Mnemosyne
The next agent starts wiser.
Mnemosyne is local-first, long-term memory for AI agents: one SQLite file that keeps what an agent learned together with the evidence it came from, served to any host over TypeScript, MCP, CLI or HTTP. When a source is corrected, every memory that depended on it is retired, so the next agent starts from what is still true instead of repeating a stale lesson.
Mnemosyne connects memory to its consequences: a corrected requirement can retire a dependent procedure, a failed trial can withhold a skill, and a new agent can resume from an explicit handoff. Run the local engine in one SQLite file; connect your host through TypeScript, MCP, CLI, or authenticated HTTP with a Python client and live inspector.
2.0.0-rc.10 · Release candidate · MIT · Node.js ≥22.16
Website · Quickstart · Documentation · Examples · Migration · Measured results · npm · Contributing
Install and connect an agent
npm install [email protected] # prerelease channel: mnemosy-ai@next
npx --no-install mnemosy demo # offline: no API key, no server, no Docker
Give the memory to an MCP client. Claude Code reads .mcp.json in the project root and Cursor reads .cursor/mcp.json; both take the same server entry. The database file (mode 0600) and its parent directory (mode 0700) are created on first use. Relative paths resolve from the directory the client starts the server in; use absolute paths if your client launches servers elsewhere.
{
"mcpServers": {
"mnemosyne": {
"command": "npx",
"args": [
"-y", "-p", "[email protected]", "mnemosy", "mcp",
"--db", "./.mnemosyne/memory.sqlite",
"--workspace", "my-project", "--agent", "assistant"
]
}
}
}
Claude Code can register the same server from the shell:
claude mcp add mnemosyne -- npx -y -p [email protected] mnemosy mcp --db ./.mnemosyne/memory.sqlite --workspace my-project --agent assistant
The server exposes 16 memory_* tools (memory_store, memory_recall, memory_context, memory_correct, memory_checkpoint, memory_resume, memory_observe, memory_skill, …); memory_forget is added only when the server is launched with --allow-destructive. Add --read-only to omit every mutation tool. A model cannot switch workspace, raise its own trust or report its own skill trials through MCP. Agent-readable summaries of this repository are in llms.txt and AGENTS.md; the full MCP contract is in Connect through MCP.
Measured: 409 of 500 on LongMemEval-S, with the misses printed
What these numbers do not say. The 81.8% is not a paired gain over the earlier 71.2%: that baseline used a different 250-question sample, prompt and budget, so the improvement belongs to the whole bundle of changes. The reader is nondeterministic; rerunning one configuration moved its score by about a point. Retrieval numbers measure coverage, not answers. Two Tier 1 targets of this release are not met and ship disclosed: recall latency at one million records is p95 139–223 ms against a 50 ms goal (opt-in indexMode: 'hnsw', see Tune the dense index), and contextual reranking ships at 71.98% all-evidence hit against a 72.80% gate, 0.82 points (13 of 1,531 questions) short; the best variant tried was still four short and was not merged. Commands and raw outputs are in reports/t1-targets/evidence/ the answer-accuracy and gate results are restated with their commits in the changelog, and the Mem0 and reranker retrieval tables are in COMPARISON.md.
Choose your engine
Both engines ship in 2.0.0-rc.10. Choose the storage and runtime that fit your application:
The MemoryAgent adapter uses the Local Engine's runtime. These engines have separate schemas and do not automatically migrate or synchronize data. To transition gradually, explicitly connect your existing store through the read-only migration bridge; it leaves that store unchanged.
Engine choice is separate from release channel: stable mnemosy-ai@latest remains on version 1.x, while mnemosy-ai@next selects the version 2 candidate containing both engines. Review the migration notes before upgrading an existing Vector Engine application.
Start with a working demonstration
Install the exact release candidate in your project. Node 24 is recommended; the local memory engine needs no model API key, database server, or Docker.
npm install [email protected]
npx --no-install mnemosy demo
npx --no-install mnemosy learning-demo
The prerelease channel is mnemosy-ai@next. Pin the exact version for reproducible deployments; unqualified npm install mnemosy-ai follows the stable latest channel and still selects version 1.x. Evaluate this candidate on your own workload before production. Python registry publication is separate; the bundled Python client can be installed from the checkout.
To build and run the same candidate from source:
git clone --branch v2.0.0-rc.10 --depth 1 https://github.com/28naem-del/mnemosyne.git
cd mnemosyne
npm ci --ignore-scripts
npm run build
npm run demo
npm run demo:learning
The first demo uses a temporary database to show a handoff, correction, private scope and forgetting. The learning demo exercises capture, a scripted observation job, skill trials, explicit sharing and correction-driven retirement. Both run real local APIs with deterministic fixtures and no model calls. Choose your next example.
For full contributor validation, run npm run check, npm run check:docs and npm run check:public. RC10 adds the Tier 1 retrieval work (hybrid default, cross-encoder reranking, opt-in dense index and temporal routing) over the RC9 packaging; the recorded evaluation reports remain historical measurements of the versions and conditions they name.
