MemoryRouter
by memoryrouter.ai · remote · no sign-in to list tools · v1.1.0 · published by ai.memoryrouter
Persistent AI memory shared across Claude, ChatGPT, coding agents, and compatible MCP clients.
10 tools: 2 can delete or cancel things, 3 change things and 5 only read.
Scanned Oct 21, 2026
- Deletes or cancels2Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things3Claude Code: ask: see these tools
- Only reads5Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http memoryrouter https://mcp.memoryrouter.ai/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
10 tools
Deletes or cancels 2Claude Code: deny
delete_memoriesUse this only when the user explicitly asks to delete specific memories and confirms after seeing what will be deleted.No findings
Why it is in this group
- The name "delete_memories" says "delete": a word for removing or ending something.
- The description says "Permanently deletes".
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Use this only when the user explicitly asks to delete specific memories and confirms after seeing what will be deleted. Permanently deletes the identified memories from the connected vault by their ids from search or inspect results. Deleting a raw memory does not delete reflections built from it. This cannot be undone. For deleting everything, forget_all_memories is the separate whole-vault tool.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: true
- idempotentHint: true
forget_all_memoriesUse this only after the user explicitly requests a full-vault deletion, receives a permanent whole-vault warning, and provides the exact confirmation phrase in a later turn.No findings
Why it is in this group
- The description says "Permanently deletes".
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Use this only after the user explicitly requests a full-vault deletion, receives a permanent whole-vault warning, and provides the exact confirmation phrase in a later turn. Permanently deletes every memory in the OAuth-selected vault. This cannot delete one memory; use delete_memories for specific items. Requires separate memories:delete authorization and destructive host confirmation.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: true
- idempotentHint: true
Changes things 3Claude Code: ask
commit_reflectionsUse this to complete a consolidation started with consolidate_memories.No findings
Why it is in this group
- The name "commit_reflections" says "commit": a word for a change.
Description, as the server wrote it Use this to complete a consolidation started with consolidate_memories. Submits the reflection entries you wrote for the checked-out batch. Each entry is standalone prose with an importance rating from 1 to 10. The server stores the reflections, links them to their source memories, and marks the sources consolidated. Safe to retry: committing the same batch twice returns the original result.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
consolidate_memoriesUse this when the user asks to consolidate, reflect on, or organize their memories, or when memory_status or a search result reports that consolidation is available.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Use this when the user asks to consolidate, reflect on, or organize their memories, or when memory_status or a search result reports that consolidation is available. Checks out a batch of unconsolidated memories from the connected vault under a 15 minute lease and returns their texts plus server instructions for writing reflection entries. Follow the returned instructions to write the entries, then call commit_reflections with the batch_id. Nothing is modified until commit.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: false
store_memoryUse this only when the user explicitly asks to remember something or confirms a proposed durable fact.No findings
Why it is in this group
- The name "store_memory" says "store": a word for a change.
Description, as the server wrote it Use this only when the user explicitly asks to remember something or confirms a proposed durable fact. Saves concise user-approved content to the OAuth-selected vault; do not use it for silent conversation capture.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: false
Only reads 5Claude Code: allow
date_search_memoriesUse this to retrieve memories from a specific time window, for questions like 'what happened last week' or 'most important things this month or lately'.No findings
Why it is in this group
- The name "date_search_memories" says "search": a word for reading.
