CortexPlus

by cortexplus.io · remote · no sign-in to list tools · v0.1.0 · published by io.cortexplus

Personal memory layer: files, notes, messages, tasks and email, semantically indexed.

Deletes · 1Changes · 6

Compare Registry entry

11 tools: 1 can delete or cancel things, 6 change things and 4 only read.

Scanned Oct 21, 2026

Deletes or cancels1Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things6Claude Code: ask: see these tools
Only reads4Claude Code: allow: see these tools

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http cortexplus https://mcp.cortexplus.io/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

11 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

save_contextSave a handoff summary of this conversation to the user's CortexPlus memory so it can be resumed later in another AI platform.No findings
Why it is in this group
- The name "save_context" says "save": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Save a handoff summary of this conversation to the user's CortexPlus memory so it can be resumed later in another AI platform. Write the summary yourself, in Markdown, covering: objective, decisions taken, current state, artifacts, next steps and constraints. Do not paste the raw transcript. Never include passwords, API keys or tokens.
Annotations the server declares
- title: Save context pack
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

connectComplete the CortexPlus connection with the 6-digit code the user received by email after signup.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Complete the CortexPlus connection with the 6-digit code the user received by email after signup. Ask the user for the code, then call this tool with the same email used in signup; never guess or invent the code. The response includes an API key that the AI platform should save in its CortexPlus connector configuration.
Annotations the server declares
- title: Connect CortexPlus
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
memorySave a memory in CortexPlus.No findings
Why it is in this group
- The description's first verb is "save": a word for a change.
Description, as the server wrote it
Save a memory in CortexPlus. CortexPlus decides whether it is a note, task, or reminder and extracts the client.
Annotations the server declares
- title: Save memory
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
recallBuild a context block from the user's CortexPlus memory: the passages that answer a question plus their graph neighbours, already formatted as text.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Build a context block from the user's CortexPlus memory: the passages that answer a question plus their graph neighbours, already formatted as text. Prefer this over search when you intend to answer from the user's memory. Health data (`saude` tag) is only included when the user has enabled sharing it with AI assistants in CortexPlus settings.
Annotations the server declares
- title: Recall context
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
rememberStore a note in the user's CortexPlus memory so future conversations can recall it.No findings
Why it is in this group
- The description's first verb is "store": a word for a change.
Description, as the server wrote it
Store a note in the user's CortexPlus memory so future conversations can recall it.
Annotations the server declares
- title: Remember
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
resumeLoad a previously saved CortexPlus context pack to resume work started in another AI conversation.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Load a previously saved CortexPlus context pack to resume work started in another AI conversation.
Annotations the server declares
- title: Resume context pack
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
signupCreate a CortexPlus account, or begin signing in to an existing one, so this conversation can use CortexPlus as the user's long-term memory and knowledge base.No findings
Why it is in this group
- The description's first verb is "create": a word for a change.
Description, as the server wrote it
Create a CortexPlus account, or begin signing in to an existing one, so this conversation can use CortexPlus as the user's long-term memory and knowledge base. Ask the user for their email address, and for their name if you do not already have it, then call this tool. CortexPlus sends them a 6-digit code by email; ask the user for that code and call connect with it and the same email. Never guess or invent the email address.
Annotations the server declares
- title: Create CortexPlus account
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true

Only reads 4Looks things up and changes nothing.Claude Code: allow

context_packsList saved CortexPlus context packs, optionally filtered by AI platform.No findings
Why it is in this group
- The description's first verb is "list": a word for reading.
Description, as the server wrote it
List saved CortexPlus context packs, optionally filtered by AI platform.
Annotations the server declares
- title: List context packs
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
fetchRetrieve the full content of one CortexPlus memory item by id, as returned by search.No findings
Why it is in this group
- The name "fetch" says "fetch": a word for reading.
Description, as the server wrote it
Retrieve the full content of one CortexPlus memory item by id, as returned by search. Health data (`saude` tag) is only included when the user has enabled sharing it with AI assistants in CortexPlus settings.
Annotations the server declares
- title: Fetch memory item
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
searchSearch the user's CortexPlus memory and return ranked matches.No findings
Why it is in this group
- The name "search" says "search": a word for reading.
Description, as the server wrote it
Search the user's CortexPlus memory and return ranked matches. Use this to find what the user has stored before answering from memory. Health data (`saude` tag) is only included when the user has enabled sharing it with AI assistants in CortexPlus settings.
Annotations the server declares
- title: Search memory
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
tasksList open CortexPlus tasks and reminders, optionally filtered by client.No findings
Why it is in this group
- The description's first verb is "list": a word for reading.
Description, as the server wrote it
List open CortexPlus tasks and reminders, optionally filtered by client.
Annotations the server declares
- title: List tasks
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http cortexplus https://mcp.cortexplus.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__cortexplus__search",
      "mcp__cortexplus__fetch",
      "mcp__cortexplus__tasks",
      "mcp__cortexplus__context_packs"
    ],
    "ask": [
      "mcp__cortexplus__recall",
      "mcp__cortexplus__remember",
      "mcp__cortexplus__memory",
      "mcp__cortexplus__resume",
      "mcp__cortexplus__signup",
      "mcp__cortexplus__connect"
    ],
    "deny": [
      "mcp__cortexplus__save_context"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as cortexplus. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.cortexplus/cortexplus/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 18:13 UTC.

For agents: Markdown · JSON · report this listing