Statecore MCP server
Auditable memory for coding agents: evidence chains, supersession history, keyless embedded SQLite
1 stars51 downloads/wk
Reviews
Write oneNobody has reviewed Statecore yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Statecore tools (5)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
factsList everything currently believed about this project, grouped, with fact ids. Use to review or audit the memory.
forgetSuppress a fact by factKey. The record is retired, not deleted \u2014 the audit chain is preserved.
recallRetrieve project memory relevant to a query, packed into a character budget. Returns the distilled digest, believed facts, recent events, and a budget report of what was left out. Call at the start of a session or before relying on past context.
rememberStore a durable fact about this project or user. Use for preferences, decisions, constraints, and anything worth knowing next session. Deterministic and audit-tracked. Notes (the default path) are capped at 500 characters; pass consolidate=true for longer conversational context, accepted up to 2000 characters and distilled in the background.
whyExplain why a fact is believed: its source evidence and the full version chain, including superseded and retired versions. Pass a factId from facts or recall.
Public scan report
scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it
- Code scan3 source files scanned15/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 24 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (2)
- mediumnpm install lifecycle script present
install.script - mediumnpm install lifecycle script present
install.scriptpackage.json: …re-publish.mjs && pnpm run bundle", "postinstall": "node scripts/postinstall.mjs" }, "…
What the publisher says
From the Statecore repository's README, as published. We do not edit it. Read it on GitHub
StateCore
Auditable memory for coding agents and AI systems. Every fact StateCore holds carries its evidence, its version chain, and a recorded reason for every discard — so "why do you believe this, and what did you believe before?" always has an answer.
StateCore is a self-hosted, low-drift long-term memory runtime for local or BYO models. It turns memory from accumulated text into governed state: events are ingested, run through a deterministic digest pipeline, and merged into protected stable state. The LLM proposes; the pipeline decides.
Try it in 30 seconds
No server, no signup, no model key — one SQLite file over MCP:
claude mcp add statecore -- npx -y statecore-mcp # Claude Coderemember a decision in one session, ask why in the next: you get the fact, the evidence behind it, and its version history — superseded and retired facts stay on the record, marked, never deleted. And sessions hand off across vendors: handoff records where one session stopped, and the next one — Claude Code, Codex, Cursor, any MCP client on the same project — receives it at the top of recall, with every earlier stop-point still on the audit chain. Configs for Cursor, dsh, and every other MCP host: apps/mcp/README.md.
Capture is easy. Trust is hard.
Most agent-memory tools compete on capturing more — hook every event, compress the transcript, inject it back. Capture is the solved half of the problem. The unsolved half is what those tools' own issue trackers are full of: memories that silently stop being written, stale decisions injected as if still current, cross-project leakage, and no way to audit or repair what the store believes. That is not a rhetorical claim — docs/prior-art-failure-modes.md cites the verified issues, by number, across five systems.
StateCore is built for that second half:
- Nothing is silently lost. Every discard is logged against a fixed set of reasons; every replaced fact keeps a supersededBy chain; retired facts are marked, never deleted.
- Nothing is silently believed. Writes go through a deterministic pipeline with consistency gates — an LLM proposal alone cannot promote itself into stable state.
- Nothing degrades silently. A failed digest carries degraded; the budget reports what it refused; retrieval reports which embedding stages failed and derives its mode from what actually ran, not from what was configured.
- Everything is checkable. why returns a fact's evidence and full version history; a digest's selection report shows exactly what it kept and dropped.
How this compares to other memory systems, mechanism by mechanism: docs/why-auditable.md.
Features
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Install directly
Runs npx -y statecore-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add statecore-mcp -- npx -y statecore-mcp
Statecore: common questions
- Is Statecore MCP server safe?
- With care: it is graded C, so read the findings first (68/100). Read the Statecore safety report
- How do I install Statecore?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does Statecore need an API key?
- Yes. The registry entry asks for
MODEL_API_KEY. - Is Statecore maintained?
- The last commit was 25 days ago (2026-08-30). The latest release is v0.1.2.
- What can I use instead of Statecore?
- Servers from other publishers that do the same job: Myc MCP server, skillmem MCP server and Memory Arbiter MCP server. Compare all Statecore alternatives.
Alternatives to Statecore
Same job from other publishers: the closest match first, then the best rated.
- MycTask queue, decisions and memory for coding agents. Local SQLite, no network. Requires Bun.not reviewedGrowingC
- skillmemSkill memory for coding agents: learn, recall, reinforce, decay. Local SQLite, no API key.not reviewedGrowingA
- Memory ArbiterLocal SQLite MCP memory: evidence-based recall, advisory conflict notices, authorized governance.not reviewedGrowingA
- remem-mcp — Local-first MCP Memory + CodeGraph + WikiLocal-first memory for AI coding agents. Memory + CodeGraph + Wiki in one SQLite file.not reviewedGrowingB
- Titen MemoryEvidence-grounded agent memory with mandatory provenance, on local SQLite or Cloudflare D1not reviewedGrowingB