MCP.Market

Fireweed MCP server

by Starksood·io.github.Starksood/fireweed-mcp·v0.5.0·5 stars

Agent memory where every fact carries a receipt, and deletion is provable.

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
Growing

5 stars29 downloads/wk

Reviews

Write one

Nobody has reviewed Fireweed yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Fireweed tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it

no findings
  • Code scan51 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 63 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Fireweed compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 80% of 4,461 AI and agents servers
GitHub stars
5
more than 78% of 2,713 AI and agents servers
Downloads a week
29
more than 15% of 1,554 AI and agents servers with a package

Install Fireweed in Claude Code, Cursor or VS Code

claude mcp add fireweed-mcp -- uvx fireweed-mcp
Add to Cursor

What the publisher says

From the Fireweed repository's README, as published. We do not edit it. Read it on GitHub

fireweed-mcp

<!-- mcp-name: io.github.Starksood/fireweed-mcp -->

Agent memory where every fact carries a receipt.

remember(claim    = "Priya joined Acme in 2019 under duress.",
         evidence = "Priya Raman joined Acme in 2019 as a logistics analyst.")

REFUSED (asserts_more_than_evidence) — the claim adds something the evidence does not say.
  claim   : Priya joined Acme in 2019 under duress.
  evidence: Priya Raman joined Acme in 2019 as a logistics analyst.
recall("Priya's salary")

ABSTAINED (unknown_predicate) — no claims ground "salary"; 1 claim about Priya Raman exists
This is a refusal, not an empty result.
forget("Priya")

ERASED Priya Raman — certificate issued
  signature            : hmac-sha256:f4d0768ef3b0fec624afec12f25bfd91…
  nodes in closure     : 1
  every probe abstains : True
  bystanders surviving : 1

That last one is the artifact behind "delete me from your agent's memory — and prove it."

Install

uvx fireweed-mcp          # try it
pip install fireweed-mcp  # keep it
claude mcp add fireweed -- uvx fireweed-mcp

No dependencies. No API keys. No model — nothing in this server calls an LLM.

What it does

Why the refusals are the point

Most memory servers store what the model says and return what's nearest. This one adjudicates.

The rule is the model proposes, deterministic code decides. Across an RPC boundary that stops being a slogan: your agent is the proposer, and it cannot talk its way past the gate, because the gate is not a prompt. Pass a claim and the text you're quoting; pure functions check that the evidence names the subject, preserves the relation, invents no numbers, and asserts nothing the span doesn't say. What survives is stored with a byte range into the source.

Then anyone can check it afterwards — including someone who trusts neither your agent nor this server. That is the whole product.

What it does NOT do

Stated up front, because this project's last headline number turned out to be measuring nothing (see the retraction, which ships with a script that proves it):

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Fireweed: common questions

Is Fireweed MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the Fireweed safety report
How do I install Fireweed?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Fireweed need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Fireweed maintained?
The last commit was 69 days ago (2026-08-28). The latest release is v0.5.0.
What can I use instead of Fireweed?
Servers from other publishers that do the same job: Basic Memory MCP server, IWE (iwe.md) MCP server and Memanto MCP server.
How does Fireweed compare with other AI and agents MCP servers?
safety score 88/100 (higher than 80% of 4,461 AI and agents servers); github stars 5 (more than 78% of 2,713 AI and agents servers); downloads a week 29 (more than 15% of 1,554 AI and agents servers with a package). Full comparison.

Alternatives to Fireweed

Same job from other publishers: the closest match first, then the best rated.

  • Basic Memory
    Local-first knowledge management with bi-directional LLM sync via Markdown files.
    B
  • IWE (iwe.md)
    Markdown knowledge base as agent memory. Runs against the notes directory it is started in.
    A
  • Memanto
    MCP server for Memanto - persistent semantic memory for any MCP-compatible agent
    A
  • Emilia Protocol
    Exact-action approval for consequential agent actions: request, track, and verify signed receipts.
    B
  • Mnemoverse Memory
    Hosted agent memory that learns from outcomes, with shared rooms. No key: mcp.mnemoverse.com/mcp
    A