To consume your built checkout from another project, run npm install /absolute/path/to/mnemosyne in that project. Keep the checkout and its dist directory available. The older RC8 GitHub release and checksummed downloads remain unchanged.
A correction should change what the next agent does
import { createLocalMemory } from 'mnemosy-ai/local';
const memory = createLocalMemory({
path: './agent-memory.sqlite',
workspaceId: 'catalogue',
agentId: 'designer',
});
const brief = memory.store({
text: 'Product images must be 1200 by 900 pixels.',
kind: 'fact',
key: 'catalogue.image-size',
source: { uri: 'brief://catalogue/v1' },
trust: 'observed',
visibility: 'workspace',
});
const procedure = memory.store({
text: 'Export catalogue product images at 1200 by 900 pixels.',
kind: 'procedure',
source: { uri: 'run://designer/export' },
trust: 'observed',
dependencies: [brief.id],
visibility: 'workspace',
});
memory.correct(brief.id, {
text: 'Product images must be 1600 by 1200 pixels.',
source: { uri: 'brief://catalogue/v2' },
reason: 'The delivery specification changed.',
});
console.log(memory.get(procedure.id)?.status); // invalidated
const context = memory.compile({
query: 'catalogue product images',
maxTokens: 2048,
});
console.log(context.text); // Send eligible context to your responder.
// Inspect context.citations and context.uncertainty alongside the text.
memory.close();
The old procedure remains inspectable but is no longer eligible as current guidance. Dependencies must be declared by the controller. observed means the host recorded the source; it does not certify its truth. The default context counter measures UTF-8 bytes conservatively, not a model's tokenizer. Context contract.
Tune the dense index
Recall works without any of this. These three options exist for stores large enough that the defaults stop being the right trade, and all three are opt-in.
const memory = createLocalMemory({
path: './agent-memory.sqlite',
workspaceId: 'catalogue',
agentId: 'designer',
indexMode: 'hnsw', // 'exact' | 'auto' (default) | 'sqlite-vec' | 'hnsw'
sqliteVecPath: '/opt/lib/vec0.dylib', // explicit extension path; no env-var equivalent
cacheSize: -65536, // PRAGMA cache_size: negative = KiB, positive = pages
});
indexMode — which dense index to search. Defaults to $MNEMOSYNE_INDEX_MODE, else auto.
Asking explicitly for sqlite-vec or hnsw and not getting it is an error, not a downgrade: those
two modes throw when the backend is unavailable. auto is the only mode that degrades, and it only
ever degrades to an exact search, never to an approximate one.
No mode changes what a record scores or whether it may be returned. Every candidate an index proposes is re-authorized and rescored against the stored vector before it reaches you, so the index is a shortlist, never an authority.
sqliteVecPath — an explicit filesystem path to a sqlite-vec loadable extension, overriding
the bundled package's own resolution. Only consulted when indexMode is auto or sqlite-vec.
There is deliberately no environment-variable equivalent. An env-controlled path would make
every LocalMemory opened on the machine dlopen whatever that variable pointed at, by default and
without the caller asking. Loading a native extension is a decision the calling code has to make in
the open, so it lives in the constructor and nowhere else.
cacheSize — PRAGMA cache_size, applied on every open, in SQLite's own units: a positive
value is a page count, a negative value is a KiB budget. Defaults to -65536 (64 MiB), and a
negative value is the recommended form since page size can vary. Must be a nonzero integer of
magnitude at most 2,097,152.
A larger page cache buys fewer trips through the OS page cache for the shortlist rescore and the BM25 postings that the hot recall path reads on every query. It matters once the working set stops fitting in the few megabytes SQLite would otherwise settle for on its own — and it is a real memory cost, charged per open connection, so it is set rather than guessed.
What you can build
Local Engine, several entry points
flowchart LR
Host[Your agent or application] --> Interfaces[TypeScript · MCP · CLI · HTTP / Python]
Interfaces --> Runtime[Capture · Context · Trials · Action checks]
Runtime --> Store[(Local SQLite memory)]
Store --- Evidence[Sources · History · Dependencies · Outcomes]
Runtime -. explicit configuration .-> Models[Optional model providers]
Runtime -. read-only adapter .-> Previous[Previous memory system]
The host chooses identities, trust assertions, providers and execution budgets. Construction starts no worker or model download. MemoryAgent can prepare context before a turn and capture supplied visible input/output afterward; background work runs only when the host starts it. Host loop.
The local database holds memories, vectors and runtime state. Optional local CPU providers run cached inference in separate processes after explicit provisioning. Their dependency requirements, model identities and licenses are documented in the local model guide. The existing backend integration remains available through createMnemosyne; it does not automatically synchronize with the local engine. Version 1 migration notes.
Connect through MCP
With the npm package, use the npx entry shown in Install and connect an agent. From a source checkout, point the client at the built CLI instead; the database's parent directory is created on first use.
{
"command": "node",
"args": [
"/absolute/path/mnemosyne/dist/cli/index.js", "mcp",
"--db", "/absolute/path/data/memory.sqlite",
"--workspace", "my-project", "--agent", "assistant"
]
}
Use --read-only to omit mutation tools. Forgetting requires an explicit --allow-destructive launch. Models cannot choose another workspace, promote their own trust, or report successful trials through MCP. For an authenticated service, Python access and a live inspector, see HTTP and Python. Native provider tool protocols are documented in the adapter guide.
