Fireweed MCP server
io.github.Starksood/fireweed-mcp·v0.5.0·5 starsAgent memory where every fact carries a receipt, and deletion is provable.
5 stars29 downloads/wk
Reviews
Write oneNobody has reviewed Fireweed yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Fireweed tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it
- Code scan51 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 63 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Fireweed compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 80% of 4,461 AI and agents servers
- GitHub stars
- 5
- more than 78% of 2,713 AI and agents servers
- Downloads a week
- 29
- more than 15% of 1,554 AI and agents servers with a package
Install Fireweed in Claude Code, Cursor or VS Code
claude mcp add fireweed-mcp -- uvx fireweed-mcp
What the publisher says
From the Fireweed repository's README, as published. We do not edit it. Read it on GitHub
fireweed-mcp
<!-- mcp-name: io.github.Starksood/fireweed-mcp -->
Agent memory where every fact carries a receipt.
remember(claim = "Priya joined Acme in 2019 under duress.",
evidence = "Priya Raman joined Acme in 2019 as a logistics analyst.")
REFUSED (asserts_more_than_evidence) — the claim adds something the evidence does not say.
claim : Priya joined Acme in 2019 under duress.
evidence: Priya Raman joined Acme in 2019 as a logistics analyst.recall("Priya's salary")
ABSTAINED (unknown_predicate) — no claims ground "salary"; 1 claim about Priya Raman exists
This is a refusal, not an empty result.forget("Priya")
ERASED Priya Raman — certificate issued
signature : hmac-sha256:f4d0768ef3b0fec624afec12f25bfd91…
nodes in closure : 1
every probe abstains : True
bystanders surviving : 1That last one is the artifact behind "delete me from your agent's memory — and prove it."
Install
uvx fireweed-mcp # try it
pip install fireweed-mcp # keep itclaude mcp add fireweed -- uvx fireweed-mcpNo dependencies. No API keys. No model — nothing in this server calls an LLM.
What it does
Why the refusals are the point
Most memory servers store what the model says and return what's nearest. This one adjudicates.
The rule is the model proposes, deterministic code decides. Across an RPC boundary that stops being a slogan: your agent is the proposer, and it cannot talk its way past the gate, because the gate is not a prompt. Pass a claim and the text you're quoting; pure functions check that the evidence names the subject, preserves the relation, invents no numbers, and asserts nothing the span doesn't say. What survives is stored with a byte range into the source.
Then anyone can check it afterwards — including someone who trusts neither your agent nor this server. That is the whole product.
What it does NOT do
Stated up front, because this project's last headline number turned out to be measuring nothing (see the retraction, which ships with a script that proves it):
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Fireweed: common questions
- Is Fireweed MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Fireweed safety report
- How do I install Fireweed?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Fireweed need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Fireweed maintained?
- The last commit was 69 days ago (2026-08-28). The latest release is v0.5.0.
- What can I use instead of Fireweed?
- Servers from other publishers that do the same job: Basic Memory MCP server, IWE (iwe.md) MCP server and Memanto MCP server.
- How does Fireweed compare with other AI and agents MCP servers?
- safety score 88/100 (higher than 80% of 4,461 AI and agents servers); github stars 5 (more than 78% of 2,713 AI and agents servers); downloads a week 29 (more than 15% of 1,554 AI and agents servers with a package). Full comparison.
Alternatives to Fireweed
Same job from other publishers: the closest match first, then the best rated.
- Basic MemoryLocal-first knowledge management with bi-directional LLM sync via Markdown files.not reviewedWidely usedB
- IWE (iwe.md)Markdown knowledge base as agent memory. Runs against the notes directory it is started in.not reviewedEstablishedA
- MemantoMCP server for Memanto - persistent semantic memory for any MCP-compatible agentnot reviewedEstablishedA
- Emilia ProtocolExact-action approval for consequential agent actions: request, track, and verify signed receipts.not reviewedEstablishedB
- Mnemoverse MemoryHosted agent memory that learns from outcomes, with shared rooms. No key: mcp.mnemoverse.com/mcpnot reviewedEstablishedA