Elefante MCP server
io.github.amenophis1er/elefante·v0.1.9·15 starsOpen, Git-native memory protocol for MCP agents. Portable, versioned, human-editable.
15 stars
Reviews
Write oneNobody has reviewed Elefante yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Elefante tools (7, 3 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
memory_deletewrite actionPermanently delete a memory. The content is preserved in Git history.
memory_listList memories in the vault. Returns metadata only (no body). Use memory_read to get full content.
memory_readRetrieve a specific memory by its ID.
memory_searchSearch the memory vault. Returns memories ranked by relevance.
memory_syncPull the latest changes from the remote vault. Use this when you suspect another device or agent has written memories since the session started.
memory_updatewrite actionUpdate an existing memory. Only provided fields are changed.
memory_writewrite actionStore a memory in the vault. Use type 'user' for user preferences/facts, 'feedback' for behavioral guidance, 'project' for active work context, 'reference' for external resource pointers.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan26 source files scanned13/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 161 days ago8/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- highShell command built from a string (injection risk)
exec.shell-concatdist/server.js: …hen(({ exec }) => { exec(`open "${url}"`); }); …
How Elefante compares
Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 63/100
- higher than 17% of 1,119 Developer tools servers
- Tools
- 7
- the typical Developer tools server has 7
- Tools that change things
- 43%
- typical: 5%. Fewer write tools means less an agent can break
- GitHub stars
- 15
- more than 86% of 855 Developer tools servers
What its tools let an agent do: 4 read · 3 change
Install Elefante in Claude Code, Cursor or VS Code
Runs npx -y elefante-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add elefante -- npx -y elefante-mcp
What the publisher says
From the Elefante repository's README, as published. We do not edit it. Read it on GitHub
Elefante
The open, Git-native memory protocol for MCP agents: portable, inspectable, versioned, and human-editable.
Your agent's memory is a Git repo you own.
Every memory is a Markdown file you can read.
Every change is a commit you can audit.
Any MCP agent can connect to it.Why
Every AI agent has its own memory system. Claude's works only with Claude. ChatGPT's works only with ChatGPT. They're all opaque, vendor-locked, and non-portable.
Elefante takes a different approach. Instead of optimizing for retrieval quality, it optimizes for ownership, auditability, and portability — the things that matter when memory is a first-class asset, not a hidden implementation detail.
Quick Start
# Install
npm install -g elefante-mcp
# Initialize vault (uses a private GitHub repo as storage)
elefante init git@github.com:yourname/my-memory.git
# Add your first memory
elefante add \
--name "TypeScript strict mode" \
--type user \
--body "Always enable strict: true in tsconfig.json"
# Search
elefante search "typescript"
# Check status
elefante statusConnect to Your Agent
From the terminal (before starting Claude Code):
claude mcp add --scope user elefante -- npx -y elefante-mcp mcpFrom inside Claude Code (during a session):
/mcp add --scope user elefante -- npx -y elefante-mcp mcpOr manually — add to your MCP config (~/.claude.json, .cursor/mcp.json, etc.):
{
"mcpServers": {
"elefante": {
"command": "npx",
"args": ["-y", "elefante-mcp", "mcp"]
}
}
}Cursor / VS Code / Codex — same config. Any agent that speaks MCP can read and write to the same vault.
Once connected, your agent gets 7 tools: memorywrite, memoryread, memorysearch, memorylist, memoryupdate, memorydelete, memory_sync.
Auto-Discovery
Elefante injects your top memories directly into the agent's system prompt at startup via MCP instructions. The agent sees your preferences, feedback, and project context without needing to search first.
No CLAUDE.md hacks. No "search my elefante memory" prompts. It just works.
Project-Aware Memory
Elefante auto-detects which project you're in and scopes memories accordingly. No configuration needed.
How It Works
When the MCP server starts, it reads the git remote from your working directory:
~/Projects/acme-api/ → git remote = github.com:you/acme-api.git
→ profile = "you/acme-api"
→ memories scoped to this project
~/Projects/my-cli/ → git remote = github.com:you/my-cli.git
→ profile = "you/my-cli"
→ different project, different memoriesWhat Gets Scoped
The agent decides based on context. User preferences and behavioral feedback are typically global. Project details and references are typically scoped.
What You See When You Search
Working in acme-api:
✓ "Uses Postgres 16" (profile: you/acme-api)
✓ "Prefers Bun over npm" (profile: null — global)
✗ "Uses SQLite" (profile: you/my-cli — different project)Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Elefante: common questions
- Is Elefante MCP server safe?
- With care: it is graded C, so read the findings first (63/100). Read the Elefante safety report
- How do I install Elefante?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Elefante need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Elefante maintained?
- The last commit was 198 days ago (2026-04-20). The latest release is v0.1.9.
- What can I use instead of Elefante?
- Servers from other publishers that do the same job: Palinode MCP server, Agent Memory MCP server and Git MCP server.
- How does Elefante compare with other Developer tools MCP servers?
- safety score 63/100 (higher than 17% of 1,119 Developer tools servers); tools 7 (the typical Developer tools server has 7); tools that change things 43% (typical: 5%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Elefante
Same job from other publishers: the closest match first, then the best rated.
- PalinodeInspectable, correctable project memory in git-versioned Markdown for AI agents.not reviewedEstablishedC
- Agent MemoryGit-native project memory for AI coding agents: Markdown source of truth, reviewable, secret-safe.not reviewedGrowingA
- GitComprehensive Git MCP server enabling native git tools including clone, commit, worktree, & more.not reviewedEstablishedA
- NexusmemLocal-first memory for AI coding agents: shell history with exit codes, git diffs, docs, MCP.not reviewedGrowingA
- GntGit-native policy layer for AI agents: check_action verdicts against rules approved via PR.not reviewedGrowingA