Todox MCP server
online · 100% uptimeio.github.beydemirfurkan/todox·v0.1.4·2 starsMemory for coding agents: the decisions, the dead ends, and where the last session stopped.
2 stars
Reviews
Write oneNobody has reviewed Todox yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Todox tools
Tool list not cached yet. `describe` through the gateway fetches it live.
Public scan report
scanner v0.1.10 · 2026-10-02 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 418ms (auth required)20/20
- –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
- Auth qualityauth enforced (unknown)9/15
- Maintenancelast push 11 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Todox compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 87/100
- higher than 73% of 48,255 servers
- Uptime
- 100%
- of our recent checks; the typical remote server answers 100%
- Response time
- 602 ms
- faster than 24% of 30,031 servers
- GitHub stars
- 2
- more than 75% of 28,688 servers
Release history: 2 versions in the registry since 2026-09-05, latest 2026-09-19, typically one every 14 days.
Install Todox in Claude Code, Cursor or VS Code
claude mcp add --transport http todox https://www.todox.dev/api/mcp
What the publisher says
From the Todox repository's README, as published. We do not edit it. Read it on GitHub
todox
Working memory for developers and their agents. Not a checklist — a log your next session can actually resume from.
An issue tracker is written human-to-human. todox is written agent-to-agent, with a human reading over its shoulder. Every task carries the decisions behind it, the approaches that failed, the questions still open, and the note the last session left behind.
A fresh agent calls getcontext, reads that, and starts where the last one stopped — without walking into a wall somebody already hit. The briefing is capped rather than unbounded, in rows and* in bytes, and it reports what the caps left out instead of trimming in silence. Nothing is ever cut mid-sentence: every record comes back named and dated with its first line, and a body of null means the budget was spent, not that the record is empty.
What goes in a log
Two things fall out of treating the log as the product:
side that can see them — the agent — and the server stores the hashes and compares. If the code moves on, get_context says the note may be lying. Until an agent has actually looked, the note is marked as never checked rather than claimed to be fresh: context that lies is worse than none, and that includes lying about how sure we are.
- Stale context is flagged, and never faked. Linked files are hashed by the
event, so what did I finish today, how long did it take, which model did it is a query rather than archaeology. A task set doing and walked away from counts as the morning it was set, not the weeks since -- and the report says how much it left out, rather than folding it into the headline.
- Reports come from the log, not from commits. Every status change is an
hashes are readable from the other end: getfilecontext takes a path and answers with the tasks that touched it, their dead ends, and any standing note attached to it. Paths are folded to their repo-relative form, so a link made on one machine is found from another.
- A file can be asked what is known about it. The same links that carry the
Why not the memory your agent already has?
Claude Code writes its own notes now (auto memory, on by default since February 2026), and Cursor and Codex have theirs. Use them: they are good at remembering that you prefer pnpm. What their documentation says, in its own words, is that they are per repository, per machine ("machine-local … not shared across machines") and per tool, and shared with nobody ("just you"). todox is for what falls outside that line:
note left on the laptop is read on the desktop.
- Two machines, one log. A repository is identified by its remote, so the
MCP; the handoff one leaves is what the next one reads, whichever it is.
- Every agent, one log. Claude Code, Codex, Cursor and VS Code all speak
what and which model did it.
- The people, too. A project can be shared, and the log carries who wrote
ends as their own kind, a report read from the log, a stale note that says so — and a briefing that reports what its caps left out.
- A shape a note in a file does not have. Tasks that open and close, dead
Try it
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Todox: common questions
- Is Todox MCP server safe?
- Yes, by our scan: it is graded A (87/100). Read the Todox safety report
- How do I install Todox?
- It runs remotely at www.todox.dev. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Todox need an API key?
- Yes. The registry entry asks for
Authorization. - Is Todox maintained?
- The last commit was 44 days ago (2026-09-21). The latest release is v0.1.4.
- Is Todox up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Todox?
- Servers from other publishers that do the same job: Deja Vu MCP server, State Memory MCP server and Tradememory Protocol MCP server. Compare all Todox alternatives.
- How does Todox compare with other MCP servers?
- safety score 87/100 (higher than 73% of 48,255 servers); uptime 100% (of our recent checks; the typical remote server answers 100%); response time 602 ms (faster than 24% of 30,031 servers). Full comparison.
Alternatives to Todox
Same job from other publishers: the closest match first, then the best rated.
- Deja Vudeja-vu: local memory over the session histories of forty-three coding agents.not reviewedEstablishedA
State Memory MCPPersistent workflow graph server tracking tasks, decisions, spatial entities, and blockers.not reviewedEstablishedA- Tradememory ProtocolTamper-evident decision audit trail and outcome-weighted memory for AI trading agents.not reviewedEstablishedB