Limpet MCP server
io.github.KSym04/limpet·v0.17.0·3 starsPersistent engineering memory for AI coding agents. Survives refactors, knows when it is stale.
3 stars
Reviews
Write oneNobody has reviewed Limpet yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Limpet tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualityno auth information5/15
- Maintenancelast push 37 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Limpet compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 63/100
- higher than 18% of 48,243 servers
- GitHub stars
- 3
- more than 80% of 28,706 servers
Install Limpet in Claude Code, Cursor or VS Code
The registry entry has no remote endpoint or installable package.
What the publisher says
From the Limpet repository's README, as published. We do not edit it. Read it on GitHub
🐚 limpet
small shell. long memory.
Memory for AI coding agents that goes stale when your code does. Everything your agent learns about a codebase (decisions, verified facts, failed approaches, gotchas) survives every session, anchored to the actual code it describes, and flips to stale with the reason attached the moment that code moves on. One Rust binary, one SQLite file, standard MCP, zero network calls.
the anchor lifecycle, real output: recall answers instantly, an edit flips the memory stale, a revert heals it
The failure mode that kills AI coding assistants is not forgetting; it is remembering something that is no longer true. Vector stores trust similarity, time-decay tools trust the calendar, markdown notes trust forever, so an agent that still believes last month's version of a function is not unhelpful, it is confidently wrong. limpet anchors each memory to a normalized AST hash of the code it describes: rename or move the code and the memory follows, edit it and the memory goes visibly stale with a reason, revert and it heals. Noticing its own staleness is the entire premise, and no other open memory layer does it.
⏱️ 30 seconds to running
curl -fsSL https://raw.githubusercontent.com/KSym04/limpet/main/install.sh | bash(Windows: irm https://raw.githubusercontent.com/KSym04/limpet/main/install.ps1 | iex; full install options below.)
Restart Claude Code, type /limpet in any project, and just work:
session 1: "the scanner batch size is 50 because shared hosts kill long requests" → stored as a decision, anchored to the function that uses it
session 30, fresh context: you: why is the batch size 50? → agent: one recall, ~350 tokens, full answer. No file spelunking, no re-teaching your own codebase.
you edit that function → the memory flips to stale: body_edited everywhere it appears. Nothing ever pretends to be current when it is not.
🎯 Why limpet, in four checkable claims
- It knows when it is wrong. Memories anchor to AST hashes, follow renames and file moves, go stale on real edits with the reason attached, and heal on revert. → the anchor lifecycle
- It shows you what it saved. Every recall is priced against the file reads it replaced: 4.2x fewer tokens on the benchmark, and a live per-project ledger via limpet stats. → the receipts
- It anchors the whole repository. Eleven grammars for symbol-level anchoring; every other file (templates, styles, configs) anchorable at file level. → whole repo indexed
- It never lies by omission. Every response carries an honesty envelope: matched vs returned, what was dropped and why, how fresh the index is, how much is stale. The benchmark gate has killed limpet's own features when they crossed that line.
It is not a vector database, a code-search engine, or a call-graph oracle; it is the layer that remembers why, tied to the code, and tells you when the why no longer holds. → what limpet is not · design principles with the scars that earned them: PHILOSOPHY.md
🧠 Why this exists
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-10-15downgradeB → Cscore 63
Limpet: common questions
- Is Limpet MCP server safe?
- With care: it is graded C, so read the findings first (63/100). Read the Limpet safety report
- Does Limpet need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Limpet maintained?
- The last commit was 58 days ago (2026-09-08). The latest release is v0.17.0.
- What can I use instead of Limpet?
- Servers from other publishers that do the same job: Knowl MCP server, Deja Vu MCP server and Computer MCP server.
- How does Limpet compare with other MCP servers?
- safety score 63/100 (higher than 18% of 48,243 servers); github stars 3 (more than 80% of 28,706 servers). Full comparison.
Alternatives to Limpet
Same job from other publishers: the closest match first, then the best rated.
KnowlPersistent memory for AI agents, for code, research and everyday life. Stale facts retire.not reviewedEstablishedA- Deja Vudeja-vu: local memory over the session histories of forty-three coding agents.not reviewedEstablishedA
- ComputerA private persistent computer: files that survive between runs, a bash shell and JavaScript.not reviewedEstablishedA
State Memory MCPPersistent workflow graph server tracking tasks, decisions, spatial entities, and blockers.not reviewedEstablishedA