Memorybank MCP server
io.github.maxweb4u/memorybank·v0.3.2Seeds, governs and navigates a memory_bank knowledge base: gated writes, routing, drift vs code
0 stars396 downloads/wk
Reviews
Write oneNobody has reviewed Memorybank yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Memorybank tools (16, 4 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
bank_changedHands the next session the delta instead of the whole bank. A git ref gives a true delta including
bank_createwrite actionCreates a document from a template, writes the frontmatter the contract asks for, and registers it
bank_discardwrite actionDeletes one document from _inbox/, and nothing else — the third outcome of an inbox
bank_driftCompares the last commit that touched a document against the last commit that touched the code it
bank_editReplaces an exact piece of text in a document body — a table row, two steps of a plan, a
bank_graphAnswers "what else must I touch". `down` returns the documents that lean on this one — the blast
bank_initSeeds an empty root: the governance set in dna/ (including the table that assigns each directory
bank_materialize_flowsCopies the document templates the server ships into this bank, which then owns them. Only needed
bank_promoteMoves a document from _inbox/ into a canonical layer: keeps the captured body, rebuilds the
bank_readReads one document, or several in a single call, by bank-relative path — optionally a
bank_routeAnswers "what should I read about this". Ranks documents by their hand-written frontmatter
bank_searchSearches the prose, unlike bank_route which ranks by hand-written frontmatter. Reach for it when
bank_set_fieldSets one scalar frontmatter field of an existing document — purpose when what a document
bank_set_statusChanges the status of a document already in place — the draft that bank_init seeded and
bank_update_sectionwrite actionWrites the body of one level-two section, leaving the frontmatter, the title and every
bank_validatewrite actionRuns the rules the bank itself declares in dna/ — broken and missing derived_from, cycles,
Public scan report
scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it
- Code scan21 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 5 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Memorybank compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 93% of 48,243 servers
- Tools
- 16
- the typical server has 7
- Tools that change things
- 25%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 396
- more than 85% of 12,306 servers with a package
What its tools let an agent do: 12 read · 4 change
Release history: 2 versions in the registry since 2026-09-14, latest 2026-09-28, typically one every 14 days.
Install Memorybank in Claude Code, Cursor or VS Code
Runs npx -y @maxweb4u/mcp-memorybank on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add memorybank -- npx -y @maxweb4u/mcp-memorybank
What the publisher says
From the Memorybank repository's README, as published. We do not edit it. Read it on GitHub
mcp-memorybank
An MCP server for a memory_bank knowledge base. It seeds one from nothing, gates every write against the rules the bank itself declares, routes to the right document without reading the bank, and reports where the code has moved on without the documents.
It writes nothing on its own initiative. Every document arrives from a deliberate call carrying a purpose, an upstream dependency and an index entry; what the end-of-session hook collects lands in a quarantine that only a human empties.
Spec — specification.md, plan — implementation-plan.md, what a seeded bank is made of and where it strains — architecture.md.
Everything in the plan is done: E0 index, E1 reads, E2 validation, E3 graph, E4 search and delta, E5 writes.
What it is measurably good at, and what it is not
Counted across six banks in real use, by parsing the sessions rather than by impression:
writing into the bank, through the server 985 calls
reading the bank, through the server 187 calls
reading the bank, around the server 1755 calls (cat, grep, Read)
bank_route specifically 33 callsThe writing half works. bankcreate, bankedit and bankupdatesection are used in every bank, with or without any instruction to do so, because writing a governed document by hand is harder than calling the tool: it would have to reproduce the frontmatter, resolve the derived_from, and register itself in a section index, and it would fail validation if it got any of that wrong. Ninety percent of all server calls are writes.
The reading half is mostly bypassed. Nine times out of ten an agent opens the bank with cat and grep instead of asking bank_route which documents matter. This is not a claim that routing answers badly — nobody has measured that. It is a claim that it does not get asked, because reaching for the shell is what a model does in every repository and nothing here outweighs the habit.
Two things follow, and neither is comfortable. Routing is the feature this README leads with and the one the token arithmetic below is built on, and it is the least used. Editing existing documents was written into the specification as something the server would not do — see §8 — and it turned out to be the half that carries the project.
The one lever with evidence behind it is the paragraph under Telling the agent to use it: the four banks that carry it route eight times more often than the two that do not, 32% of reads against 4%. That is a correlation across six projects, and it is being tested properly — see A-06 in backlog.md.
How it works
There is no database, no daemon and no configuration. A directory of markdown files is the entire state, and the server is a reader of it that happens to speak MCP. Everything it knows it re-derives from the files; delete its process and nothing is lost, because nothing was ever kept anywhere else.
The index, and why there is no watcher
On startup the server walks the bank once, and on every call it walks it again: readdir, stat, and a parse only for the files whose mtime moved. A cold build of a 368-document bank takes about 85 ms; the walk before an unchanged call costs 11–13 ms.
That is why there is no file watcher. A watcher would save those milliseconds and buy an error class in exchange — an index that has quietly diverged from the disk, in a tool whose whole job is to be trusted about what the disk says. The cheap check wins on both counts.
What a document becomes
Each file is parsed once into a record: the frontmatter fields, the second-level section headings with their line spans, byte size, mtime — and one thing the file does not contain, a layer computed from the path (dna, knowledge, decision, delivery, flow, inbox, other).
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Memorybank: common questions
- Is Memorybank MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Memorybank safety report
- How do I install Memorybank?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Memorybank need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Memorybank maintained?
- The last commit was 38 days ago (2026-09-28). The latest release is v0.3.2.
- What can I use instead of Memorybank?
- Servers from other publishers that do the same job: Codebase Memory MCP server and Neo4j Memory MCP server.
- How does Memorybank compare with other MCP servers?
- safety score 92/100 (higher than 93% of 48,243 servers); tools 16 (the typical server has 7); tools that change things 25% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Memorybank
Same job from other publishers: the closest match first, then the best rated.
- Codebase MemoryCodebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.not reviewedWidely usedC
- Neo4j MemoryMCP Neo4j Knowledge Graph Memory Servernot reviewedEstablishedA