Session Forge — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Session Forge (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<!-- mcp-name: io.github.420247jake/session-forge -->
Never start from zero. Persistent session intelligence for AI coding assistants.
Session-forge gives your AI coding assistant memory that survives across sessions. It tracks decisions, dead ends, user preferences, and session state — so every conversation builds on the last one instead of starting from scratch.
Works with Claude Code, Cursor, Windsurf, and any MCP-compatible client.
claude mcp add session-forge -- npx session-forgeAdd to your MCP settings:
{
"mcpServers": {
"session-forge": {
"command": "npx",
"args": ["-y", "session-forge"]
}
}
}That's it. No database, no Docker, no config files.
| Tool | Description | Required |
|---|---|---|
session_checkpoint | Save work-in-progress state for crash recovery | task, intent, next_steps |
session_restore | Check for interrupted work from a previous session | — |
session_complete | Archive session and mark complete | — |
| Tool | Description | Required |
|---|---|---|
profile_get | Get the current user profile | — |
profile_update | Update name, preferences, projects, or notes | — |
| Tool | Description | Required |
|---|---|---|
journal_entry | Record session summary with breakthroughs and frustrations | summary |
journal_recall | Retrieve recent session journals | — |
| Tool | Description | Required |
|---|---|---|
decision_record | Log a significant decision with alternatives and reasoning | choice, reasoning |
decision_search | Search past decisions by keyword (supports limit param) | query |
| Tool | Description | Required |
|---|---|---|
dead_end_record | Log a failed approach and the lesson learned | attempted, why_failed |
dead_end_search | Search past dead ends to avoid repeating mistakes (supports limit param) | query |
| Tool | Description | Required |
|---|---|---|
full_context_recall | Get everything — profile, journals, decisions, dead ends. Supports optional project filter. | — |
| Tool | Description | Required |
|---|---|---|
data_manage | Prune old entries, export all data, clear stores, or view stats | action |
data_list | Browse stored entries with numbered summaries. Supports search filter. | store |
data_delete | Delete a specific entry by index from data_list output | store, entry_index |
`data_manage` actions:
stats — entry counts and schema versions for all storesexport — dump all data as JSONprune — remove entries older than N days (default: 90)clear — wipe a specific store (journal, decisions, dead_ends, profile, or all)`data_list` + `data_delete` workflow:
data_list with store="decisions" — see numbered list of all decisionsdata_list with store="decisions", query="minecraft" — filter by keyworddata_delete with store="decisions", entry_index=3 — remove entry #3 from the list| session-forge | Basic memory MCPs | Enterprise tools | |
|---|---|---|---|
| Setup | npx session-forge | Varies | Docker + databases |
| Dead end tracking | Yes | No | No |
| Decision logging | Yes | No | Some |
| Session crash recovery | Yes | Some | Yes |
| Data management | Yes | No | Some |
| User profile | Yes | Some | No |
| Dependencies | 2 (SDK + zod) | Varies | 5-10+ |
| Infrastructure | Zero (plain JSON) | SQLite/ONNX/Vector DB | PostgreSQL + Redis |
| Tools | 15 focused | 4-9 | 37+ |
| Variable | Default | Description |
|---|---|---|
SESSION_FORGE_DIR | ~/.session-forge or %APPDATA%\session-forge | Override data storage location |
SESSION_FORGE_STALE_HOURS | 24 | Hours before an inactive session is auto-archived |
All data is stored locally as plain JSON files:
| Platform | Location |
|---|---|
| Linux / macOS | ~/.session-forge/ |
| Windows | %APPDATA%\session-forge\ |
Override with the SESSION_FORGE_DIR environment variable:
SESSION_FORGE_DIR=/custom/path npx session-forgeFiles:
~/.session-forge/
profile.json # User preferences and projects
journal.json # Session summaries (last 100)
decisions.json # Decision log (last 200)
dead-ends.json # Failed approaches (last 100)
sessions/
active.json # Current checkpoint
history/ # Archived sessionsData files include a schema_version field for future migration support.
Add this to your project's CLAUDE.md to teach the AI when to call each tool:
## Session Flow
### Fresh session
1. Call `full_context_recall` — get profile, journals, decisions, dead ends
2. Call `session_restore` — check for interrupted work
### During work
- `decision_record` — when making a significant architectural choice
- `dead_end_record` — when something fails and we learn why
- `session_checkpoint` — every 10-15 tool calls during long sessions
### Session end
1. Call `journal_entry` — record what happened
2. Call `session_complete` — archive the checkpointrelated_dead_ends and led_to_decision fieldsfull_context_recall can read your MEMORY.md and suggest decisions/dead ends that should be saved to memoryerrors_encountered, key_findings, decisions_made, dead_ends_hitlinks.js, search.js, stats.js, migrate.jsdata_list tool — browse stored entries with numbered summaries, optional search filterdata_delete tool — surgically remove individual entries by indexdata_manage tool (stats, export, prune by age, clear per-store)project filter to full_context_recalllimit param to decision_search and dead_end_searchSESSION_FORGE_STALE_HOURSschema_version to data files for future migration supportMIT
session-forge is NOT affiliated with SessionForge LLC (sessionforge.dev).
session-forge was first published on npm on February 7, 2026 — before SessionForge LLC appeared. We have no connection to their product or company.
Here's why this matters: session-forge stores all your data locally on your machine as plain JSON files. Nothing leaves your computer. No accounts, no servers, no third parties.
Any service asking you to route your AI session data, coding habits, and terminal access through their servers should make you ask: who has access to that data, and what are they doing with it?
Your workflow, your decisions, your code — that's yours. It should stay on your machine, under your control. That's how session-forge was built and that's how it will stay.
Built by Jacob Terrell
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.