Conventions MCP server
io.github.FedgeNo/conventions-mcp·v3.1.1Memory for coding conventions and standing instructions that persists across sessions.
0 stars77 downloads/wk
Reviews
Write oneNobody has reviewed Conventions MCP yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Conventions MCP tools (7, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
capture_thoughtdelete_thoughtwrite actionPermanently delete a specific captured thought by its ID. This is destructive and irreversible — no undo, no trash. Only call this when the user explicitly asks to delete, remove, or forget a specific thought. Never call it proactively, as a side effect of another action, or on a guess at which ID they mean — if the ID isn't already known from context, use search_thoughts or list_thoughts first an
list_rulesRetrieve every convention, instruction, correction, and preference that applies right now — everything global plus anything scoped to the current project — in one call. A deterministic direct lookup (no embeddings, no ranking), so it won't miss anything a semantic search_thoughts query might rank low. Prefer this over several search_thoughts calls when you want the full standing rule set at once,
list_thoughtsList all captured conventions/instructions, optionally filtered by type.
search_thoughtsLook up previously stored coding conventions, standing instructions, and preferences, by meaning and by exact keyword match (hybrid search). Call this proactively before starting unfamiliar coding work, or when uncertain about a style/convention choice in a project — don't wait for the user to ask. Also call it when the user references a past preference or rule ('like we discussed', 'the usual way
thought_statsGet a summary of all captured durable rules: totals, types, top topics, and per-project counts.
update_thoughtwrite action
Public scan report
scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it
- Code scan13 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 28 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Conventions MCP compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 93% of 48,243 servers
- Tools
- 7
- the typical server has 7
- Tools that change things
- 29%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 77
- more than 56% of 12,306 servers with a package
What its tools let an agent do: 5 read · 1 change · 1 delete
Install Conventions MCP in Claude Code, Cursor or VS Code
Runs npx -y conventions-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add conventions-mcp -- npx -y conventions-mcp
What the publisher says
From the Conventions MCP repository's README, as published. We do not edit it. Read it on GitHub
conventions-mcp
Personal memory for durable coding conventions and standing instructions — one store, any MCP-compatible AI client, available in every project. It holds rules like "always use 2-space indent in this language," "never force-push to main," lasting corrections, and long-lived workflow preferences that should carry across future sessions rather than get re-explained every time. It is deliberately not a history of individual jobs or a place for task-specific directions, temporary decisions, current status, or one-off commands.
Why this one
There's no shortage of memory MCP servers — several well-established ones (mem0/OpenMemory, Zep/Graphiti, the official reference memory server, plus a long tail of smaller projects) already do "remember things across sessions." What's different here:
- Narrow taxonomy, not a general note-taking store. Every capture must be a durable rule for future work and gets classified into one of five purpose-built types — convention, instruction, correction, preference, other — plus a project field and topic tags. Task-specific procedures and work history are excluded so retrieval stays precise instead of noisy.
- Deterministic retrieval, not best-effort. Most memory MCPs rely entirely on the calling model noticing a tool description is relevant and deciding to call it — which fails silently and inconsistently. Codex and Claude Code hooks force the agent to call list_rules: SessionStart supplies the instruction, while PreToolUse denies every other tool until the call has happened.
- Transparent by default, not silent. Every capture and update echoes the verbatim stored content and whether it's global or project-scoped back immediately, so a misheard or misclassified rule is visible and correctable on the spot — not something you discover three sessions later via search.
- Fully local at runtime. SQLite + local embeddings, no hosted service, no per-token costs, no API key. The embedding model is downloaded once on first use (or explicitly with conventions-mcp warmup) and then runs locally. Classification (type/topics/projectScoped) is done by the calling agent at capture time, guided by the tool description — it already has the full conversation the thought came from, richer context than an isolated content string would give a separate extractor model.
- Project-scoped without fuzzy matching. A rule can be global (the default) or tied to one specific codebase. Stdio clients derive the project from their working directory; HTTP clients provide an MCP root or an X-Conventions-Project header. The project identifier is never guessed by an LLM from free text.
If what you want is a general-purpose "remember everything" store, or you're not on Claude Code and don't need the hook-driven determinism, one of the more general options above may fit better. This one is for someone who specifically wants a tight, coding-convention-focused memory that stays accurate and doesn't require trusting the model to remember to check it.
What it's tuned to store
Every capture is classified into one of five types by the calling agent, guided by capture_thought's tool description (src/server.js):
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Conventions MCP: common questions
- Is Conventions MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Conventions MCP safety report
- How do I install Conventions MCP?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Conventions MCP need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Conventions MCP maintained?
- The last commit was 49 days ago (2026-09-17). The latest release is v3.1.1.
- What can I use instead of Conventions MCP?
- Servers from other publishers that do the same job: Deja Vu MCP server and Claudexor MCP server.
- How does Conventions MCP compare with other MCP servers?
- safety score 92/100 (higher than 93% of 48,243 servers); tools 7 (the typical server has 7); tools that change things 29% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Conventions MCP
Same job from other publishers: the closest match first, then the best rated.