Description, as the server wrote it Use this to retrieve memories from a specific time window, for questions like 'what happened last week' or 'most important things this month or lately'. Tier guide: tier 3 holds the highest-level consolidated reflections (identity, principles, what matters most), tier 2 holds reflections of specific meaningful events, tier 1 holds raw verbatim memories. Match filters to the question. Time-bounded 'most important things last month' questions: tiers [3], importance 8 or higher, generous max_tokens. Big-picture overviews of a period like 'what do you know about July': tiers [3] with no importance filter. Specific lookups in a window like 'find the decision about X': omit tiers to include all tiers and leave importance unset; a high importance filter hides the specific detail you are looking for. Specific meaningful events without raw noise: tiers [2] or [2, 3]. Exact verbatim detail: if the detail is not already in context, drill down by lineage: search tiers [3] to find the relevant thread, then use inspect_memory on the result to see the tier 2 reflections it consolidated, then inspect those to reach the raw memories underneath. Direct tiers [1] search works when you know exact wording to match. Mixing tiers is legitimate; adjust the importance threshold to the question rather than always setting it high. Only reflections (tiers 2 and 3) carry importance ratings. Omit query for a chronological review; include query to rank by relevance within the window. Resolve relative phrases like 'lately' to concrete ISO dates before calling. Reads only the OAuth-selected vault and does not modify it.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
inspect_memoryUse this when the user asks why the assistant believes something, or wants to see the source memories behind a reflection.No findings
Why it is in this group
- The name "inspect_memory" says "inspect": a word for reading.
Description, as the server wrote it Use this when the user asks why the assistant believes something, or wants to see the source memories behind a reflection. Given a memory id from a search result, returns the lower-tier memories that reflection was built from, or, for a raw memory, which reflections it was consolidated into. Use repeatedly to drill down from a high-level reflection to the tier 2 reflections and raw memories beneath it. Read only.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
memory_statusUse this when the user asks whether MemoryRouter is connected, which opaque vault binding is active, or how many memories/tokens the connected vault contains.No findings
Why it is in this group
- The name "memory_status" says "status": a word for reading.
Description, as the server wrote it Use this when the user asks whether MemoryRouter is connected, which opaque vault binding is active, or how many memories/tokens the connected vault contains. Does not reveal the memory key.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
searchUse this legacy compatibility alias when a client explicitly requests a tool named search.No findings
Why it is in this group
- The name "search" says "search": a word for reading.
Description, as the server wrote it Use this legacy compatibility alias when a client explicitly requests a tool named search. It searches the OAuth-selected MemoryRouter vault without modifying it. For normal ChatGPT recall, prefer search_memories; this tool does not provide citable item permalinks or Company Knowledge fetch support.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
search_memoriesUse this when the user asks about a prior decision, preference, person, project, or other fact that may be in their connected MemoryRouter vault.No findings
Why it is in this group
- The name "search_memories" says "search": a word for reading.
Description, as the server wrote it Use this when the user asks about a prior decision, preference, person, project, or other fact that may be in their connected MemoryRouter vault. Semantically searches only the OAuth-selected vault and does not modify it. Tier guide: tier 3 holds the highest-level consolidated reflections (identity, principles, what matters most), tier 2 holds reflections of specific meaningful events, tier 1 holds raw verbatim memories. Match filters to the question. Broad 'most important things we have done' questions: tiers [3], importance 8 or higher, large limit such as 250. Big-picture overviews like 'what do you know about this area or period': tiers [3] with no importance filter. Specific lookups like 'find the decision about X': omit tiers to search all tiers blended and leave importance unset; a high importance filter hides the specific detail you are looking for. Specific meaningful events without raw noise: tiers [2] or [2, 3]. Exact verbatim detail: if the detail is not already in context, drill down by lineage: search tiers [3] to find the relevant thread, then use inspect_memory on the result to see the tier 2 reflections it consolidated, then inspect those to reach the raw memories underneath. Direct tiers [1] search works when you know exact wording to match. Mixing tiers is legitimate; adjust the importance threshold to the question rather than always setting it high. Only reflections (tiers 2 and 3) carry importance ratings. For time-window questions like 'what happened last week' or 'lately' use date_search_memories instead.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http memoryrouter https://mcp.memoryrouter.ai/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__memoryrouter__search_memories",
"mcp__memoryrouter__date_search_memories",
"mcp__memoryrouter__memory_status",
"mcp__memoryrouter__inspect_memory",
"mcp__memoryrouter__search"
],
"ask": [
"mcp__memoryrouter__store_memory",
"mcp__memoryrouter__consolidate_memories",
"mcp__memoryrouter__commit_reflections"
],
"deny": [
"mcp__memoryrouter__forget_all_memories",
"mcp__memoryrouter__delete_memories"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as memoryrouter. Review it before you use it.