly separated from hybrid retrieval, and the two ingestion tools are differentiated by source type (local file vs URL). search_memory and ask_kb are distinguishable by their outputs—raw hits versus a generated answer with sources.
All tools follow a consistent verb_noun snake_case pattern (write_memory, read_memory, update_memory, delete_memory, search_memory, add_document, add_webpage, ask_kb). The only slight deviation is ask_kb's abbreviated noun, but it still fits the verb_noun structure and is readable.
8 tools is well-scoped for a memory/knowledge server: full CRUD for memories, two ingestion tools for shared knowledge, hybrid search, and RAG Q&A each earn their place. The count is neither sparse nor bloated.
The memory lifecycle is fully covered (write/read/update/delete), and knowledge ingestion plus retrieval and Q&A are present. Minor gaps exist—there is no list/delete operation for shared documents or webpages—but agents can work around these since shared knowledge is append-only.
Maintenance
Related MCP Connectors
Persistent memory for AI agents. Semantic search, memory graph, W3C DID identity.
Long-term memory for AI assistants. Hybrid retrieval, query expansion, auto-topics.
Persistent memory and knowledge graphs for AI agents. Hybrid search, context checkpoints, and more.
Shared, governed long-term memory for AI agents across tools and sessions via MCP and REST.
Related MCP Servers
- AlicenseAqualityAmaintenancePersistent memory MCP server for AI coding agents (Claude Code, Codex, Gemini CLI). Hybrid retrieval (vector + BM25), cross-encoder reranking, knowledge graph, session checkpoint/resume, and multi-scope isolation. Local-first with LanceDB.3027615MIT
- AlicenseAqualityAmaintenanceDurable hybrid memory for AI agents. Combines vector search, BM25, temporal retrieval, and optional Memgraph knowledge graph via reciprocal rank fusion. 6 MCP tools: health, search, answer, feedback, graph_query, graph_add_triple. Self-hosted with Qdrant backend.77Apache 2.0
- FlicenseNot gradedqualityBmaintenancePersistent semantic memory MCP server for AI agents with hybrid search, LLM scoring, and decay engine, fully local.2
- AlicenseNot gradedqualityCmaintenanceMCP server that enables persistent, hybrid, local memory for LLM agents, with vector + BM25 search, knowledge graph, and policy-driven retention, providing token-budgeted context injection for AI assistants.MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/fish827-08/rag-kb'
If you have feedback or need assistance with the MCP directory API, please join our Discord server