Require stronger skill evidence
import { createLocalMemory } from 'mnemosy-ai/local';
import {
MemoryRuntime,
RECOMMENDED_SKILL_PROMOTION_POLICY,
} from 'mnemosy-ai/runtime';
const memory = createLocalMemory({
path: './skills-memory.sqlite', workspaceId: 'my-project', agentId: 'assistant',
});
const runtime = new MemoryRuntime(memory, {
skillPromotionPolicy: RECOMMENDED_SKILL_PROMOTION_POLICY,
});
// Use runtime to create candidates and record controller trials.
memory.close(); // Close after your host finishes using the runtime.
The recommended policy requires successful trials across two distinct tasks and two verifier identities. Candidates stay outside advisory context until their stored requirements are satisfied; a weaker configuration cannot lower an existing candidate's requirements. The compatibility default remains one task and one verifier. Identities and trial outcomes are controller assertions, so your host must provide real tests and independent evidence. Trial contract.
Migrate while your agent keeps working
The optional mnemosy-ai/bridge wraps your explicitly supplied legacy search adapter. It copies used records with stable origins, compares paired retrieval results, and moves from shadow to assist to preferred routing as observed coverage meets configured thresholds. Missing legacy matches remain available, and routing can return to the previous system.
The bridge keeps querying the original store for reconciliation and never writes or deletes there. Progress measures observed queries, not complete-store migration or answer quality. Host credentials, source selection and eventual cutover stay under your control. Bridge contract.
For a full export migration, choose one of the eleven supported profiles, preview the exact source bytes, then apply the reviewed plan atomically. Imports are private and untrusted by default; retry recognition, source inspection, guarded undo and erasure replay protection are included. Foreign embeddings and unsupported policy semantics are not silently converted. Full migration.
node --experimental-strip-types examples/gradual-migration.ts
node --experimental-strip-types examples/migration.ts
node --experimental-strip-types examples/maintenance.ts
These examples use isolated synthetic data. They do not connect to your existing accounts or memory stores.
Measured, with the limits visible
The paired LongMemEval S retrieval run includes all 500 questions, with positive evidence metrics on 470 annotated answerable questions. Both retrieval conditions use 20 chunks and the same 8,192-byte context budget.
The 30 abstention questions remain in attempt counts without a positive retrieval score. All 500 full-history controls exceeded the context budget and are reported as overflows. The run uses same-day timestamp compatibility, including 1,475 sessions later than the stated question instant. A session hit can come from any of its chunks; it does not prove that the answer-bearing sentence reached the model. No embedding, generation or judge calls were made.
These results measure retrieval coverage against the earlier local scorer. They do not establish generated-answer accuracy or superiority over other systems. Raw reports and fingerprints · Reproduction protocol.
Against another memory system
A matched competitor benchmark against Mem0 OSS is published in COMPARISON.md — same corpus, same chunks, same K, same packing budget, all scored inside one process, with the results where Mem0 beats us printed in the same tables as the results where it does not. In short: our reranked path takes the LoCoMo headline at 73.57 recall@10 against Mem0's 63.72, our unreranked hybrid loses to Mem0 at every K on both recall and MRR, and on LongMemEval-S the two tie on recall@20 while Mem0 takes MRR. Zep and Graphiti carry a reason rather than a number: neither could be run without paid credentials. These are retrieval-coverage numbers with no reader and no judge, not answer accuracy.
A separate evidence lifecycle diagnostic tests correction, time, conflicts, failure, erasure and scope behavior. It deliberately retains a failing case: changing an unrelated field can retire a still-valid dependent rule. The engineering review and release status track this and other remaining work.
Operational boundaries
Workspace and agent IDs are trusted controller selectors, not tenant authentication. The HTTP service supplies scope-bound bearer authentication; remote TLS and enterprise identity require application deployment work. Databases and backups are plaintext. Forgetting removes covered live content and blocks known source replays, but cannot erase an older backup or a prompt already sent to a model.
Local semantic search scans the eligible indexed corpus with bounded retained candidates and a deadline. That exact scan is the default; an approximate index is available but opt-in and never selected on your behalf (see Tune the dense index), and every candidate any index proposes is re-authorized and rescored against the stored vector before it is returned. Generated observations and trial results remain fallible assertions. Action checks validate declared local dependencies before dispatch, not external transactions. Managed synchronization, model training and six validated native framework integrations are not included. Security · Deployment · Backup and restore.
Build with us
Mnemosyne is built by Aristotle Intelligence Inc., a Delaware company, and has been fully self-funded to date. For advanced memory requirements, integration discussions or investor enquiries, contact [email protected].
Use GitHub issues for reproducible bugs and feature proposals. Report vulnerabilities privately through SECURITY.md. Contributions that improve evidence retention, integration reliability or reproducible evaluation are especially useful.
Contributing · Architecture · Changelog · Code of conduct · MIT license · Third-party notices
