Ariadne MCP server
io.github.mclaut/ariadne·v0.8.25·3 starsLocal-first agent memory with verified backup rotation and explicit project isolation.
3 stars
Reviews
Write oneNobody has reviewed Ariadne yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Ariadne tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-11-01 · same rubric, same numbers if you re-run it
- –Code scanpackage could not be scannedn/a
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 1 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Ariadne compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 80% of 4,460 AI and agents servers
- GitHub stars
- 3
- more than 75% of 2,711 AI and agents servers
Release history: 6 versions in the registry since 2026-08-24, latest 2026-10-30, typically one every 1 day.
Install Ariadne in Claude Code, Cursor or VS Code
The registry entry has no remote endpoint or installable package.
What the publisher says
From the Ariadne repository's README, as published. We do not edit it. Read it on GitHub
ariadne
English · Українська
A native, local-first, multilingual memory server for Codex, Claude Code, and any MCP client. Go + Qdrant + bge-m3 — no Docker, no cloud, no API keys.
Purpose-built for private coding-agent memory: a small native appliance rather than a hosted, multi-tenant memory platform. The default path is offline and cross-lingual, with observable retrieval cost and no account dependency.
Project site · Hugging Face Space · Latest release
Built as a replacement for embedded vector-DB memory backends that crash or starve under several concurrent MCP sessions. ariadne is a server: one Qdrant handles concurrent writes natively, so the whole single-writer / lock-starvation class simply doesn't exist.
What's New in v0.8.16
Fixed
tests are now platform-scoped while release archives retain a Windows-safe launcher stub, so every supported target builds and tests cleanly.
- Windows release checks include the launcher safely. The macOS behavior
Added in v0.8.15
Ariadne.app in the system Applications folder when writable, with a user-level ~/Applications fallback and a native project icon.
- Ariadne is now a real macOS application. The installer creates a signed
starts the existing tray LaunchAgent, re-registering its canonical plist when needed without creating an unmanaged duplicate process.
- One click restores the managed tray. Finder, Spotlight, or Launchpad now
Previously in v0.8.14
v0.8.14 detached the confirmed macOS update helper from tray shutdown and made the handoff observable in update.log.
Previously in v0.8.13
v0.8.13 makes a consolidation deadline safe deferred work rather than a maintenance failure, preserving every source diary with append-only deferred metadata.
Previously in v0.8.12
v0.8.12 bounded the maintenance supervisor, made schema-bound consolidation JSON deterministic for reasoning-capable Ollama models, and added exact, append-only owner-approved credential trust.
Previously in v0.8.11
v0.8.11 made the desktop tray truly single-instance, reconciled canonical and historical launchd ownership, preserved superseded plist files in an archive, and added real tray-process diagnostics.
Previously in v0.8.10
v0.8.10 made token attribution auditable with lossless Qdrant pagination, recallable-versus-history coverage, separated measured and estimated provenance, explicit gap classification, and safe opt-in attribution backfill.
Previously in v0.8.9
Fixed
process now uses one persistent gRPC connection instead of the client library's implicit pool of three, while the macOS launchd service receives an explicit 8192-file descriptor limit instead of inheriting 256.
- Qdrant remains available with many concurrent agent sessions. Each MCP
existing schema and creates only missing indexes. Real storage errors now fail startup instead of being silently ignored.
- Startup no longer hammers payload-index creation. Ariadne inspects the
maintenance release their Qdrant connection when they finish.
- Every short-lived client closes cleanly. Hooks, import, install, and
Added
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Ariadne: common questions
- Is Ariadne MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Ariadne safety report
- Does Ariadne need an API key?
- No secret keys are declared. It reads 5 settings from the environment.
- Is Ariadne maintained?
- The last commit was 5 days ago (2026-10-30). The latest release is v0.8.25.
- What can I use instead of Ariadne?
- Servers from other publishers that do the same job: Basic Memory MCP server, Agent Recall MCP server and HOL Guard MCP server.
- How does Ariadne compare with other AI and agents MCP servers?
- safety score 88/100 (higher than 80% of 4,460 AI and agents servers); github stars 3 (more than 75% of 2,711 AI and agents servers). Full comparison.
Alternatives to Ariadne
Same job from other publishers: the closest match first, then the best rated.
- Basic MemoryLocal-first knowledge management with bi-directional LLM sync via Markdown files.not reviewedWidely usedB
- Agent RecallCorrection-first agent memory. Precision KPI tracks if agents heed warnings. 5 layers, local-only.not reviewedEstablishedA
- HOL GuardLocal-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.not reviewedEstablishedA
- Agent-Native ChatMinimal chat-first app with durable threads, actions, and the app-agent loopnot reviewedEstablishedA
- IWE (iwe.md)Markdown knowledge base as agent memory. Runs against the notes directory it is started in.not reviewedEstablishedA
