XMemo is answering right now. Last checked 4 min ago. 298 installs a week from npm. Last commit 30 Oct 2026.
Shared, governed long-term memory for AI agents across tools and sessions via MCP and REST.
We read the source, 2 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
state.excluded.push({ path: path.relative(root, path.join(current, entry.name)).split(path.sep).join('/'), reason: 'dependency or build directory' });
const SENSITIVE_NAMES = /(^\.env(?:\..*)?$|^\.npmrc$|^\.pypirc$|^\.netrc$|^id_(?:rsa|dsa|ecdsa|ed25519)$|secret|token|credential|private.?key|\.(?:pem|p12|pfx|key)$)/i;
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 4 min ago.
claude mcp add xmemo --transport http https://xmemo.dev/mcp
https://xmemo.dev/mcp
[mcp_servers.xmemo]
url = "https://xmemo.dev/mcp"
{
"mcpServers": {
"xmemo": {
"url": "https://xmemo.dev/mcp"
}
}
}
{
"servers": {
"xmemo": {
"type": "http",
"url": "https://xmemo.dev/mcp"
}
}
}
This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://xmemo.dev/mcp | streamable-http | sign-in | 909 ms | 4 min ago |
Persistent memory for AI coding tools via MCP. Remembers across sessions and machines.
Shared long-term memory vault for AI agents with 20 MCP tools.
Shared cross-LLM long-term memory over MCP: semantic recall, sessions, and media (pgvector).
Memory for AI agent teams across tools, sessions, repositories, and teammates.
Persistent memory for AI agents. Store, recall, and share knowledge across sessions.
Cross-session memory for AI coding agents via six tools; local-first SQLite store.
Git-backed long-term memory authority for AI agents via MCP.
Shared memory across devices, sessions, and agents for OpenClaw, Claude Code, and Codex.
Answers built from our own checks of this server.